Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
File: yzJFVZQK5Rr10fQr1axxWGT6GCk.mft (raw, json)
Hash identifier: voBRqO48YqOXPQfpD9TbfFDhUZTPYvFkJdGn84XQm4o=
Subject key identifier: DF:91:F3:9C:6B:41:11:20:5E:A6:2D:81:1A:77:0E:89:E2:55:EA:16
Authority key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
Certificate issuer: /CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Certificate serial: 0194BCA9A804782727B958EDDA69FC9E0659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
Manifest number: 047B
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: ZOtgfqLDYdNWH5fYDhWkm9PND4Y.roa (hash: JwgLkVzCQiB/ULcLxd8PPGsr5tfW+toDKbyYKCvjGSc=)
2: by9kfZ4EbEKUVkVK0jeGqBsmfmk.roa (hash: LEv0S+P2XEMPTW4EvLdn5P/pRRYNUEDyCa7a7Tp2BTY=)
3: yzJFVZQK5Rr10fQr1axxWGT6GCk.crl (hash: gALP8Z6H6Xh6TUeMr1mAhG0SFIaXpCukBRaBILwVwp4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a8:04:78:27:27:b9:58:ed:da:69:fc:9e:06:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=df91f39c6b4111205ea62d811a770e89e255ea16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ea:d7:c0:22:e7:f3:01:7b:4d:00:d2:ba:2f:
13:14:63:20:c5:f3:c2:10:e8:50:43:3f:74:ae:8a:
00:7a:2a:75:e4:4e:1e:d9:f8:b8:6a:33:a6:96:41:
b4:8f:8a:53:1c:1b:2e:38:d9:2a:ac:a6:10:1d:78:
a5:89:0c:33:45:63:0d:30:36:51:65:da:06:e7:27:
1f:8d:66:d0:a1:0c:76:73:4d:a7:9a:63:17:b7:f0:
c7:57:4a:be:5a:67:ac:a7:b8:dd:a3:ae:cf:3f:ec:
2a:eb:ec:1c:05:75:c3:88:00:52:7e:ee:09:f3:3a:
f6:e1:98:dd:67:8d:d1:2c:6d:19:55:52:1e:76:cb:
49:38:11:ef:14:62:b0:3c:e3:ee:8b:a3:c4:29:fe:
04:60:09:a2:3d:f5:f2:07:ef:17:a0:0d:60:53:f1:
bc:22:dc:7b:db:67:ec:27:04:1d:61:df:f9:29:48:
ab:1b:fd:35:14:42:5a:e9:d3:f1:21:59:e8:86:c0:
7e:7a:2a:bd:ec:cb:e4:ca:53:d7:88:1c:be:59:e7:
7b:21:34:32:0d:5e:86:1a:2c:94:54:76:32:60:57:
f1:ea:9c:34:fb:b5:50:9d:f5:3b:54:31:0b:1c:1a:
11:1a:a4:5b:ec:a2:21:6c:8a:e1:94:a4:c8:36:b4:
bb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:91:F3:9C:6B:41:11:20:5E:A6:2D:81:1A:77:0E:89:E2:55:EA:16
X509v3 Authority Key Identifier:
keyid:CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:16:25:45:98:37:3b:4b:83:db:71:38:08:15:ed:bc:0d:92:
af:cf:a5:cc:77:10:2f:3d:f9:75:a9:60:7c:50:67:a7:24:f2:
ce:d2:76:3b:8e:be:ef:de:73:e2:93:ab:75:74:04:d5:58:22:
2e:c6:e5:61:c4:d7:26:3b:57:58:a8:9d:68:e9:b0:4e:ee:32:
fc:a5:e5:69:d1:1d:95:d4:98:f6:c2:1a:0a:25:70:a7:ba:84:
0e:90:00:94:0b:91:b4:48:5b:9d:25:ed:77:49:2a:88:bb:c2:
5f:18:94:20:f8:34:0d:92:c3:03:1c:01:37:bf:dc:17:8e:ca:
19:c0:2a:10:b4:48:59:9d:b6:1c:8e:77:6d:7a:8a:19:e3:53:
fe:46:46:48:9c:05:24:3d:2b:0a:20:0c:7c:ad:a5:87:e2:9c:
b2:8a:27:96:11:43:0f:d8:41:09:f4:eb:98:75:44:22:e4:a4:
ae:9a:d8:18:8c:53:55:7d:a8:91:21:77:31:6a:8a:9e:c8:4d:
17:61:fd:83:33:40:42:e2:f2:40:3d:7f:99:65:03:cc:f4:02:
2b:98:60:56:35:93:c8:c9:09:89:0c:9e:26:8c:ca:23:63:97:
e9:12:e6:67:70:ef:5d:ad:17:e7:94:6b:f7:fe:ed:a1:47:86:
79:96:40:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:17 2025 by rpki-client