Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
File: yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json)
Hash identifier: nQuaDT5leSSXpesvTb4HzZtKM626LgISH7KsEqjazG0=
Subject key identifier: 13:CC:22:3C:78:7E:7C:09:7B:05:38:3C:D7:73:E8:CF:2A:DC:BA:44
Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
Certificate issuer: /CN=c8184a4505b0576058fd333059bff153ae6ead5b
Certificate serial: 0194BC73035CC528A1569CDD6FE01BFDFCF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
Manifest number: 0B5F
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: nc-Ut0N4YEzlSxLCriwNW3L5bJY.roa (hash: CpEDv7qT3u78wfAAABUYzMXZLOCk+u5BsQilcshLjO0=)
2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: aSgs7FDRlY6/3PI/cpqMZbXQ0vBRXCqI+djjifflFBo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:03:5c:c5:28:a1:56:9c:dd:6f:e0:1b:fd:fc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=13cc223c787e7c097b05383cd773e8cf2adcba44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:69:8a:4e:04:be:4f:ef:f9:36:05:66:65:
ae:f6:19:9b:bd:f7:d4:39:54:b1:bb:58:df:09:99:
8a:1e:68:50:bf:ae:dd:b5:55:6a:4f:3c:2f:8f:38:
16:38:a7:1a:7c:34:d4:05:b1:54:78:3d:a8:c9:c3:
b4:6a:c9:45:61:28:07:6e:c4:c4:43:b3:74:57:66:
10:85:97:1e:a7:40:68:32:fb:88:e1:5b:61:35:d1:
17:f6:e9:6a:b4:d0:5c:98:60:e9:13:51:6a:2c:7b:
b0:d2:fc:5f:ff:b0:47:90:0e:76:90:31:ff:bd:d5:
d9:b7:ff:bc:d0:e0:38:5c:ad:72:74:5e:9a:9c:88:
e2:72:6c:6f:26:85:39:4c:0c:21:2c:08:ea:53:d0:
2b:dd:44:a4:54:32:15:36:e9:88:d6:aa:b5:d9:89:
53:c2:33:8b:55:76:b7:82:07:81:2b:1a:43:b6:f7:
d4:bd:c5:a4:8b:46:41:31:ed:00:d9:48:a6:a3:81:
cc:f9:4c:a2:b6:bf:35:d4:00:cc:2c:56:f8:b3:f5:
03:63:b7:55:0e:3d:fd:3b:2f:f8:5b:1a:27:e0:d2:
c0:fb:d7:be:07:11:d3:9e:0d:7c:e6:75:dd:00:41:
f5:14:29:53:9e:ed:59:59:f5:3f:5c:f4:30:cf:8f:
f3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CC:22:3C:78:7E:7C:09:7B:05:38:3C:D7:73:E8:CF:2A:DC:BA:44
X509v3 Authority Key Identifier:
keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:73:20:c6:49:8e:75:09:e5:cd:fb:f4:ea:4e:5e:f5:41:45:
5f:2b:14:d8:48:04:48:25:43:2b:61:10:0b:cc:55:67:4f:f9:
6f:59:0e:15:1d:49:9e:52:55:4c:3a:40:da:a0:7b:ac:b6:6c:
74:07:cf:51:b2:c5:cd:a1:f3:1e:09:e1:1d:23:40:1d:a6:53:
2f:3a:b8:a0:c6:3f:65:b0:40:0c:2c:f7:99:ab:6e:3a:ac:c2:
26:9a:4d:ab:81:62:f2:aa:31:ba:88:ba:f2:91:09:c9:3c:1f:
48:50:b1:d6:53:f7:f1:75:df:01:c3:67:53:ac:ff:9a:32:7c:
1c:a8:d8:63:61:3e:89:e1:52:f3:d0:6a:c4:a4:b2:48:12:a5:
31:93:64:cd:3d:d5:1e:c4:94:85:61:4b:11:6b:2a:d2:b9:b9:
80:9b:73:44:f5:38:a9:5b:46:ac:c6:59:e5:e3:d8:83:8f:f1:
cf:5f:d0:4b:14:fc:16:a5:c4:9d:e2:f0:86:da:50:98:8d:ec:
83:2f:a5:bf:13:70:53:ea:fd:38:43:88:29:65:64:10:bf:9b:
bd:f7:42:8b:ff:a5:58:ac:3c:82:33:e3:07:a3:e6:11:07:ed:
5a:13:ae:cb:6c:51:c5:ba:c6:62:b8:19:70:a1:f2:f7:cc:40:
7d:18:1c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:20 2025 by rpki-client