Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
File: y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft (raw, json)
Hash identifier: fvVhEdvK/VjZ+zWXGMTMP68XKc/K6jJ40g0YGDNAKAI=
Subject key identifier: 31:B0:18:1A:9C:2E:7C:0E:2F:9A:EC:56:9B:DE:D2:9F:E7:C1:35:DF
Authority key identifier: CB:B5:25:E2:63:A9:5B:16:52:06:4B:DF:F8:96:4D:4B:F6:2B:53:3D
Certificate issuer: /CN=cbb525e263a95b1652064bdff8964d4bf62b533d
Certificate serial: 0194BD17B6509107DFB6793F778ED2039DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
Manifest number: DE
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: q6cfXUDveWHdgQWTYKqVwvvOAe0.roa (hash: BJPMM6GNYN6IqCj9i2G5fXzbZjuTVnz0OtAPd8t+eZk=)
2: y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl (hash: H+ypWoWWWz7VKshvkQZeTbtK93CYgZCjX3jrrLhsbcY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b6:50:91:07:df:b6:79:3f:77:8e:d2:03:9d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb525e263a95b1652064bdff8964d4bf62b533d
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=31b0181a9c2e7c0e2f9aec569bded29fe7c135df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ff:c3:97:68:e2:20:a5:4e:5c:c2:74:6d:b9:
78:b4:4b:fc:fd:a5:8d:2f:12:ae:74:85:a5:5c:2c:
85:47:01:6b:25:40:f6:1e:84:29:96:91:f1:d5:0d:
36:e1:bf:9f:68:1f:fd:ab:a8:8e:a9:61:ea:27:51:
06:96:34:c6:91:94:54:be:46:b7:95:85:65:06:5b:
ad:7d:2b:35:cd:dc:9f:99:0a:85:06:4d:c4:5b:40:
78:53:d2:52:ee:e4:4d:2c:9a:f2:72:49:d1:0d:33:
ef:4c:e2:aa:2e:ba:97:02:19:c6:81:dc:d6:20:33:
5f:94:ee:3a:aa:f1:dc:8c:ac:7a:ee:16:58:0e:af:
e8:94:ba:63:0a:14:d7:cd:bb:db:b5:48:e9:b3:38:
ad:14:7f:21:40:d4:e1:91:3d:32:67:9b:8a:45:ce:
3e:c0:ac:6f:89:ac:16:5f:7c:30:49:76:4c:a4:43:
98:e2:45:4c:12:ce:48:1e:20:9f:80:76:f1:6a:ef:
e1:50:81:12:e3:f6:fd:a9:2e:be:78:d3:9e:5c:db:
e5:9c:7b:8b:a9:68:16:2b:2a:0a:78:08:c9:b9:c2:
4d:3a:9d:bc:6e:9e:72:36:8a:f1:c5:a1:d3:2a:75:
94:fb:f1:1a:88:bb:15:ed:1f:0f:aa:72:60:f5:49:
be:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B0:18:1A:9C:2E:7C:0E:2F:9A:EC:56:9B:DE:D2:9F:E7:C1:35:DF
X509v3 Authority Key Identifier:
keyid:CB:B5:25:E2:63:A9:5B:16:52:06:4B:DF:F8:96:4D:4B:F6:2B:53:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3f:c1:4a:dc:e8:58:c6:d8:8f:5a:fd:26:b6:94:e6:a6:3f:
61:35:d8:55:24:d6:02:af:30:75:df:85:6e:78:64:05:9a:75:
40:6e:2e:ae:92:10:15:f8:3d:ae:76:53:40:dd:e6:3d:6d:8c:
2b:cf:fb:64:4b:5c:d1:e1:58:2a:c6:32:1b:e2:01:04:32:f9:
21:2a:f6:4f:6e:a6:0b:15:4c:51:8a:85:4b:64:11:97:57:40:
96:a6:7a:36:1a:59:0d:4b:08:5e:bf:15:e1:32:ac:9c:4b:44:
ce:f2:0e:7a:a0:61:08:07:a4:c6:ec:38:74:e9:8f:3c:21:e6:
aa:69:00:82:9d:e1:bc:7d:fe:c1:e1:0c:8a:e9:55:e0:21:e7:
91:d4:17:59:af:a3:40:dc:f2:cb:ef:89:0a:4b:62:e4:0c:67:
3b:34:52:b0:12:dd:2d:9f:af:a4:0c:b2:42:c8:d9:d9:8d:6a:
12:c8:09:e8:dd:1d:56:15:87:db:92:39:ad:63:e7:9c:06:1b:
f7:60:80:98:b4:12:7a:87:12:60:74:b5:91:6c:e8:ec:8c:96:
cd:a4:6d:54:e8:e1:da:cb:08:0d:d9:87:9c:0f:d6:22:2f:ef:
00:b2:73:7f:35:a4:12:6a:f6:0c:8d:60:ef:dd:04:7c:4b:67:
e9:77:0a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:04 2025 by rpki-client