Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
File: yd1CJDGXhku0gWRh1NBlOrC6Mro.mft (raw, json)
Hash identifier: 6IbqzPWDs005KcXdEtq/U6j0veHDNtrN5YWEUwtaZTw=
Subject key identifier: CB:D0:72:A8:67:2A:A5:3F:65:FD:D2:8E:50:E7:EF:DB:56:24:13:BE
Authority key identifier: C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
Certificate issuer: /CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Certificate serial: 0194BD179A8B7F469F92ED17D509725B1119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: sKW5v2bg-eASuutBZh0CS6XvA0c.roa (hash: RTFdNjg/wTloxfdOEoaa5K25++7OcHUzDE+24NBipvg=)
2: yd1CJDGXhku0gWRh1NBlOrC6Mro.crl (hash: B1rIrnHLmiS6roE4ELilNFF+3w08r7s3k3Xz5pD1Hck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9a:8b:7f:46:9f:92:ed:17:d5:09:72:5b:11:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=cbd072a8672aa53f65fdd28e50e7efdb562413be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:10:b3:15:4b:44:1f:85:00:11:57:69:33:
bd:b8:38:02:46:80:39:d4:8f:16:9f:4b:67:d0:48:
85:12:6d:3e:30:28:fa:60:d8:c0:75:6c:7a:9f:99:
cb:2c:3b:8f:26:bf:72:e5:d0:e4:16:74:68:f5:e2:
87:bb:f8:d7:df:3e:66:59:92:ff:e5:99:2f:d4:5f:
ea:4c:37:ff:fc:7f:64:c9:4f:f0:91:ec:0a:54:9e:
7a:26:97:fa:19:dc:96:67:dc:9d:51:80:d5:6f:21:
39:25:f5:a6:40:7c:5c:80:d7:62:f5:0c:88:10:df:
c7:eb:f9:eb:a3:f0:f6:bb:83:cb:13:87:d9:26:43:
05:c0:19:cb:ee:23:1e:66:56:e1:24:bd:7c:f5:49:
59:8b:7e:6e:f1:fa:57:ef:ab:6a:2b:16:a5:73:9b:
14:91:a4:89:8d:b8:3c:95:f5:f8:6c:ad:20:39:89:
e2:05:7c:d7:1a:ed:eb:37:33:c6:63:a1:3e:d6:0f:
2a:e6:7f:4c:27:97:76:2a:ea:1d:20:7d:aa:ad:55:
b5:12:ac:9d:0b:1b:23:14:ea:9f:80:07:c6:b6:e7:
9b:aa:27:ea:30:9d:d5:5a:13:43:42:b6:c2:93:4c:
d9:7b:4d:71:fe:1b:78:8c:4c:92:37:5c:11:c1:91:
e5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D0:72:A8:67:2A:A5:3F:65:FD:D2:8E:50:E7:EF:DB:56:24:13:BE
X509v3 Authority Key Identifier:
keyid:C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f8:4b:bb:94:75:1c:65:0c:6f:b1:ac:f7:ad:3c:85:11:28:
ea:4e:0c:0f:ef:70:3c:42:58:8d:31:19:b3:52:99:d5:ff:27:
ba:55:2f:4b:06:ce:b5:f1:8f:c0:1c:da:eb:fa:e6:78:3c:01:
22:99:9f:01:6e:82:e1:bb:d7:3b:96:95:69:58:34:22:28:3d:
b6:e5:87:1a:93:3b:4e:2c:3b:0c:60:77:8e:17:98:f8:8d:d0:
52:0a:ba:3f:8c:3b:f2:88:9c:3a:4f:2e:ee:06:b5:e1:39:98:
9e:7d:dc:5a:17:d1:2c:6a:9a:af:45:55:b8:9d:3e:4c:a5:f3:
16:68:5f:6f:e4:59:4c:54:73:c2:b4:11:a3:8d:46:61:99:df:
5a:37:10:53:d2:9b:f6:27:9d:1e:d8:66:ae:f1:af:45:82:05:
c3:64:aa:c8:2c:6c:50:88:ee:f1:1f:85:fb:84:fb:e6:5c:90:
36:11:55:51:36:69:0f:a7:5e:71:d0:3b:7a:e9:66:e7:d9:ef:
31:34:e2:92:0b:c4:b2:2c:b0:b3:33:f1:8c:32:e6:75:09:43:
f4:94:a7:d9:c7:7a:aa:55:20:e3:b0:b9:7c:2d:b6:a9:38:bf:
6b:e7:58:6e:f0:f6:00:ce:a8:22:b7:b4:43:23:a2:e3:eb:10:
6d:21:e0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:34:22 2025 by rpki-client