Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
File: y9QcwSHgy2CjqY2_crpNvWPuvp8.mft (raw, json)
Hash identifier: DiicI+pZ4bMquyPgP/WEK8iOYF5Uttgu+KJShjAWqGM=
Subject key identifier: 57:07:E1:80:79:9C:00:89:7A:70:16:FF:8B:C5:CE:A9:96:69:BC:20
Authority key identifier: CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
Certificate issuer: /CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Certificate serial: 0194BBCE52AEA3BBED6A95CBAED946182D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
Manifest number: 0C37
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: NH3eFCO2z6iD8tqKH5j3jRrAVkU.roa (hash: ZXJCvBm8BnALLLtPx8hXRUmbjYU517MofZBHTTPZwAM=)
2: drCHGsFCH9gtO7i946SJRwJLVRQ.roa (hash: aSAJUF+FTsSFxUy1oN30ReyG2kXTHEsA0T+WTdOGVN8=)
3: r7MeXBD4h2cagNO6Vs8Qg7deiiI.roa (hash: ojLWPczZy5cMPxT49AEzAQruFXc/LPul28QPHpbW6P8=)
4: y9QcwSHgy2CjqY2_crpNvWPuvp8.crl (hash: rkg3/PVq3bRNY5C7DkonggNGsMA5eogYBtWGv3QeoRc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:52:ae:a3:bb:ed:6a:95:cb:ae:d9:46:18:2d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=5707e180799c00897a7016ff8bc5cea99669bc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:27:d8:b7:97:6d:9c:03:4b:db:07:6b:01:2e:
a8:0b:4a:db:31:4d:9e:44:40:ba:54:2c:40:e2:08:
57:cb:6d:40:a1:58:d6:f9:6a:ba:b9:b0:63:7f:3b:
a6:aa:cb:e8:ff:d1:8a:6b:4a:b1:0c:2c:75:f8:c7:
ab:6a:fe:fd:9b:70:7e:e9:d4:8c:e1:a3:7e:21:de:
42:3b:5e:ca:9e:c7:c4:52:7d:36:bb:50:42:bf:8a:
17:16:51:20:83:94:a0:9c:c6:cb:72:b7:04:d1:3e:
0c:79:c4:a8:45:6a:eb:95:30:60:6d:08:c7:01:91:
9c:72:2e:88:18:07:88:35:c8:98:5d:fb:06:f7:61:
65:f0:b5:39:58:69:85:61:70:fd:82:9d:20:80:c9:
c5:ff:25:ac:50:7b:36:04:a0:63:66:4e:30:17:b6:
45:e7:1f:56:59:e8:de:d5:37:c7:fc:2e:de:8d:ea:
74:b9:23:0d:f0:45:80:d7:17:86:e4:7d:fd:6d:c2:
a9:d8:54:38:d4:bf:47:d5:ba:f1:4a:ce:5b:6e:23:
17:2b:c9:dd:24:bb:06:86:3f:2b:cd:96:56:66:9e:
ba:f0:59:55:fe:79:3b:d0:a8:36:95:df:df:85:18:
3a:65:84:1c:69:c0:3d:11:98:69:50:13:40:90:66:
85:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:07:E1:80:79:9C:00:89:7A:70:16:FF:8B:C5:CE:A9:96:69:BC:20
X509v3 Authority Key Identifier:
keyid:CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:dc:4f:d2:18:47:39:ee:ed:08:1e:06:da:1f:06:ef:fc:8c:
04:db:c5:a0:21:b8:5a:6c:ec:cd:1b:8b:e7:76:e1:60:29:df:
60:f9:a5:ca:fd:19:2a:70:8f:90:bc:ee:4b:d2:43:8d:83:f0:
aa:27:d0:27:35:20:b8:b2:2d:7a:bf:21:3b:3d:04:cb:84:ba:
7c:a5:e7:6c:8e:02:4e:08:6e:d2:08:02:ab:79:91:68:02:ff:
a5:eb:ef:1f:f8:a2:a0:6e:79:4f:4e:99:34:f3:24:7a:d9:6e:
68:f1:df:9b:a7:45:be:76:00:87:9b:98:22:2f:0c:3a:dd:89:
25:f7:d9:40:41:57:04:d1:fd:44:30:b7:f7:5c:4a:3d:b3:53:
2f:b6:47:d5:9e:df:c5:f9:5f:61:63:73:6e:3b:3a:02:97:1a:
5c:fd:c4:1f:c7:2c:ad:a5:c3:3f:60:4e:dc:e4:85:5c:60:d1:
f3:f9:1d:88:b3:18:fe:49:9b:6a:00:e5:d5:14:db:3a:3b:04:
c8:a6:df:1b:85:20:94:ff:c1:fe:1e:08:fb:17:f8:8a:3c:e0:
76:e4:87:02:74:59:a7:4c:ba:43:20:7f:a3:57:f5:60:cc:79:
47:b8:00:11:1a:0b:eb:a2:5e:db:08:2a:30:9b:e0:2f:1d:42:
62:6f:c2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:28 2025 by rpki-client