Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
File: y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft (raw, json)
Hash identifier: b/8fgv8iDIFNrRa6WiPxJLqq/YoF+JuClhTEpAEQmaU=
Subject key identifier: C6:88:17:9C:A8:16:C0:DC:84:14:30:B6:B6:25:BD:6E:DE:4D:D7:14
Authority key identifier: CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
Certificate issuer: /CN=cb608201f88aeae9486b9fa87189d796c54027dd
Certificate serial: 0194BCE0E74A50D5D0F6F54368A62D338543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
Manifest number: 04B1
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: TuQDQ8nJBbYLub1mzr6Exv_MEOE.roa (hash: mNd0eAJJzc4YIh0tYa+bIHu2wbr2Q6C9CMzRK0s5ooI=)
2: y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl (hash: Q0Loww2A6My35pEd/pakMKi+obLbv44KleNl9ZZYZE4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e7:4a:50:d5:d0:f6:f5:43:68:a6:2d:33:85:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb608201f88aeae9486b9fa87189d796c54027dd
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=c688179ca816c0dc841430b6b625bd6ede4dd714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:47:a0:81:23:87:d5:21:6a:dc:cb:5b:74:
0c:29:87:b6:f5:62:cb:c5:0b:f3:4d:ab:6e:38:82:
a3:ad:12:4b:d1:6a:ad:16:49:72:61:de:1d:e8:0d:
2b:18:87:05:ea:2b:f8:1f:f7:24:c2:e6:62:19:f1:
b1:29:c4:99:19:03:fa:77:b1:73:1a:0a:20:70:12:
bd:c8:db:49:c4:4b:57:23:a5:20:f5:ad:b0:56:46:
92:43:9f:44:03:0b:64:9e:c7:31:fb:f7:e0:ea:11:
11:2f:05:1e:2e:c3:d9:06:eb:85:61:04:de:78:fc:
2e:4f:cd:55:20:23:9b:7e:12:17:13:6c:ab:f7:4e:
98:3e:96:bd:88:6a:98:16:d9:26:2d:22:02:d2:8b:
11:04:1a:6d:de:6f:c5:fa:6d:64:d7:ce:b9:46:56:
2f:29:12:f3:fd:dc:2f:78:82:5a:a7:3e:60:f3:97:
41:13:d7:3e:aa:e0:64:d5:ae:8d:ea:30:01:82:48:
92:e0:66:3c:65:4f:7a:6a:25:06:99:09:eb:76:21:
ef:34:b4:a8:94:36:fb:d8:22:36:3f:64:08:fa:c4:
7e:19:c5:1c:38:ab:3b:9a:fd:5e:f3:b5:6b:5a:cb:
df:45:58:19:79:77:c7:33:70:ac:a8:50:fd:c9:1d:
85:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:88:17:9C:A8:16:C0:DC:84:14:30:B6:B6:25:BD:6E:DE:4D:D7:14
X509v3 Authority Key Identifier:
keyid:CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:94:aa:ba:1b:a6:35:51:c1:84:88:df:e1:01:14:ae:95:3c:
72:56:1f:42:b5:1c:85:85:87:6c:0e:6c:1c:e9:d9:ab:15:40:
52:79:8c:47:e7:00:6b:ba:00:c2:d3:a0:db:6b:c0:24:f1:9b:
bb:b3:8f:ce:f8:46:93:d7:d1:0a:be:f8:26:f1:77:26:ef:dd:
83:35:de:7b:5a:af:ba:e3:dd:1d:55:d3:19:80:a5:36:d1:60:
61:85:64:99:d2:a1:90:40:ed:43:58:33:24:fb:5c:c9:28:6c:
4a:c9:27:2d:ba:e7:54:a0:5b:01:5d:17:e2:f2:47:42:f3:0f:
f5:8f:73:7b:40:c1:df:07:33:1f:bc:99:df:30:f7:d7:96:3f:
42:8d:20:d6:49:3a:7e:fb:46:ae:ca:cf:00:09:d1:56:7f:2b:
ad:2e:8f:df:b5:f3:ec:03:9c:d4:70:21:23:20:b7:26:df:cf:
36:be:18:23:98:6a:ea:be:1f:0a:4f:f6:bd:04:7e:3d:76:ca:
ac:51:57:2e:b3:05:b3:d8:df:28:0e:69:f5:1e:a5:73:2f:a9:
ac:96:f5:ab:1e:99:09:26:bc:83:9e:0c:1a:9b:7a:e0:4a:9d:
09:52:59:45:78:c9:23:2a:e4:27:d3:70:2d:16:df:b2:07:7f:
4a:f3:7b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:42 2025 by rpki-client