Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
File: yzAqJzq07yWo6pGko3ebz30d5Zs.mft (raw, json)
Hash identifier: 1XZfxIXrsr2keQ9uk2OwHo/xWcPX/pc5VEAYrmtejNw=
Subject key identifier: E1:20:2D:3A:20:42:19:15:67:51:D4:8F:7B:C5:82:29:2D:8C:B6:B0
Authority key identifier: CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
Certificate issuer: /CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Certificate serial: 0194BCAA0F3BDFC45C868ACDC6CF846A3BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
Manifest number: 0BB9
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: DcSO93z7fLoOXoqmDIifEXGL2wg.roa (hash: nhLe1W2M8L/RVeyBnebjnTgtFIE/bzp14sFZY8G/wn8=)
2: yzAqJzq07yWo6pGko3ebz30d5Zs.crl (hash: 8nrEhl4yOlbUxm5aE5xFpmqYtpCPvC6yGjUjxqmcBTE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0f:3b:df:c4:5c:86:8a:cd:c6:cf:84:6a:3b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=e1202d3a204219156751d48f7bc582292d8cb6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ad:76:d5:79:a4:ed:bb:56:38:44:48:09:4e:
c6:29:e0:2f:a8:e3:69:d9:c8:de:58:65:8e:1f:03:
a9:2c:a9:da:a8:92:a5:26:3f:96:03:a3:09:5d:52:
9b:af:c2:65:55:60:a5:a3:1f:04:b8:57:8c:d5:d4:
5f:8d:c7:83:6b:d9:47:78:56:d4:55:a5:23:dc:19:
92:34:62:74:df:0e:08:73:46:87:95:04:5e:6c:58:
cf:cb:86:47:f2:ba:00:df:91:43:c4:cd:11:81:2a:
82:56:bc:08:02:f8:89:a6:f9:fb:4e:6f:c0:84:fa:
c6:f5:c6:ea:25:6b:ed:a8:13:d1:f9:f4:ae:16:fc:
f5:30:8c:94:23:81:cb:7f:ee:c5:f5:17:df:d8:df:
2f:a2:07:c3:83:85:05:83:f7:6e:d0:3f:ce:91:fe:
59:76:41:89:55:15:db:90:1d:cd:82:48:bb:9a:3e:
2b:3a:4d:dd:33:66:cf:67:c2:11:89:45:ec:c5:7c:
60:46:8f:a6:c1:f4:67:55:c6:55:1f:69:f7:34:41:
70:09:22:90:6b:33:da:2d:7d:0b:91:ea:4a:2d:54:
58:f8:a8:ff:c3:45:fc:c1:15:48:3a:f3:31:e0:ec:
c6:d0:f9:58:f4:4b:45:f4:fe:83:f9:1b:50:cd:e4:
02:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:20:2D:3A:20:42:19:15:67:51:D4:8F:7B:C5:82:29:2D:8C:B6:B0
X509v3 Authority Key Identifier:
keyid:CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0d:08:39:84:1c:5f:5e:3a:29:c1:62:8c:27:8b:a8:13:f9:
e6:13:c7:5a:ea:bc:d8:21:9a:db:3e:dc:d9:8f:87:2b:15:75:
d5:d3:f3:37:6c:93:b7:71:b8:02:58:01:aa:2d:eb:4f:ff:e8:
e7:c3:e8:57:40:9a:79:f4:4a:a7:c4:78:86:5f:85:93:fe:51:
1e:1c:83:96:28:7d:1c:a9:91:c7:f4:e3:84:c3:46:97:79:d8:
aa:cc:77:87:c5:7d:cc:0c:8c:1e:5d:19:6e:76:82:f6:3c:52:
28:40:b3:85:f0:5e:70:0a:a1:58:ea:5c:aa:d7:67:7b:9b:65:
be:34:65:2e:d5:e7:b3:ae:62:3c:53:da:2f:06:03:a5:a5:80:
30:4a:50:a5:b4:57:32:1c:76:23:df:c9:32:95:01:2c:a6:d1:
dc:4c:a2:53:05:96:70:7f:fc:dc:e5:1f:58:f4:7d:78:f3:f0:
21:48:cc:11:30:3a:32:d1:ae:41:dd:d4:ab:02:7c:57:6c:e4:
23:0a:45:a7:b5:b9:f3:32:7a:c4:e5:74:79:8e:33:33:5e:1c:
b1:ef:09:a7:aa:88:c4:7c:14:ee:01:77:68:f1:1a:e0:a4:10:
6c:a1:e2:33:b0:35:14:66:c8:c3:25:9c:3a:8a:a6:5b:9b:73:
30:9a:b3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:33 2025 by rpki-client