Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
File: ybHXw7TuhyMzamWFOapzRvI9Z3I.mft (raw, json)
Hash identifier: hExayh2U8L5BMCYb92VSNDxtORKLZhM7ZiuHSlpaNcI=
Subject key identifier: 5B:81:DF:CF:57:40:1B:5E:C7:07:02:0D:75:28:2E:17:6F:CF:64:44
Authority key identifier: C9:B1:D7:C3:B4:EE:87:23:33:6A:65:85:39:AA:73:46:F2:3D:67:72
Certificate issuer: /CN=c9b1d7c3b4ee8723336a658539aa7346f23d6772
Certificate serial: 0194BCE058A9BACF6DD1A00141B9A062767F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
Manifest number: 13C9
Signing time: Fri 31 Jan 2025 15:00:06 +0000
Manifest this update: Fri 31 Jan 2025 15:00:06 +0000
Manifest next update: Sat 01 Feb 2025 15:00:06 +0000
Files and hashes: 1: humiX4umMQ8U2diSQKMJBIULUzM.roa (hash: se+vrxlBcmmLnHSpfQQqP4vmwa+L+eQnVu6u1QXlV2U=)
2: ybHXw7TuhyMzamWFOapzRvI9Z3I.crl (hash: ZGTfMOwOm3dPDZSROn2LmJQj5O5t0a8UqoikOKnc5TU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:58:a9:ba:cf:6d:d1:a0:01:41:b9:a0:62:76:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b1d7c3b4ee8723336a658539aa7346f23d6772
Validity
Not Before: Jan 31 15:00:06 2025 GMT
Not After : Feb 1 15:00:06 2025 GMT
Subject: CN=5b81dfcf57401b5ec707020d75282e176fcf6444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:85:a2:83:14:0b:cd:9a:27:ab:d1:ef:40:
a6:57:4c:49:9c:e1:e7:b5:47:59:4c:23:57:b3:b1:
f1:ba:97:74:a9:ce:35:64:cf:f1:f6:f0:59:a9:d5:
30:14:26:2f:3a:47:1c:0e:52:b4:7b:fe:31:1b:a1:
1b:13:00:b7:11:99:4b:f9:37:ac:aa:08:8c:0e:e2:
db:b2:9f:39:ef:53:fd:6b:e9:cd:60:09:54:46:7e:
57:4f:2a:6f:1b:50:a0:86:2a:49:bd:f0:2d:1d:dd:
35:74:b5:76:d0:7b:bc:01:b3:2a:84:37:bd:ba:04:
c5:56:c9:55:d4:11:eb:12:4e:5c:47:31:c7:f2:d4:
98:21:94:a2:38:21:74:58:40:c1:6c:76:eb:ee:a9:
2c:5a:3e:27:96:26:fc:70:2e:a8:ad:c0:5b:70:4b:
45:cf:2b:62:ef:b3:20:de:7d:c2:e7:2e:31:fe:19:
54:d2:e7:f3:cb:ae:51:fb:e0:7f:03:8b:eb:86:c3:
d3:57:53:e1:68:c4:50:ae:f6:d7:e4:80:ea:b3:0e:
8e:de:91:f6:4a:63:aa:ee:84:e7:4e:a3:96:c0:aa:
5f:99:b1:96:b8:94:97:eb:1d:df:94:75:b0:06:b7:
38:7e:2f:7a:6d:e6:1e:72:aa:4f:cf:2e:4c:e4:48:
da:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:81:DF:CF:57:40:1B:5E:C7:07:02:0D:75:28:2E:17:6F:CF:64:44
X509v3 Authority Key Identifier:
keyid:C9:B1:D7:C3:B4:EE:87:23:33:6A:65:85:39:AA:73:46:F2:3D:67:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:13:46:f4:98:60:ad:81:55:df:77:19:f3:9d:07:64:94:23:
d5:02:2b:65:59:5f:0d:76:89:3e:5f:cb:20:3d:d6:43:c4:63:
35:5a:36:77:e5:a0:8e:4a:37:10:7d:5c:41:cf:14:d3:42:bb:
cc:d2:01:8a:20:ce:88:3d:98:87:fc:3f:f5:c5:ec:7f:13:97:
3d:2a:35:3e:2d:b8:56:ad:79:4e:fd:8e:5e:4f:1f:a2:f2:ee:
39:2a:fe:50:5a:51:90:25:fc:71:63:3e:2c:f8:78:3a:58:45:
5b:bb:96:7f:0c:25:60:dd:fb:52:8d:45:7d:cf:b1:86:02:35:
c1:9a:89:2a:06:9f:e8:8c:b9:f1:14:5b:99:db:eb:84:bb:7e:
c2:63:7e:7b:93:b6:a9:31:44:6c:46:ad:5e:fa:08:ad:17:9d:
1b:ed:0e:c0:52:48:0d:ad:34:40:de:1a:1b:d6:08:88:f6:bc:
66:21:ee:86:15:6f:b9:db:c1:f8:e4:4a:cb:80:56:af:cc:15:
26:1f:b7:6f:b4:0a:d9:02:5d:d7:79:ad:cb:45:27:e8:18:f6:
09:3a:ef:c9:3f:91:e7:2e:cd:73:ec:37:e6:29:45:95:cb:8b:
50:6b:6d:c8:ed:4e:51:f6:02:b7:3f:75:ab:ab:10:4f:0c:76:
83:8e:0b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:09 2025 by rpki-client