Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
File: yCnhDha8eb_FbFNVflsapVnMdDU.mft (raw, json)
Hash identifier: +DXdRAaJv6DZ8naR3W/q52LgL74YE62wyo2fC/le9Q4=
Subject key identifier: 84:BA:3D:37:FD:4A:BF:19:43:81:38:F6:97:1F:5E:1D:A7:F9:39:A0
Authority key identifier: C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
Certificate issuer: /CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Certificate serial: 0194BD859149B5369172DA2643F6B61411C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
Manifest number: 06F8
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: jr7Oi-VOBv_LBDGgARbH5yi0fCE.roa (hash: 9cEsiuQyqTFkaGMrbbHrCUpW4clJajhU8ds2+OGo5cc=)
2: yCnhDha8eb_FbFNVflsapVnMdDU.crl (hash: R2ySaI7D2k7483Q4KNX7fuRmPtq+qUJDRQsQUyXm7jY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:91:49:b5:36:91:72:da:26:43:f6:b6:14:11:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=84ba3d37fd4abf19438138f6971f5e1da7f939a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:40:46:9a:4a:4b:52:1e:66:b8:c2:a8:f9:
46:d4:28:9b:83:aa:df:f7:89:7d:ad:1c:82:c9:b4:
62:56:70:dc:5e:e1:b4:dd:df:34:fa:b0:50:7c:07:
bb:a9:ea:36:0e:65:ab:46:47:56:88:3d:a7:f5:5a:
0b:d8:dd:f5:c4:60:0f:e9:e7:d8:2d:93:6f:77:a0:
a6:e7:24:79:0b:be:da:85:db:2f:07:13:07:21:be:
27:f9:88:b5:8e:c6:35:e5:db:1c:a8:34:e5:93:6d:
02:f7:48:d3:8e:29:65:e6:d3:75:46:34:cd:7c:14:
bc:54:01:e1:02:8e:54:aa:e7:c7:04:44:84:9b:70:
76:e6:28:6e:db:18:66:2e:c9:d1:82:98:12:9e:2f:
e6:41:84:ef:cf:43:0d:17:00:8e:dc:d9:0b:b6:cf:
74:5e:2d:a4:56:02:bf:91:c6:68:b7:e6:65:03:f3:
54:31:04:28:97:58:85:63:ca:fb:db:9c:ca:1d:f7:
eb:04:ae:52:af:d4:64:cc:6a:93:fe:d8:e7:81:c5:
0d:54:2a:5a:40:3d:45:a7:8e:93:65:a3:ab:f1:cf:
b9:ae:bd:a5:5c:e0:09:b6:3c:2e:0b:3a:dd:09:1a:
e6:9e:6e:4d:18:19:79:d6:0d:30:93:39:d4:c8:5f:
c4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BA:3D:37:FD:4A:BF:19:43:81:38:F6:97:1F:5E:1D:A7:F9:39:A0
X509v3 Authority Key Identifier:
keyid:C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:bb:60:93:4b:73:51:4d:c4:91:71:ef:30:9f:0c:42:4a:5a:
15:12:e6:f2:66:d0:55:ac:33:f1:b5:40:cd:e3:e1:db:4c:10:
e2:37:ce:40:ee:c0:20:fc:ac:2e:c9:9a:7f:8f:08:b3:27:fe:
cc:7c:b3:fa:91:fa:f9:d3:14:e2:d9:f8:4f:20:f1:4f:15:61:
df:21:96:3a:27:66:7a:cd:e6:c9:20:ab:f6:b5:f7:9f:ef:f4:
75:54:96:05:af:aa:f3:5c:3f:36:39:45:02:b6:e4:e8:47:9d:
61:91:32:f1:9f:fb:f2:f5:1e:ec:23:9f:18:5a:02:f2:e7:02:
c5:cf:a4:2f:cb:c5:ae:f9:7b:e5:99:6e:7d:05:75:f5:65:83:
a8:42:98:d9:b7:15:fc:98:a1:e1:47:a3:bd:79:d5:53:af:b7:
76:30:2d:0b:22:50:fb:58:e6:5a:0a:e6:e2:39:48:a1:e9:30:
e9:f1:5f:7c:50:9e:76:90:ff:44:69:35:33:85:49:0d:20:80:
a8:9c:59:85:8d:9a:d3:7b:f6:6f:62:2d:7a:07:c4:ac:40:41:
b7:73:0e:f1:5b:ec:2a:5e:76:59:33:65:b6:d9:6c:34:cc:94:
08:ea:57:81:35:33:fc:00:42:45:e5:e3:93:d8:0b:9f:87:cc:
95:03:6b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:17:47 2025 by rpki-client