Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
File: yyBgbecwRW7dczXMiCy99DlvNGA.mft (raw, json)
Hash identifier: hqb+rE1tUEcR1Syoa5XN3DohUvFQ1h1XWOkgBgOhogE=
Subject key identifier: 3D:0A:62:A8:66:EE:C4:AF:DC:A4:84:FC:C8:9F:A1:79:79:A7:96:A8
Authority key identifier: CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60
Certificate issuer: /CN=cb20606de730456edd7335cc882cbdf4396f3460
Certificate serial: 0194BC72E3D55DF7D9E1FEC259CD1A609537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: 1-g2qGyIDLotxJr6jyvuCwE9SDoo.roa (hash: ox4h4LnoAr4/PMYjKkzxk/lX+kgpfI0xggGwFC9kUEg=)
2: 13NXjmdLbT7nUavqjAF7DzEQvpo.roa (hash: b10Azpe22h/5Gx2g7b0Q9MR+x3bVRu7tw5JgDsV7530=)
3: 4nepQ7lUgSyYC6DeWAhUkKqo0Gk.roa (hash: 2TUStoVY1XdtP587WO0l3S9//seQPQtrzOWcmGMJLVo=)
4: rHfF7qdYMYkIEjqJPBDOaXebEf0.roa (hash: P0aBQMtyJt0CjcoQ0RWfWtjHju57iTgw6JSMTWTBUj0=)
5: yyBgbecwRW7dczXMiCy99DlvNGA.crl (hash: xsI//0EjTHyJSUMV+RdwK7bweTOJLlraWXebFCUNDDI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e3:d5:5d:f7:d9:e1:fe:c2:59:cd:1a:60:95:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb20606de730456edd7335cc882cbdf4396f3460
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=3d0a62a866eec4afdca484fcc89fa17979a796a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:7a:d8:54:86:13:76:50:5d:8c:aa:2f:09:
2d:53:e2:59:d4:b1:cd:a2:89:32:3a:98:6e:fb:8c:
4f:ba:81:cf:6c:69:d2:68:58:65:c0:e2:20:1d:a2:
ff:de:bd:e9:b0:54:77:eb:fd:d9:13:88:70:6f:6a:
7a:d8:fe:82:cd:f3:a6:c5:36:eb:43:76:90:8a:96:
68:ca:78:d0:24:aa:2d:e8:9a:ec:9d:77:65:c2:04:
2b:c7:30:78:40:71:54:08:08:bc:bf:9f:ba:78:99:
5b:87:a5:af:f9:03:36:70:f1:f1:96:bc:40:df:07:
9f:e3:50:2f:5c:fa:08:30:a1:f8:b1:bf:e5:80:ea:
ce:fa:4f:52:1d:4f:4b:22:70:62:fb:87:87:e0:9c:
b4:fd:38:1d:30:9a:f8:d0:79:ac:35:c9:35:de:19:
4b:e4:64:5c:ae:c5:08:a9:95:aa:c1:f0:64:e9:cf:
75:07:f7:4c:5d:10:d9:14:1d:d8:f7:20:3e:c7:ea:
f4:c9:4a:49:cc:ea:5e:94:e4:5d:ee:79:6e:e9:71:
bd:27:4e:2f:c4:e8:aa:17:c9:a0:c6:a0:4e:30:fc:
d3:a9:bd:15:d4:07:80:d7:74:ca:9c:55:40:b5:96:
9f:55:13:9e:38:0b:08:2a:f8:d3:b1:89:9c:82:a9:
07:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0A:62:A8:66:EE:C4:AF:DC:A4:84:FC:C8:9F:A1:79:79:A7:96:A8
X509v3 Authority Key Identifier:
keyid:CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2f:89:57:f2:92:de:9d:ef:85:c4:33:b2:31:69:d3:cc:65:
ee:9f:30:e0:b0:75:f1:31:2c:95:56:a2:a0:74:63:1c:2e:a1:
31:ab:11:c9:b6:63:55:eb:9c:cf:f8:39:f2:1e:49:b0:93:cd:
31:fe:c2:08:50:fc:49:f1:b4:fa:8d:10:15:e2:c5:16:ba:ab:
ba:02:e4:3b:b1:c2:25:d0:bc:fe:86:56:a8:58:10:fb:59:ce:
7a:b8:5d:36:33:5c:2e:a8:43:b4:50:e5:9e:09:d1:4e:c0:08:
72:d7:a2:ca:0d:76:20:c2:4b:78:d4:ce:ef:5b:73:28:bd:73:
53:ae:6c:19:8d:91:f6:e2:5e:7f:58:52:12:57:4d:3f:1d:61:
7e:9a:f9:f2:53:dc:5b:74:1f:e9:b7:37:ef:28:c5:b1:67:43:
56:4b:94:f1:7e:79:e1:05:14:97:ad:69:28:c6:aa:97:48:25:
ba:2e:cd:cf:c3:24:28:cf:94:cc:3e:ea:bb:9f:4c:4d:23:33:
20:ce:41:77:12:22:7b:1b:d2:b2:15:56:8e:e1:1a:a1:69:51:
00:ee:17:09:79:36:65:90:dc:75:1b:77:8e:c8:2d:eb:a1:35:
f8:43:7d:e4:7e:30:21:4d:ea:24:02:86:54:45:f7:8b:e7:91:
46:aa:47:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:34 2025 by rpki-client