Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
File: y__HcfLtWPwoIe50zahT_S42xCg.mft (raw, json)
Hash identifier: +FHV/Pk4GSp59tMWccJfsbKGVYVHE0xBZ+u6TZJgpyQ=
Subject key identifier: 28:DB:24:5E:46:48:78:EB:1D:84:74:D8:C9:49:5C:99:1E:3D:A2:F7
Authority key identifier: CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
Certificate issuer: /CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Certificate serial: 0194BD4E4893CEFF391A90991642496AD014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
Manifest number: 091D
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: 8adR64UTKfQJyv8Hn8Uu3Mto6Ss.roa (hash: QwMK3mT98zuHytYWjDXlVT7MVpssQnTqv+nHseA43Vg=)
2: y__HcfLtWPwoIe50zahT_S42xCg.crl (hash: Gtmb95WIrJ4+Nyiy8/fMszZGv4bD7Jygov6I50y7+8o=)
3: ywmRdz3QQ075sogl-Hv1NFuoucM.roa (hash: 9XVqYZqYueT5VxXq2AcYWrkj+zD3Y8x/GGADjcUQjJk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:48:93:ce:ff:39:1a:90:99:16:42:49:6a:d0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=28db245e464878eb1d8474d8c9495c991e3da2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3e:bf:33:63:32:f1:38:73:30:a4:a4:09:a5:
26:28:4f:c1:e6:d1:92:65:85:f0:f1:ad:75:81:be:
17:a8:5a:a1:8b:51:0b:8d:7c:0c:71:0c:d7:63:ad:
47:67:06:6b:d4:af:7e:c4:74:d2:8a:58:25:6a:b2:
04:08:6b:00:c6:b1:4a:d5:1e:74:74:c5:2e:8d:42:
8b:1c:5f:be:f4:14:dd:b1:b5:e0:b8:c0:6d:e6:a6:
9c:1e:a9:e6:e7:a4:c7:b0:86:72:1d:80:81:8a:b3:
03:62:a3:05:09:73:f4:2e:98:e7:87:e6:73:e1:41:
b2:16:c4:2e:ff:c6:e6:75:3f:37:5b:89:13:c6:8c:
f9:f9:f4:bf:b5:e4:79:71:32:8b:7b:74:ff:ed:ba:
59:35:70:f9:28:5b:2a:cf:b4:bf:d4:8e:3d:fe:dd:
c6:e1:13:68:03:11:e9:ff:27:7c:c0:ea:b7:64:25:
96:09:c1:be:8e:56:94:09:92:6f:82:79:98:a6:bc:
dc:7e:b6:51:f3:16:d3:7c:cf:f1:d8:e7:c5:e3:1b:
ed:9c:48:29:47:f3:03:08:a4:62:da:80:5e:5a:ab:
dc:17:02:7a:c5:01:92:35:19:bb:7b:e4:57:ad:16:
97:db:b1:30:a6:22:28:d6:95:99:b2:bb:5f:8c:c8:
d6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DB:24:5E:46:48:78:EB:1D:84:74:D8:C9:49:5C:99:1E:3D:A2:F7
X509v3 Authority Key Identifier:
keyid:CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ce:54:45:8e:0c:35:a7:02:c2:17:a4:f1:c5:b6:27:d3:c5:
90:af:1d:b8:36:1a:4f:02:83:1c:9b:2f:5e:bd:cc:81:0f:4e:
41:57:0d:ca:e8:a9:9a:14:34:95:11:49:19:95:0a:22:03:86:
ef:69:36:52:67:8f:d2:02:c1:18:f5:45:b1:0f:f5:df:1d:c4:
97:2d:3d:9a:0e:36:0a:f0:ad:2b:98:c4:2a:76:6e:83:f8:fb:
e0:d0:ac:b5:fc:6a:8e:bc:cb:bf:ff:07:94:fb:96:26:38:8d:
af:60:0b:f0:85:2e:d3:a2:5d:ae:6a:8d:f2:ce:39:75:08:56:
c7:ab:53:f1:56:37:8b:e8:c5:1a:3b:c9:6f:ae:49:41:81:b1:
94:12:14:07:2a:6f:7b:19:a7:f3:ef:c1:5d:b1:c4:94:e0:f1:
34:7d:96:88:41:63:1e:fe:0b:fb:a5:6d:b8:72:47:fb:ff:a2:
a1:e0:3a:ce:ca:91:1f:93:42:d5:db:3f:4d:4e:21:11:4a:25:
dc:d9:cf:36:d2:51:1d:7d:84:4d:f3:eb:f2:70:d4:31:ed:e9:
78:59:43:1a:b1:06:f8:64:ac:58:ae:e3:cb:af:05:67:bf:d4:
44:33:64:b6:9e:4b:5b:0c:1c:da:4d:35:41:7b:23:71:e9:1d:
96:f3:4a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:23 2025 by rpki-client