Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
File: yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft (raw, json)
Hash identifier: PYc078E8M6OYJptrBPE5+Paske4CLpQitw1op72ToPk=
Subject key identifier: 36:B4:4D:15:95:F8:AF:24:B8:4B:A5:63:C2:F9:1D:E5:B1:14:D1:B9
Authority key identifier: CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29
Certificate issuer: /CN=cb1d15194278a29aad57ca375f99588b976ef829
Certificate serial: 0194BC3BCF2507F7851219E030ACB695D133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:23 +0000
Manifest this update: Fri 31 Jan 2025 12:00:23 +0000
Manifest next update: Sat 01 Feb 2025 12:00:23 +0000
Files and hashes: 1: vKmVyZKo1mVbWaxUYsU2k0zxDdU.roa (hash: gYV9eOLfrWkPtH6rFSHehM6qyeO4Oplr2KmQKju1kVs=)
2: yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl (hash: v+Ap7WejpoDydELttttgnmR7gGOcBP1mniOmF7THNAc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cf:25:07:f7:85:12:19:e0:30:ac:b6:95:d1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d15194278a29aad57ca375f99588b976ef829
Validity
Not Before: Jan 31 12:00:23 2025 GMT
Not After : Feb 1 12:00:23 2025 GMT
Subject: CN=36b44d1595f8af24b84ba563c2f91de5b114d1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d9:98:59:43:aa:f7:5b:e5:0c:dc:93:70:6c:
74:d4:22:2e:89:a2:2a:a9:2f:44:34:2e:d2:8e:11:
42:00:93:09:d2:37:7f:26:58:74:a5:7c:3a:88:79:
bb:40:93:6a:b0:26:64:e6:26:70:c8:21:a4:ba:3a:
2a:6e:43:52:37:c7:94:bd:e4:b3:ab:8f:79:7a:69:
3e:91:83:cb:86:a3:d8:7b:af:7b:a4:77:f1:d0:bc:
6f:2e:ed:fc:e6:60:f4:e1:63:f0:8b:2e:0b:9e:8a:
d9:a6:54:37:2b:79:c9:18:9a:75:2e:b2:83:57:48:
a1:cd:b1:07:2c:8d:1b:b2:9e:5e:2c:2c:ab:62:34:
89:42:fd:61:c3:7e:23:ba:c9:05:4f:62:3f:0a:99:
b7:d6:05:c3:e2:8f:32:21:c3:a5:a3:b6:f3:13:82:
34:f4:8f:0b:9d:68:95:1d:df:49:42:46:1a:bb:e9:
4b:ac:ee:9d:05:8b:29:c3:0c:ba:7d:ab:ac:df:01:
f2:1a:31:83:32:5f:4a:d9:ae:51:52:82:7f:ee:ab:
fb:c5:01:3f:81:d2:5c:be:6f:87:08:fb:6a:8e:6b:
ba:47:1b:00:a2:fd:fd:e7:f3:5e:62:14:af:b2:7a:
9b:73:34:12:f4:0b:a5:b0:73:20:00:cd:67:68:9a:
53:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B4:4D:15:95:F8:AF:24:B8:4B:A5:63:C2:F9:1D:E5:B1:14:D1:B9
X509v3 Authority Key Identifier:
keyid:CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:db:be:05:82:1a:98:1d:32:7a:0b:73:d0:20:9a:64:fe:54:
0d:19:39:22:9e:5e:3c:66:04:6f:c9:0a:b8:c0:06:2b:f6:d4:
d8:6e:1c:88:da:8f:e3:6a:a1:58:47:d9:da:4a:e6:5d:9d:c9:
c8:7b:ab:8a:fe:7a:eb:79:5d:32:b9:da:8b:9f:40:7f:41:84:
2f:aa:10:0e:15:72:87:0f:82:9c:d8:34:a7:d4:2e:8b:34:80:
8e:63:91:24:78:b6:45:0d:ec:b5:4f:06:6d:7b:9a:e3:d7:74:
43:31:c5:17:45:aa:c1:37:e0:c3:72:d2:31:c0:7a:4e:b7:7b:
1d:e5:41:23:47:ab:19:07:94:69:11:b9:f8:35:93:49:c5:02:
80:48:89:23:0e:33:67:cc:c2:54:03:04:c8:83:bd:3c:8f:1f:
e8:5a:96:75:48:0b:0a:84:ff:d5:bc:32:91:9c:1c:37:bc:ed:
25:71:22:dc:4e:dd:fb:96:05:eb:79:db:37:a5:c4:a0:5c:33:
4f:67:4c:81:48:68:16:a2:5a:f4:83:26:1f:0c:5c:9e:52:dc:
4e:a2:df:2a:d5:c0:dc:3e:2f:28:b7:36:d9:ef:a2:1b:46:6f:
74:13:30:7b:96:cd:a1:16:83:68:bb:b4:fc:87:9f:bb:27:1a:
64:c0:55:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:22:16 2025 by rpki-client