Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft
File: y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft (raw, json)
Hash identifier: utHU/1KAyKqNcAeoaoB76NiuQ2GIB80nztJVxjmks/Y=
Subject key identifier: F1:E4:7C:0C:79:FD:62:45:0C:C3:8F:97:71:EB:A3:97:1C:04:28:E2
Authority key identifier: CB:9A:1C:B8:0F:B6:37:32:E5:30:04:7A:1E:C5:52:9F:8C:8B:1A:06
Certificate issuer: /CN=cb9a1cb80fb63732e530047a1ec5529f8c8b1a06
Certificate serial: 0194BC3BFA45A166FC77881244E2130F1C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5ocuA-2NzLlMAR6HsVSn4yLGgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft
Manifest number: 0142
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: y5ocuA-2NzLlMAR6HsVSn4yLGgY.crl (hash: Ttk6bc4OgduJjEeMdK+R2XQ/3FMthb/fqZ748YEj+f4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fa:45:a1:66:fc:77:88:12:44:e2:13:0f:1c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9a1cb80fb63732e530047a1ec5529f8c8b1a06
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=f1e47c0c79fd62450cc38f9771eba3971c0428e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:d1:63:c7:a2:bb:c5:fa:a2:10:a2:b6:70:
1e:be:0c:a0:0c:61:92:8b:e1:f2:9a:93:51:3b:37:
f5:58:1a:ad:33:02:ef:2d:7e:0a:e8:9e:dd:71:8e:
08:06:21:0a:51:1c:76:4f:1c:f8:95:4a:6e:85:78:
c2:ae:f6:f7:5b:16:9a:b1:4d:55:1e:57:d4:8d:d9:
56:75:d2:86:56:20:bb:85:ac:5a:3a:86:6b:ff:e6:
bb:3b:4e:4e:fe:5a:74:1c:ca:5c:b1:2d:06:52:55:
31:23:08:31:e6:9d:ad:7c:fb:bc:56:94:ad:e0:b7:
78:bf:ec:78:3a:2d:25:e0:56:ab:86:e6:35:ff:c3:
6c:01:dc:b6:73:34:3a:f5:22:90:5b:2f:34:d1:0b:
f2:94:7e:c6:72:c0:d1:3c:da:24:ba:7b:c1:a2:eb:
b9:af:87:a3:cb:ca:d1:20:fb:fa:19:28:cb:5d:e7:
a8:d1:50:2a:2e:72:be:61:f2:be:18:22:ca:e7:33:
45:95:36:5d:c3:03:90:5f:31:32:5d:d0:b6:38:4e:
70:c9:56:3d:2c:a3:b1:a7:aa:74:85:1c:a2:44:5f:
fe:95:98:fc:35:30:ba:f6:d3:9e:79:1f:e9:2f:d2:
0c:98:49:86:a3:1c:17:04:bc:ef:95:1e:c0:e8:4b:
0e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E4:7C:0C:79:FD:62:45:0C:C3:8F:97:71:EB:A3:97:1C:04:28:E2
X509v3 Authority Key Identifier:
keyid:CB:9A:1C:B8:0F:B6:37:32:E5:30:04:7A:1E:C5:52:9F:8C:8B:1A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5ocuA-2NzLlMAR6HsVSn4yLGgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:9f:5b:bb:b9:e6:dc:10:1c:1a:e9:0f:35:f4:73:83:24:de:
44:5a:7f:8d:3b:ab:ee:e3:2f:2f:8e:2c:02:67:90:31:aa:95:
e8:80:3d:1b:a7:bf:9e:fc:25:c9:78:69:65:0c:7a:c2:8d:39:
23:27:bf:81:2c:63:fb:83:ff:02:97:66:ee:10:c8:87:76:42:
8e:67:8f:db:8b:0e:34:df:7c:2f:3a:9c:59:e1:4a:b2:24:7d:
86:1e:ea:12:2b:d5:ac:9a:6a:2c:cd:31:2a:2a:ef:dc:b9:61:
8b:f6:b7:ef:e4:4e:a8:c7:da:0f:87:18:66:be:26:d9:e8:cd:
1e:c2:eb:9d:3a:0e:3f:0a:e5:7f:38:cd:16:68:ec:2b:e7:79:
49:bd:0d:41:b4:60:35:7e:f2:b0:0e:dc:bb:e2:75:ab:fd:88:
44:5b:3d:bd:33:2a:44:c6:ba:0e:ad:31:e6:bc:35:0c:19:f2:
b0:d5:9b:bd:ed:a2:e4:79:23:c8:61:01:43:df:36:0e:c4:6e:
4d:e9:5f:9f:12:7b:84:16:04:e3:f7:67:02:bb:14:1d:24:79:
ff:1a:a7:2e:9a:0e:8d:10:dd:e5:79:6c:2f:87:62:ad:92:8c:
49:64:28:e9:bd:0b:ab:ac:09:8c:29:69:e7:78:a4:94:47:8f:
f4:c5:97:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:28:20 2025 by rpki-client