Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
File: y0JLQMH4QIT41A8rncvh4fkWrz4.mft (raw, json)
Hash identifier: CIoLc0ytu70jpaboP4I8bG0dqEkOhi4hcdY8TZfwOVc=
Subject key identifier: 0C:D9:00:F5:C2:DF:A6:54:2A:4D:6E:FC:B0:4C:0F:A1:72:E6:1B:7F
Authority key identifier: CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
Certificate issuer: /CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Certificate serial: 0194BCE0CBE58058411460D171677986DC6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
Manifest number: 0562
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: V9bu_0z7-vke15TqRAacNobtW_w.roa (hash: AcTyYpjmVQYslHpVhDjOI3OS/nx5PavwBhDkpmqXVeI=)
2: y0JLQMH4QIT41A8rncvh4fkWrz4.crl (hash: nCl9JXj9Bi1h0oTcZrQZKwIwhQaP8hSryr0G8LN1P2M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cb:e5:80:58:41:14:60:d1:71:67:79:86:dc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=0cd900f5c2dfa6542a4d6efcb04c0fa172e61b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f7:cd:c1:b7:d3:93:a7:e6:b8:a0:dd:ed:97:
de:df:7f:f1:2b:06:fa:29:51:5c:a7:b4:35:cb:4b:
b7:1e:58:22:19:ba:4f:09:9e:29:83:c1:c2:b6:40:
25:fc:3c:0e:da:00:7b:fb:1d:19:93:10:3a:ea:c5:
90:11:47:3b:d0:02:16:e1:a9:3a:c4:aa:89:40:ab:
a0:33:ea:cb:eb:3c:21:94:36:d8:cf:f1:f6:8a:ec:
0f:b8:77:3f:cb:39:b3:23:27:11:38:5c:cd:42:80:
36:b4:dc:cf:fb:c7:21:48:ee:42:29:cd:83:07:bd:
34:65:f4:ef:b5:87:78:21:c5:6b:95:32:6e:bc:df:
71:ed:b2:95:62:7a:95:0c:15:dc:56:3d:6f:c2:69:
3c:22:54:0a:01:d2:b3:2d:3e:4c:5c:e0:0e:67:56:
75:f8:a1:9e:fd:21:24:2f:b4:5b:f0:6f:28:30:c0:
2e:0a:b1:7a:c7:7f:dd:bb:f2:3f:71:4f:f6:a5:a9:
67:a3:4f:98:a9:21:60:c2:b5:2e:12:35:bc:b8:8d:
c1:51:44:f8:b9:cd:11:5e:52:a1:aa:17:5d:23:15:
3b:8c:f1:9a:85:61:df:a4:75:86:62:a3:01:dc:40:
97:c4:96:56:40:2e:50:ae:32:b1:d2:55:70:01:c6:
62:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D9:00:F5:C2:DF:A6:54:2A:4D:6E:FC:B0:4C:0F:A1:72:E6:1B:7F
X509v3 Authority Key Identifier:
keyid:CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1f:68:d9:6f:db:9d:4f:04:8e:5f:22:fd:ff:3b:05:b2:c5:
d9:95:0e:1b:d0:25:c0:59:2f:4e:3e:63:cb:66:6e:42:10:60:
59:91:db:ae:a1:11:02:c6:73:b4:05:bc:5d:2c:d4:e6:ac:b7:
6e:a0:48:f7:bf:0a:6c:df:e7:7c:f9:15:b9:c3:c5:76:95:00:
31:14:6d:b0:4a:f0:8f:6f:c6:41:3c:9c:5c:dd:98:12:ff:b8:
d5:c9:76:2f:0d:79:ce:3f:e8:fe:b2:a4:89:e2:2b:96:80:1d:
0d:74:b2:29:db:73:63:20:e2:3f:19:5c:5b:2b:3a:ef:07:d5:
18:c0:03:2b:84:b4:d0:6c:77:48:ab:14:de:5c:13:e6:ba:99:
cb:c6:cf:60:5a:ea:0a:f8:42:19:f6:20:16:c6:1d:57:ae:bb:
7b:7d:37:70:ae:b7:37:9e:62:d5:6a:21:90:46:10:56:c9:74:
98:4f:5b:42:73:4d:99:cf:7b:25:27:df:76:52:c6:9c:09:6a:
b1:1d:5e:fa:d6:51:d2:44:c6:5e:e1:2d:93:b0:a0:9a:5a:93:
3c:85:f6:58:88:41:6e:af:93:bc:2e:f7:c6:a4:df:a8:ff:7d:
94:72:35:b1:07:8c:96:b9:ce:6e:4c:e4:ef:3d:95:a8:8b:b0:
b5:fc:7d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:07 2025 by rpki-client