Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
File: C89yHHHIrnyvcG2d8zWLEtVLTZA.mft (raw, json)
Hash identifier: VeWyzyKABJRJfgbm+hCzhzcrf1lPFcCSOh6AT7Jj+98=
Subject key identifier: 8E:C6:B6:53:1C:6D:D0:91:F6:A2:BA:98:47:5E:F7:84:01:36:7F:11
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial: 0194BCE0E8C77C0021D069DCC83B31C1229C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
Manifest number: 0852
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: 0Xw-5taoVNUPecPoG5bobjuIIc0.roa (hash: +uWkqdxHbLpuSBqT73af2/Y6rs7b1vl0IQ82rcCeayY=)
2: C89yHHHIrnyvcG2d8zWLEtVLTZA.crl (hash: 5reJiP58liLtwXr4OznbWYrSYZMCMDyc9Ab5d4gREc8=)
3: SYHyceqFtkyCyptfpg33iZNyTQg.roa (hash: nT6QUh5lUAAZS2ytChv8ohZK4q1mifNi1Au5J9VAH8E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e8:c7:7c:00:21:d0:69:dc:c8:3b:31:c1:22:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=8ec6b6531c6dd091f6a2ba98475ef78401367f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:28:f1:7f:a8:5b:1a:a6:2c:fb:ac:3f:a9:
b4:25:74:3d:88:51:8a:4c:2c:99:eb:a3:b8:9b:e8:
2a:87:e4:0c:76:f3:50:02:86:ff:87:f4:32:34:69:
d9:0f:6e:42:c0:48:e0:af:a9:ba:82:5d:95:a7:eb:
a1:cb:65:0e:67:83:68:c3:f7:3b:88:d7:a5:e4:f0:
8a:1a:6d:16:ab:f6:a3:fe:8d:58:47:50:ca:fa:7c:
ae:70:8d:c2:b0:5b:6a:27:f0:8f:f1:a5:06:7c:4b:
98:fa:da:d3:29:e2:d2:cb:3d:d5:b3:7c:37:03:25:
dd:5e:76:fb:70:e4:ff:89:bd:e1:5a:00:25:be:1b:
4e:ec:5a:ec:25:2b:51:93:89:12:51:ec:47:87:92:
12:b8:24:0a:8c:cb:95:49:fc:e4:e8:65:cd:8c:f3:
00:a7:10:1f:33:9b:0a:4f:2b:0f:e1:85:6e:42:a9:
cc:02:4a:47:b4:1e:16:14:50:31:0a:4f:69:75:32:
45:dc:9d:54:78:03:e2:17:24:3b:e4:4b:be:97:15:
01:f4:47:ae:48:42:51:93:3d:00:3d:73:10:8e:6c:
ed:18:f9:39:86:c6:68:26:b0:0e:b1:0a:ef:d2:6a:
1a:f6:e6:15:bb:0a:2a:15:b6:bf:a6:b0:ce:ee:e9:
e0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C6:B6:53:1C:6D:D0:91:F6:A2:BA:98:47:5E:F7:84:01:36:7F:11
X509v3 Authority Key Identifier:
keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5a:fa:12:a1:00:65:02:ef:fa:4e:a4:fe:b2:7a:7c:a6:4a:
c4:0f:fe:e6:fc:c4:e7:e5:39:0d:2b:49:78:fa:14:22:88:51:
5c:4b:7a:9a:6c:8d:90:f9:3c:d0:59:36:17:1b:13:5d:ff:e4:
56:35:af:a5:db:92:fc:50:c9:3f:10:14:1c:19:3c:56:c4:11:
70:48:67:e1:56:df:d1:f6:02:aa:fc:64:98:c0:5e:60:6e:98:
29:40:f6:32:38:0f:27:bc:bf:d9:90:30:06:90:25:4b:ac:c7:
2a:5a:a7:3a:bc:dc:35:21:57:35:9d:17:cc:cd:ba:c5:1b:5f:
18:33:e4:6f:9e:87:9e:64:8b:93:62:5b:1e:9f:36:4d:26:34:
e5:60:d9:d9:7f:da:f3:b0:a7:8c:8d:55:81:b7:9e:4b:0c:b1:
bb:ec:8e:eb:ff:db:c2:95:19:dd:65:91:85:3f:67:ac:04:b3:
5f:96:de:ca:32:0a:47:ba:a2:e5:a6:3c:9d:28:c4:84:43:68:
e8:77:62:59:a3:73:aa:05:da:f0:64:e4:d9:db:9c:20:a3:15:
ca:b3:53:3e:a1:86:fb:9e:c9:b5:e9:96:e8:90:60:c4:2c:b6:
b4:d5:92:5c:09:7f:c6:0f:62:19:92:ca:b2:91:72:e6:c9:9d:
35:3e:8a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:20:10 2025 by rpki-client