Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
File: yxAkP5hjb6oPtsWua62bCrrSNDg.mft (raw, json)
Hash identifier: Ra0D369ew198n0W2+P4W09hYGG1nYh8sRldXIeY9Sus=
Subject key identifier: 3F:B7:1B:CD:76:47:54:97:AF:6F:6E:C1:3D:B0:3F:0B:57:83:CC:09
Authority key identifier: CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
Certificate issuer: /CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Certificate serial: 0194BD4E925AF6B8A0E3E7B91E2897E39BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
Manifest number: 0D3C
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: mFdOLgpY75BCI6HwFdhbm64m2HU.roa (hash: dTVNpH8dt8wvAbtnwcqlrtySsedQZdW+bUyu+40b16A=)
2: yxAkP5hjb6oPtsWua62bCrrSNDg.crl (hash: lsrEHjdcSW2UN/mFFodKJa0eKMY2YlIPvmLp8ZKzKiQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:92:5a:f6:b8:a0:e3:e7:b9:1e:28:97:e3:9b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=3fb71bcd76475497af6f6ec13db03f0b5783cc09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:ab:dd:5b:89:d8:66:e7:ae:88:a9:e8:27:
b4:0c:26:ee:9b:34:43:a7:e1:e6:bc:62:91:eb:63:
90:9a:45:51:c2:e5:f5:6f:e1:f9:40:fc:cb:f2:47:
bb:a5:c4:95:a8:e6:f5:92:2c:1f:c6:c8:f6:40:13:
45:f9:c1:54:dc:58:23:63:12:d2:2f:a0:bc:fc:65:
64:97:0d:8b:71:18:a0:88:95:a5:d0:a7:13:87:59:
1f:7a:af:b5:1a:50:38:ea:86:86:88:60:71:e9:8a:
a1:09:10:a0:2f:73:ef:d9:9f:9a:81:aa:15:03:e6:
34:5c:01:ce:b5:0d:de:27:b2:c0:0e:4e:d5:cb:a7:
79:b4:c3:89:bd:85:17:af:18:28:09:6b:e2:45:b6:
f3:c9:57:cb:33:e2:c2:a4:be:55:e5:18:80:f8:12:
a7:fe:74:98:3b:26:6d:89:64:0f:8a:c9:fd:b5:57:
b8:1d:69:cf:e7:bd:54:e8:4e:7b:9f:a9:b6:4c:45:
75:74:83:c9:c0:8c:4a:fe:77:22:52:5b:4e:d6:df:
b7:fe:40:89:bc:91:c8:ff:3f:da:0d:1f:5b:58:5a:
5c:cb:3e:11:58:2e:e6:4d:11:d6:1f:a1:1f:4e:27:
68:0c:f0:07:2a:11:c0:72:9b:72:ec:b2:cf:e8:78:
f7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B7:1B:CD:76:47:54:97:AF:6F:6E:C1:3D:B0:3F:0B:57:83:CC:09
X509v3 Authority Key Identifier:
keyid:CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:65:b6:67:46:35:28:09:2f:d4:ed:2f:cd:3f:e8:a9:52:18:
40:43:39:dd:b3:39:03:4f:a6:35:c8:ba:76:72:79:cc:e8:4b:
df:92:ee:d3:51:5c:0b:f9:10:06:9e:40:5a:34:f2:0f:1e:db:
7e:56:7c:46:cf:b9:f3:98:06:15:52:6a:71:67:37:21:35:bf:
26:8c:58:da:60:d6:75:7f:d0:8c:19:75:84:6e:bf:75:58:a0:
57:30:08:d5:35:6b:1d:23:16:a7:cd:72:87:6c:b1:0b:6e:59:
7f:20:72:23:3d:24:76:5e:78:b7:91:6c:7e:f3:50:b8:ac:e1:
6e:59:9a:87:b3:74:e4:01:7c:ba:6c:58:7e:4b:e7:47:71:79:
e1:05:3a:0e:c8:14:82:4b:20:e9:d4:20:e7:83:6c:00:33:88:
fa:57:19:bd:23:56:dd:db:c3:3d:25:db:03:66:60:f0:10:f4:
66:f6:d8:3b:c0:00:9a:84:7c:08:70:4d:30:61:ca:32:ec:27:
89:ae:31:c3:bb:64:78:6c:04:a3:a5:2b:be:78:cf:a0:4c:46:
75:2f:c9:1a:da:e1:02:0c:53:bf:57:ee:f1:e1:4c:49:57:07:
36:28:db:b2:1b:67:17:1e:61:05:53:31:09:58:a5:6a:30:a9:
a1:e2:e0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:18:06 2025 by rpki-client