Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
File: yzgoFbJRYTZakWEMva1x9mKG94E.mft (raw, json)
Hash identifier: G4Ex0/TPq9M/He5X7b0XONCNYLD5FnrFRrDdZ/61ykY=
Subject key identifier: E8:AD:66:BB:5F:C7:36:22:C0:CF:09:D1:4A:0F:81:37:52:55:DF:D6
Authority key identifier: CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
Certificate issuer: /CN=cb382815b25161365a91610cbdad71f66286f781
Certificate serial: 0194BD17EC252DC5338C9437CE8F8A461662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
Manifest number: 0818
Signing time: Fri 31 Jan 2025 16:00:49 +0000
Manifest this update: Fri 31 Jan 2025 16:00:49 +0000
Manifest next update: Sat 01 Feb 2025 16:00:49 +0000
Files and hashes: 1: Mo_PTp1RnKkJnXxtlC7OWx0YSxQ.roa (hash: YFv4cH8jBfWT6Q+LN0D+DWnRT7DQ1QH3WQI1NP0LJho=)
2: yzgoFbJRYTZakWEMva1x9mKG94E.crl (hash: hWNuk3eoeAK1ELrM6Iv+NLabOmR0anpTTanSm7Pzh6k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ec:25:2d:c5:33:8c:94:37:ce:8f:8a:46:16:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb382815b25161365a91610cbdad71f66286f781
Validity
Not Before: Jan 31 16:00:49 2025 GMT
Not After : Feb 1 16:00:49 2025 GMT
Subject: CN=e8ad66bb5fc73622c0cf09d14a0f81375255dfd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:7c:d2:c9:4e:a0:11:fa:6a:cb:a6:0b:36:
50:d6:db:29:9c:08:ef:50:19:1f:c8:55:da:fd:16:
6f:39:97:d3:76:38:af:15:16:c4:05:2f:13:0a:d9:
0d:dc:c4:60:8b:f6:c6:cf:7a:e6:1b:35:39:37:bd:
5d:ca:27:7f:c9:80:51:f6:13:76:07:62:28:30:d3:
62:a6:27:a1:7f:e6:f6:12:37:8b:ad:a9:de:6a:ff:
d1:47:34:9e:89:15:3d:49:86:8b:bf:e6:91:99:04:
1e:8a:b6:40:99:85:06:b5:34:bc:09:7e:14:4f:04:
0a:8d:25:ca:c4:46:33:88:f2:4b:16:d4:1e:f9:d4:
d5:ce:b6:a8:8e:18:48:ef:ca:d7:ad:15:16:8d:21:
56:3d:e8:2b:69:88:85:a9:80:a6:c4:7a:ea:d3:1f:
00:fe:60:2d:96:60:31:7a:5b:d0:c0:12:3f:e0:d4:
a6:ab:a2:0f:11:69:6e:2a:6c:01:0b:9e:1c:5a:25:
52:26:23:f4:ec:2b:f3:cf:de:93:c8:b9:7c:02:bd:
28:ec:7a:64:68:6c:b9:ff:1c:ac:cf:7a:bf:3b:82:
51:45:f5:37:d2:ba:2c:91:55:05:76:8e:fa:81:54:
7a:3b:a3:39:49:2b:5c:7d:82:29:53:c0:ec:f2:ae:
3e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AD:66:BB:5F:C7:36:22:C0:CF:09:D1:4A:0F:81:37:52:55:DF:D6
X509v3 Authority Key Identifier:
keyid:CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a1:cb:f6:d7:68:93:e0:5f:da:c9:83:f2:1d:ec:9c:b4:11:
fc:db:17:7a:e1:6e:8f:9b:7c:d4:2b:4e:b7:83:56:bb:cb:5d:
7f:00:ca:60:b7:b9:fb:67:eb:4c:4a:75:87:65:50:55:90:aa:
8e:36:79:db:e7:07:69:5a:d3:25:d6:65:9a:33:b3:c2:38:bf:
61:29:d3:96:53:01:30:9a:c2:d4:0d:f0:d2:18:74:0e:ea:15:
f9:bc:ed:b5:e0:5c:af:d5:ac:2a:ae:4b:bb:e7:a7:02:8c:e5:
fd:e1:b3:03:77:c1:11:1c:1b:80:d1:22:dc:42:a1:4c:e1:04:
df:78:89:c4:49:37:bf:cd:b9:54:d8:fa:9f:c5:73:df:c0:52:
29:31:b1:d6:d9:b9:22:62:63:0e:ff:7b:ef:92:47:63:15:19:
50:95:c2:8d:15:cb:32:21:5a:d6:7a:56:40:b2:0c:2b:44:fc:
70:92:f7:c0:52:c0:e0:43:e0:d3:49:44:77:25:08:d0:d4:4e:
4f:e1:01:23:b6:ca:65:98:9d:1a:b0:17:2c:90:e2:74:22:f2:
23:93:34:49:db:ad:15:4c:e7:77:1f:ef:93:bf:e9:06:a1:29:
ec:dc:c8:c0:63:10:c1:f0:b9:6b:58:d2:3d:49:70:e7:02:7b:
86:a2:41:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:00 2025 by rpki-client