
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
File: ybBR6OaBSbZgROfeSuWdc25Teqo.mft (raw, json)
Hash identifier: k0CkizNLHyXX7deWHB7FT0wnojl6yor7XxWWxtXmTdY=
Subject key identifier: 86:12:86:D6:87:52:32:A6:64:2F:F6:AD:D1:0D:35:BF:4B:3A:C0:30
Authority key identifier: C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
Certificate issuer: /CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Certificate serial: 0194BC3C98B8BB0959A31A7879CC3C22DCA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
Manifest number: 0413
Signing time: Fri 31 Jan 2025 12:01:15 +0000
Manifest this update: Fri 31 Jan 2025 12:01:15 +0000
Manifest next update: Sat 01 Feb 2025 12:01:15 +0000
Files and hashes: 1: ArFunhGUh4z5gE5BaMxIilumjuo.roa (hash: +Y+pIXJkKqGVxuRKoBP5VqtBPTsF8z5U0O22HLQqFaA=)
2: byUVA5qV1IbcwSPIkfdvjR5Q_jI.roa (hash: dK4W//mWQId08viaOEDpjWgfsu+tE5gfBKP2LChtCus=)
3: tLmXVGY6n6fVRzQmW79aMR0MJps.roa (hash: TSYx/9L1XrTJwYjdabKmZhceP9EJlWD0fOeM06mdy/g=)
4: ybBR6OaBSbZgROfeSuWdc25Teqo.crl (hash: vVYJ60OAHbJJInPkNcGwplFkxyeEtaQ8VhhjMz92L1E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:98:b8:bb:09:59:a3:1a:78:79:cc:3c:22:dc:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Validity
Not Before: Jan 31 12:01:15 2025 GMT
Not After : Feb 1 12:01:15 2025 GMT
Subject: CN=861286d6875232a6642ff6add10d35bf4b3ac030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fa:29:9b:50:a3:67:d6:20:6d:b7:09:39:31:
2b:85:9a:b9:33:70:08:93:96:25:46:4f:8e:83:a9:
51:58:8e:11:6a:1b:38:8d:15:e5:29:d2:c7:2e:5f:
50:9a:c3:10:bc:f2:5a:18:9a:e3:00:01:ca:88:48:
23:5b:b3:e5:b6:8d:dd:f6:1e:73:e0:6b:71:ad:cd:
38:52:5f:c4:99:0a:fd:f0:a0:01:05:5c:7c:ac:ed:
57:07:23:c0:19:0e:4e:39:31:7d:e1:b5:06:50:9c:
57:cb:50:df:be:ff:a2:3f:8b:fd:5b:29:be:47:68:
e2:bc:bf:54:0c:56:09:d9:f2:32:41:b9:68:a5:1e:
f4:a1:10:23:29:ce:66:22:2b:18:b8:db:76:18:b4:
ac:23:39:73:c4:95:4f:9d:03:e8:ac:d6:4f:77:d8:
ae:4c:b5:ab:f8:5c:df:96:54:01:0c:4b:f7:90:51:
6c:d9:68:c5:1c:0a:9b:6b:c5:c9:80:c0:98:c4:58:
88:bf:ea:d8:11:1c:a7:e9:5b:6d:ba:20:a3:6f:e3:
c4:03:7b:bc:2a:f5:71:7b:17:43:f4:a0:11:99:3e:
26:0c:ba:0c:21:d4:a2:f8:61:9c:13:23:8c:5c:f3:
cb:2a:af:3f:5e:91:98:df:5d:da:b5:2e:da:d4:b6:
77:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:12:86:D6:87:52:32:A6:64:2F:F6:AD:D1:0D:35:BF:4B:3A:C0:30
X509v3 Authority Key Identifier:
keyid:C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:23:b2:89:5d:05:12:65:ef:47:c8:16:ea:c5:63:8b:83:d3:
dd:ed:00:d9:47:d9:6a:4d:31:d6:49:fa:45:f9:0f:f4:36:d5:
a9:5e:79:b5:06:af:1a:a1:7f:ba:be:1b:35:50:b9:e4:58:00:
ad:95:f6:2b:cb:d1:7d:b1:11:d6:ad:d0:c0:b5:43:1f:e1:ed:
74:01:fc:d6:62:42:d6:ae:f8:94:94:16:16:44:89:5d:31:59:
3f:ef:14:55:f9:07:1e:e0:c8:e3:9e:05:f1:72:03:4d:72:99:
a4:49:86:e1:1a:68:22:4d:8a:ed:f5:17:a4:fc:31:02:ba:99:
72:1b:ff:6c:8b:d5:9c:6c:5f:d0:92:d8:1d:47:3d:a0:96:13:
71:ba:44:bb:b3:85:8c:75:cb:c1:65:58:c8:a8:fe:71:12:fe:
62:0b:09:e3:f7:ef:5c:53:65:76:bd:5b:08:6f:c9:75:69:d0:
27:88:83:38:29:50:3c:18:a9:5f:a0:b4:20:97:a7:17:e9:fa:
85:36:47:d2:a8:0e:51:6d:cb:1c:c5:90:6b:7e:d0:d9:a4:76:
1e:24:83:e7:67:78:58:49:da:f1:cc:86:cc:26:7e:6d:20:a9:
49:d0:7d:a0:55:cb:5b:76:76:a5:c3:57:b8:2f:fd:f2:49:ee:
21:a2:92:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:34:58 2025 by rpki-client