Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File: yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier: xeFY1h3GRJHaj5pp4pt5e8VAWqK4V9YJxhzdoC2ponI=
Subject key identifier: 9A:08:28:09:28:D1:E3:AF:60:0D:2F:A1:33:35:52:62:FD:7D:B1:A9
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial: 0194BD85A89CC05928D10FF84B19C65ECE40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number: 0CD6
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: 4BKXiOWzlfYikLi_sZlf2-K1W3Y.roa (hash: aDvx4M+Sx23ZKmtoISsi+UpckIqq0gCCdZtw7df9WaU=)
2: M3l6n6c1Uj_n_JgR8ZrfrLCPmEs.roa (hash: 3gSLeL85QT+qMeEBuaLQCojXzGB+ZrRAItjya+Tdf3Y=)
3: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: m7JrkSEtKKl2i2mQB3O1beFH4rIob8LYrc4bB1LDxyg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a8:9c:c0:59:28:d1:0f:f8:4b:19:c6:5e:ce:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=9a08280928d1e3af600d2fa133355262fd7db1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:21:e2:fe:86:28:f6:0f:09:5b:80:85:94:
30:1d:e7:c5:b4:3e:3d:ef:b0:20:e1:2d:6b:26:59:
fa:26:08:14:e5:5c:59:c7:58:09:82:24:e3:16:ca:
97:37:ed:d8:3f:42:72:aa:02:c3:9e:5b:75:3f:aa:
e0:5b:0c:0c:b1:d8:81:2b:86:d9:7f:27:48:0c:f4:
45:e2:5d:cb:23:4e:67:1f:d4:f0:e8:14:50:18:3f:
aa:53:d1:87:de:94:23:7d:c1:e5:c2:8a:5b:12:0a:
89:16:4b:83:9e:0d:10:ac:e6:d9:a6:7b:b4:1b:f0:
7f:0b:62:f6:81:34:7a:8f:2e:fe:cc:03:ba:32:a6:
e6:e5:4e:bb:6e:f5:8f:18:7c:80:7c:8f:2c:8b:3d:
62:4e:b2:23:64:ec:e5:ac:ff:64:e0:28:8b:99:27:
49:ad:67:ae:4a:cd:f0:16:71:30:72:fd:52:54:0c:
7c:59:c2:db:5c:8d:a6:c1:6f:b2:32:5e:57:29:c5:
06:bf:48:e2:40:de:d2:93:d5:de:35:e1:d3:31:49:
5e:a5:c6:4f:42:59:fd:47:c0:d1:82:17:40:71:4e:
a9:ff:48:64:78:6f:b4:06:4b:aa:01:2b:6f:21:51:
d8:a8:06:46:75:ea:dc:45:21:99:5b:10:30:97:1e:
4b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:08:28:09:28:D1:E3:AF:60:0D:2F:A1:33:35:52:62:FD:7D:B1:A9
X509v3 Authority Key Identifier:
keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4f:13:39:5f:7f:29:29:f8:b1:8a:bc:19:22:33:d7:93:12:
c5:13:0f:56:a9:9f:39:bb:64:d0:b6:59:e3:9d:06:f3:2e:08:
d0:94:84:85:3f:02:b4:da:57:bf:8d:69:18:7a:94:8d:7d:0a:
4a:86:ed:d0:97:82:08:f2:f0:70:68:ac:7d:11:7f:24:a3:28:
30:5b:19:e8:96:15:a7:fa:af:b5:0c:31:c3:a1:8b:aa:4c:ef:
7d:3c:85:04:e2:fc:61:12:72:2a:fb:4a:2e:f3:91:22:2d:33:
5c:b2:8e:ec:57:78:a0:03:ac:db:8f:ca:5b:14:f8:53:24:96:
26:fc:fc:7e:ac:db:3e:8c:e7:eb:a6:b5:69:52:29:e2:b6:b9:
bd:d6:63:0b:d0:6a:4c:72:1c:4a:0a:5c:ff:ad:9a:49:ed:d9:
9e:bb:ce:38:92:b9:bf:32:c0:89:c2:ec:90:33:1a:55:17:ad:
f4:a7:65:61:31:96:3c:8f:52:80:6d:b6:26:c4:f3:c8:dc:5e:
5e:a5:d7:9e:2b:79:bd:1c:5d:2b:c0:4a:89:60:8d:5f:c1:2a:
01:d8:2a:96:b3:de:84:19:2b:80:c3:ea:bc:12:a9:1d:d3:a2:
e4:6e:3f:16:23:12:70:fe:c2:ba:80:6c:83:66:7c:66:eb:aa:
c9:6d:ef:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:31 2025 by rpki-client