Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json)
Hash identifier: ZK3rPO6zCSvM9ELii8jC5z7FGDLh1vPLfO/m5D0KRHQ=
Subject key identifier: C9:4B:D3:EF:A5:18:D1:CE:5D:0A:7B:E2:5F:B6:DE:16:D4:84:FA:BC
Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Certificate serial: 0194BC04BA67EBF6449D48C856792D47AE61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
Manifest number: 1483
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: 46nBDvj667zfOAp042BssRV0tGo.roa (hash: ijvMinyi7MX0fq0QyRdi2Vr4DZ+zPLFltRyx4COFtiw=)
2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: zFoc7g92dF4zQPtiKaL21vt00qhug7xpURZ38vdXjIQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ba:67:eb:f6:44:9d:48:c8:56:79:2d:47:ae:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=c94bd3efa518d1ce5d0a7be25fb6de16d484fabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:dd:78:79:e8:d2:87:a6:32:32:a0:2d:4e:
02:13:68:64:f9:e0:e0:ca:d9:8c:dd:98:c5:3d:c8:
0d:14:35:8e:6b:6d:7d:63:3e:1e:58:f0:17:45:5b:
0c:32:b0:04:14:30:5a:11:85:7d:cf:2f:14:d4:6b:
db:25:4e:1f:b8:f7:d3:36:b2:da:67:e4:bd:c9:77:
99:cc:7c:0b:8a:58:b7:10:4f:e5:75:78:b4:72:f0:
3c:69:5e:6c:37:b6:5a:c0:ad:3c:af:fe:3a:06:c9:
27:e6:a7:5b:76:de:d3:0a:dd:fa:98:b9:71:ae:15:
eb:75:62:ae:d8:44:8f:79:06:0b:0b:f7:d8:1d:2b:
cc:96:2e:94:b9:36:62:29:93:0e:b4:ee:ac:1c:64:
c0:99:6f:fa:dc:a3:c5:81:34:18:bb:1d:1b:68:2e:
e0:9c:79:a3:e6:68:73:d8:4d:3b:45:01:dc:c2:16:
77:4a:44:a7:5f:c3:2b:7f:78:eb:56:7b:81:f2:2b:
ac:36:01:f8:37:88:bc:ce:a2:20:b2:3d:b8:ea:e2:
45:c8:54:72:41:a8:44:c4:ec:7d:09:8d:24:96:57:
10:ee:b2:96:86:b5:31:90:58:d0:b8:b5:ac:d2:b8:
d7:97:94:82:7b:25:69:64:9b:4e:47:59:88:61:bc:
aa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4B:D3:EF:A5:18:D1:CE:5D:0A:7B:E2:5F:B6:DE:16:D4:84:FA:BC
X509v3 Authority Key Identifier:
keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:16:8b:38:0a:3b:0c:42:fc:3c:47:06:ac:9d:84:cf:a3:66:
e9:70:2d:73:56:4e:ff:d7:22:ab:c5:58:97:3a:ad:a3:fb:03:
ab:94:be:9b:20:60:c8:3e:33:68:85:86:36:24:75:86:83:b6:
95:0a:c9:51:5e:74:46:4f:0b:04:2f:e2:e6:0d:23:65:3e:ab:
57:09:94:a7:37:4d:68:f4:86:70:15:95:39:f5:92:56:3c:fa:
e5:63:ae:e5:48:8e:e1:0d:c7:ce:15:a9:51:5c:0c:62:d8:26:
ae:43:61:4b:58:0f:bd:1a:99:27:d1:20:23:3b:26:47:73:0b:
87:ba:f9:1c:60:ce:2b:d7:a6:ba:fc:b0:ed:44:7f:99:83:37:
8a:68:a8:3a:ce:93:14:8a:ce:d4:a8:50:a8:08:32:95:d1:f7:
a4:2a:89:34:a6:6d:82:8e:c2:8a:6f:d8:ef:6d:18:d7:dc:e7:
e8:21:f0:58:72:65:91:62:33:cd:1f:48:ee:ca:c6:15:a7:f7:
19:e8:19:66:62:2e:13:b9:52:ab:71:ea:ce:ba:a8:fb:5f:a9:
17:ca:f7:16:aa:dc:c0:55:85:86:8f:da:47:b5:4e:c3:6b:89:
46:9a:4d:fa:b8:0a:df:45:70:11:3a:c4:78:b1:5e:ee:8e:f5:
4f:bb:ba:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLpn6/ZEnUjIVnktR65hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZGMyNWVhM2EwYTcyOWVkOGU2ZTlhNzNkYTg5NmQ4NGY5
NTQzOWMwHhcNMjUwMTMxMTEwMDEzWhcNMjUwMjAxMTEwMDEzWjAzMTEwLwYDVQQD
EyhjOTRiZDNlZmE1MThkMWNlNWQwYTdiZTI1ZmI2ZGUxNmQ0ODRmYWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwczdeHno0oemMjKgLU4CE2hk+eDg
ytmM3ZjFPcgNFDWOa219Yz4eWPAXRVsMMrAEFDBaEYV9zy8U1GvbJU4fuPfTNrLa
Z+S9yXeZzHwLili3EE/ldXi0cvA8aV5sN7ZawK08r/46Bskn5qdbdt7TCt36mLlx
rhXrdWKu2ESPeQYLC/fYHSvMli6UuTZiKZMOtO6sHGTAmW/63KPFgTQYux0baC7g
nHmj5mhz2E07RQHcwhZ3SkSnX8Mrf3jrVnuB8iusNgH4N4i8zqIgsj246uJFyFRy
QahExOx9CY0kllcQ7rKWhrUxkFjQuLWs0rjXl5SCeyVpZJtOR1mIYbyq/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlL0++lGNHOXQp74l+23hbUhPq8MB8GA1UdIwQY
MBaAFMvcJeo6CnKe2Obppz2olthPlUOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS81ZGExZTYtMjQ2Zi00NDkzLTk5MmUt
MjJjNzlhZWExMjdjLzEveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS81ZGExZTYtMjQ2Zi00NDkzLTk5MmUtMjJjNzlhZWExMjdj
LzEveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRaLOAo7
DEL8PEcGrJ2Ez6Nm6XAtc1ZO/9ciq8VYlzqto/sDq5S+myBgyD4zaIWGNiR1hoO2
lQrJUV50Rk8LBC/i5g0jZT6rVwmUpzdNaPSGcBWVOfWSVjz65WOu5UiO4Q3HzhWp
UVwMYtgmrkNhS1gPvRqZJ9EgIzsmR3MLh7r5HGDOK9emuvyw7UR/mYM3imioOs6T
FIrO1KhQqAgyldH3pCqJNKZtgo7Cim/Y720Y19zn6CHwWHJlkWIzzR9I7srGFaf3
GegZZmIuE7lSq3Hqzrqo+1+pF8r3FqrcwFWFho/aR7VOw2uJRppN+rgK30VwETrE
eLFe7o71T7u6MQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:49:05 2025 by rpki-client