Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
File: y15v1iT-wGkv5waeN5Ix5STYD7w.mft (raw, json)
Hash identifier: GdLZ0D4a1fW0ycl2n5LvlpfXIown3PmyrT9E1cZYuKk=
Subject key identifier: 15:6D:F9:B6:3C:24:14:A1:B3:FB:59:85:5B:C2:D5:24:7F:DE:9B:28
Authority key identifier: CB:5E:6F:D6:24:FE:C0:69:2F:E7:06:9E:37:92:31:E5:24:D8:0F:BC
Certificate issuer: /CN=cb5e6fd624fec0692fe7069e379231e524d80fbc
Certificate serial: 0194BCE0B30493385F8184C96ECECFE26C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
Manifest number: 0ED5
Signing time: Fri 31 Jan 2025 15:00:29 +0000
Manifest this update: Fri 31 Jan 2025 15:00:29 +0000
Manifest next update: Sat 01 Feb 2025 15:00:29 +0000
Files and hashes: 1: 3mViGQZ4y4dgsuOpVqTlOj7Fdak.roa (hash: bm9ouBBryfPy+46YnwBG/A6ErQmwE+ICHvcNK/AHLA4=)
2: y15v1iT-wGkv5waeN5Ix5STYD7w.crl (hash: 52v83mSMzy7meG29S2zFq+6qiErsxKDEnDfc56LqXx4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b3:04:93:38:5f:81:84:c9:6e:ce:cf:e2:6c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5e6fd624fec0692fe7069e379231e524d80fbc
Validity
Not Before: Jan 31 15:00:29 2025 GMT
Not After : Feb 1 15:00:29 2025 GMT
Subject: CN=156df9b63c2414a1b3fb59855bc2d5247fde9b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:50:3b:de:f2:bb:2d:cc:11:d1:86:82:1a:e5:
b6:b4:c2:85:b3:e6:b0:53:84:bf:f3:b4:2c:f4:f2:
17:e3:6a:29:29:4f:41:28:81:1b:08:67:33:90:43:
ea:ae:7b:9f:56:aa:2b:7a:9a:a4:1f:79:d8:51:17:
5a:94:18:c5:85:bc:bc:2c:82:ef:ed:19:48:e1:90:
93:cc:c6:37:58:7f:3e:24:ef:68:5d:71:d7:cd:aa:
e6:22:0f:6b:41:b7:31:f3:a0:2d:81:0b:85:60:0d:
29:ef:16:51:60:76:30:97:95:d2:a5:6e:5b:e2:21:
81:0a:93:50:46:2d:09:24:58:17:c2:b3:7e:bc:14:
89:be:a9:bc:d6:5c:3c:8e:19:9f:3c:f5:b0:11:91:
ba:bb:2e:d4:36:2a:f5:9d:1a:88:7f:89:34:19:8f:
c4:ae:82:83:c3:02:4a:49:ef:8b:e9:c7:03:c6:9d:
a8:56:eb:1a:05:dd:be:ec:17:0f:ca:27:bc:56:25:
4a:23:82:1e:c0:e8:3c:40:53:a0:37:ed:06:5f:05:
28:5f:0c:17:31:ad:f3:5d:38:de:78:9b:b1:a7:3b:
74:a3:d2:1c:bd:22:a9:63:76:a3:5a:a4:a9:1c:35:
74:6b:9b:58:58:a4:ce:79:c7:52:32:de:33:4d:79:
06:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6D:F9:B6:3C:24:14:A1:B3:FB:59:85:5B:C2:D5:24:7F:DE:9B:28
X509v3 Authority Key Identifier:
keyid:CB:5E:6F:D6:24:FE:C0:69:2F:E7:06:9E:37:92:31:E5:24:D8:0F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:93:84:5a:5a:c7:a9:5b:51:75:5c:0f:fe:cd:55:b7:99:8d:
35:9a:b5:cb:7f:cc:c0:46:3c:fa:a4:0a:d2:d8:68:90:01:82:
e2:b0:e3:7b:6d:2e:ea:f8:9c:ba:6e:b9:0c:de:f0:ad:a9:83:
cd:71:6e:30:5b:dc:44:23:5b:d5:b9:18:5a:a1:bc:64:fc:06:
54:22:61:85:d3:92:ea:a2:5f:41:c2:35:f0:84:cf:ee:46:66:
e2:ac:0f:28:74:4f:01:93:9c:cf:bd:be:5e:e4:74:28:14:2c:
7f:71:88:73:e7:86:0f:e6:e7:85:61:c2:83:10:63:bc:f0:fd:
ce:f8:fa:50:0f:0d:22:41:10:c9:6e:50:9f:e8:88:3d:3c:ef:
40:3c:0a:e9:d7:01:83:68:58:5c:4a:08:0f:9c:74:f3:ab:e4:
f9:ed:29:e0:2d:b7:ae:b4:b7:ef:6a:ba:78:e5:83:7e:c8:75:
be:4e:a9:f8:a8:6a:77:bf:08:8f:0b:7a:4a:63:66:92:9f:ce:
52:e2:f4:c1:1a:8d:7d:69:9a:bd:6b:38:22:7e:ea:91:12:b8:
15:7f:6f:06:f8:63:67:6d:4b:c2:2e:da:eb:95:56:d4:3a:47:
5c:2c:e8:00:ca:93:9d:04:03:7a:a0:20:5b:3b:60:7d:1f:bc:
c0:66:d8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:21 2025 by rpki-client