Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
File: y0W24SUWoP1eur56eBEILzp0Y5c.mft (raw, json)
Hash identifier: s/mhJ24nhNp7SsiGyPdfR1tt5pavs4T2VjLwmjlCEiI=
Subject key identifier: 86:27:8A:08:3D:92:3D:83:7E:DE:BE:56:67:39:09:9F:98:1D:1C:D3
Authority key identifier: CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97
Certificate issuer: /CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397
Certificate serial: 0194BC04EA12E0733E262A4D02BE90F8BFA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
Manifest number: 0953
Signing time: Fri 31 Jan 2025 11:00:26 +0000
Manifest this update: Fri 31 Jan 2025 11:00:26 +0000
Manifest next update: Sat 01 Feb 2025 11:00:26 +0000
Files and hashes: 1: d43Bbm-jTlxIEQu_UfTFZQFzBcE.roa (hash: UkexUnRIJprjhWor4Jilgkay/bVJfFqJkF7dBPx8pH8=)
2: y0W24SUWoP1eur56eBEILzp0Y5c.crl (hash: 6SlmEIwwXx1cJxM8sGIxceIRUevTBBLEVkIYu+jf1UY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ea:12:e0:73:3e:26:2a:4d:02:be:90:f8:bf:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397
Validity
Not Before: Jan 31 11:00:26 2025 GMT
Not After : Feb 1 11:00:26 2025 GMT
Subject: CN=86278a083d923d837edebe566739099f981d1cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:50:60:0b:ab:96:d9:bd:bf:8e:d1:fd:12:7c:
c7:3b:1f:4a:84:06:c2:94:04:cb:bf:72:a1:61:24:
a9:ab:46:1c:b6:6a:08:5f:cd:aa:27:ed:79:ce:e0:
6e:c8:27:39:31:7a:98:f0:43:85:b0:fe:bc:3e:48:
70:ed:4a:36:f4:61:c8:79:25:3e:da:8d:19:bb:77:
41:f4:ef:46:8a:b6:b6:e9:c8:de:dc:36:c0:b1:44:
4c:f7:95:5c:5a:ce:2b:4f:7b:ec:64:6d:a9:d1:98:
78:85:87:54:e5:5a:ab:f3:0e:f4:e0:76:fc:51:45:
76:43:e1:fc:dc:60:13:76:fd:86:e7:cc:39:05:16:
1c:79:58:ab:a4:cb:db:71:86:59:4e:c8:f7:2e:79:
6c:78:17:3e:d1:14:4e:8d:a7:29:4b:dd:42:04:c9:
ec:dd:dd:86:dc:e2:56:52:c0:bc:00:e5:0b:13:e1:
1e:fe:15:b5:98:d6:0d:cb:f4:bb:15:38:37:1e:33:
ff:a3:5c:f2:ff:74:55:f5:c6:59:31:67:3a:39:ad:
85:39:ae:aa:4d:57:46:34:9c:c0:84:e4:61:de:69:
e5:d7:e0:d8:7e:c2:10:e4:36:af:f2:17:f4:66:4a:
25:60:d2:81:c9:b6:e2:1b:82:aa:33:a0:de:0e:f9:
f8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:27:8A:08:3D:92:3D:83:7E:DE:BE:56:67:39:09:9F:98:1D:1C:D3
X509v3 Authority Key Identifier:
keyid:CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:30:59:32:be:83:ce:70:58:2f:4c:00:cd:e3:34:20:ba:2c:
44:4d:0a:b4:11:05:5e:32:d3:91:9a:fe:8b:77:7f:ae:4e:c4:
73:ff:a3:fa:0c:98:20:0c:5e:4c:6a:5e:05:98:15:5d:1e:c3:
6b:65:ea:df:d5:6a:7e:63:bb:1c:45:f4:c9:b7:01:6b:92:a5:
9b:54:00:af:d7:4b:e0:14:bc:c2:c5:53:df:52:ef:df:7d:99:
19:13:ae:d4:1d:e7:83:b9:16:dc:61:b9:74:ba:63:cb:2f:27:
3a:6c:4e:ae:99:00:33:80:1d:e4:77:99:e7:db:3e:bc:c8:40:
a4:7c:7d:35:9a:ec:75:1f:88:b7:8d:aa:d1:74:f8:a7:c2:7e:
4d:a8:90:80:02:bd:db:38:6f:e2:b4:0a:a7:fb:c1:68:2d:ba:
98:bb:5e:90:93:f6:e6:78:fb:36:99:da:f0:81:62:be:e4:97:
bc:9b:70:ab:22:9e:d7:02:44:07:7f:d4:d8:05:dc:c8:ed:8f:
81:5f:fd:bd:79:5d:df:c5:4e:13:27:44:10:d3:3d:dd:d2:43:
14:6d:f6:46:a5:3d:60:98:3c:ba:9c:90:af:f0:fe:bc:6a:8d:
47:29:c4:ea:d9:9b:4d:8a:7f:dc:57:fb:9d:b9:72:1c:94:5c:
84:b4:1e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:12:21 2025 by rpki-client