Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
File: yhzFx7EhfMuxVd3a6CbOb5_brLo.mft (raw, json)
Hash identifier: d+ZWP0s2Lfk1eR9FKwVeCZnlPernAPeI6ur1iJi3/Kg=
Subject key identifier: 0F:2C:E8:25:61:E2:92:E6:B2:9B:77:4F:86:13:3F:20:94:8D:4D:EB
Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
Certificate issuer: /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Certificate serial: 0194BC72C1EF821781C38F45527ACEC9A0E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: 2FFEY09azLJTH6k5p2L8yGNWFOo.roa (hash: LYP5IN3KECDE6yYzDR6sOeEMUgedzGLz0JulDOlpS/Y=)
2: TiM8PFfhJwubSxEOjHgR8gOCbyY.roa (hash: 7DumFB2ADxftJBLCjeXdfBUV+HnexGTjjqRHzmstg+Q=)
3: yhzFx7EhfMuxVd3a6CbOb5_brLo.crl (hash: CFEi9Cm7rGXefLxXcMRxxIl/LDNCCbN1jjEXbE8zuI0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c1:ef:82:17:81:c3:8f:45:52:7a:ce:c9:a0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=0f2ce82561e292e6b29b774f86133f20948d4deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:3e:0b:d1:f5:c8:cc:1f:25:c8:8c:27:76:
4b:46:85:88:6d:1d:84:62:bd:1e:c4:d5:5b:7a:11:
43:eb:40:6c:07:e2:17:e1:4a:cb:96:6b:0f:8c:56:
1b:a3:14:ea:2f:7f:8a:8d:7c:f8:6c:c6:98:48:79:
59:7a:5c:74:bb:72:f2:1e:68:cf:ea:79:51:7d:7e:
50:4d:33:7c:3f:65:3b:72:d7:e4:e9:88:a9:14:72:
7c:dd:0c:3d:bd:cd:6e:2b:b3:c8:3c:6f:e8:72:bb:
26:de:4d:35:9d:c4:8f:0e:b9:c5:f8:98:af:36:30:
4f:53:b2:f1:aa:7a:c6:52:3c:5b:44:78:6a:39:89:
9e:20:07:36:b9:49:66:91:49:0b:3f:97:9a:8c:e2:
2b:69:9c:d3:07:8a:9f:b6:5d:6b:87:b6:e4:59:e1:
04:b5:61:9b:1a:8f:0c:35:00:ec:6b:c6:b9:11:9e:
ae:e4:22:71:5c:ae:9a:3f:d5:ff:d4:59:06:54:31:
04:cc:49:6c:b8:24:51:01:13:af:bd:47:6b:cc:27:
4f:d2:bf:a9:b7:18:58:81:21:ac:35:79:0a:67:9e:
bb:81:b5:62:49:31:0a:f1:03:5c:34:db:91:7e:82:
0b:8c:68:32:8d:d2:96:c4:78:16:2e:ca:91:34:ea:
37:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2C:E8:25:61:E2:92:E6:B2:9B:77:4F:86:13:3F:20:94:8D:4D:EB
X509v3 Authority Key Identifier:
keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3d:f8:15:ea:73:51:70:37:8d:9f:68:17:c0:d7:10:11:4a:
0c:41:c2:42:32:9c:53:5d:d6:ff:89:5d:fb:5f:fb:52:db:b2:
0d:9c:c1:b5:f2:0f:03:53:ee:0e:14:7d:83:63:58:00:03:2a:
fd:6c:b4:35:6c:56:42:4b:8f:08:9f:ba:c9:93:79:c0:a5:dc:
ec:91:1c:f9:d3:89:a7:3b:77:67:53:7e:4c:56:d8:c1:9c:b2:
4d:47:77:44:e8:18:7e:15:f4:2c:ee:a0:1e:60:fb:7f:43:9c:
4c:8d:0a:55:0c:1a:2b:97:9f:e7:d4:39:60:9a:7f:f0:61:04:
d3:6d:d6:73:42:a0:fa:cd:da:21:2a:2b:55:30:d7:68:9f:17:
c7:02:d0:b4:f9:fd:89:ca:bf:09:e7:b4:c3:5c:92:4e:1c:3c:
2b:03:cc:78:7b:09:d9:62:d3:b1:6c:38:29:78:f8:5b:2c:d8:
ec:5e:68:00:f5:f3:f7:e7:c8:91:86:c2:52:20:48:09:20:9b:
61:b6:0a:e2:cf:ea:a3:d3:f6:4d:8e:ea:96:10:d7:61:39:3d:
5b:50:72:f1:19:77:c4:47:10:c9:93:07:5a:fa:1b:d3:83:4e:
a6:4e:9c:b9:d6:bb:68:af:a8:80:d0:81:d7:80:30:ef:4f:3a:
32:3f:6f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:11 2025 by rpki-client