Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/yvRJQqKfrGEs1E-DrTF6HA9bjuo.mft
File: yvRJQqKfrGEs1E-DrTF6HA9bjuo.mft (raw, json)
Hash identifier: KpgvwOcKmJqNUzrNRlyBjQx9oAwuG+98fHaYbs5vFLo=
Subject key identifier: 4D:93:60:D0:58:90:3E:D0:E8:BD:18:85:F3:61:4D:66:EE:D7:20:3D
Authority key identifier: CA:F4:49:42:A2:9F:AC:61:2C:D4:4F:83:AD:31:7A:1C:0F:5B:8E:EA
Certificate issuer: /CN=caf44942a29fac612cd44f83ad317a1c0f5b8eea
Certificate serial: 019547EC88BE44C99A5DB4B59F9E19CCCFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvRJQqKfrGEs1E-DrTF6HA9bjuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/yvRJQqKfrGEs1E-DrTF6HA9bjuo.mft
Manifest number: 07BD
Signing time: Thu 27 Feb 2025 15:00:38 +0000
Manifest this update: Thu 27 Feb 2025 15:00:38 +0000
Manifest next update: Fri 28 Feb 2025 15:00:38 +0000
Files and hashes: 1: kubkTN8FMP9d-Mo63ocBIKQM-Lc.roa (hash: keKknVV6p3wikzpiPvb9HlIVLJ5zBFrwVTTK+JW8U4o=)
2: yvRJQqKfrGEs1E-DrTF6HA9bjuo.crl (hash: NRRaQFFaWIJNzEHA3vHey+Oolkb4VMLT7vU0wO99KdQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:ec:88:be:44:c9:9a:5d:b4:b5:9f:9e:19:cc:cf:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf44942a29fac612cd44f83ad317a1c0f5b8eea
Validity
Not Before: Feb 27 15:00:38 2025 GMT
Not After : Feb 28 15:00:38 2025 GMT
Subject: CN=4d9360d058903ed0e8bd1885f3614d66eed7203d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ba:38:c9:92:e1:a5:4a:73:34:34:95:5d:6d:
8a:e7:ed:99:fc:47:88:7d:3b:de:fe:9c:b4:72:ad:
d8:8b:69:2d:37:8f:c3:63:08:72:ac:fe:1f:46:e6:
79:df:86:25:a7:53:e9:39:98:2e:53:7c:ff:d6:c6:
83:fe:22:60:73:4a:fb:fb:5a:75:60:5b:1f:c9:df:
f6:67:39:4d:e2:ce:e1:15:55:e4:0d:3e:5a:76:8b:
19:73:b5:5a:6c:fe:9c:03:ef:55:37:20:94:ac:4b:
63:7c:7d:44:fc:c9:9d:a8:29:58:a3:83:55:11:39:
9c:18:ca:2e:44:24:06:6e:02:b7:e5:a7:56:75:31:
96:68:03:d2:1c:73:fa:3c:95:78:b4:1a:8a:5a:e2:
ed:51:63:a1:71:e4:7a:42:d6:53:b3:45:f3:34:b4:
fe:8d:1c:fd:92:ef:c8:c5:ec:62:00:f0:ae:e2:b1:
48:34:bf:52:16:11:8a:c2:b1:3b:6b:9c:88:da:a7:
45:f8:9c:67:ea:85:fd:1f:df:b8:36:48:f1:6d:ec:
cb:f7:64:17:3b:bd:6d:b7:f3:52:97:ca:9f:03:01:
b5:59:d5:ef:fe:ec:72:12:62:e2:39:03:66:df:cb:
6e:2d:fe:c5:1e:14:71:59:92:15:5e:62:a1:86:b3:
ee:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:93:60:D0:58:90:3E:D0:E8:BD:18:85:F3:61:4D:66:EE:D7:20:3D
X509v3 Authority Key Identifier:
keyid:CA:F4:49:42:A2:9F:AC:61:2C:D4:4F:83:AD:31:7A:1C:0F:5B:8E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvRJQqKfrGEs1E-DrTF6HA9bjuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/yvRJQqKfrGEs1E-DrTF6HA9bjuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/yvRJQqKfrGEs1E-DrTF6HA9bjuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:89:15:64:f1:ce:b7:8a:6e:8f:0d:be:71:40:f9:5e:79:a2:
68:f1:ac:16:68:ae:f6:64:4b:1e:e3:5f:d4:05:d7:95:08:8c:
f4:43:7c:bb:ff:cc:a7:63:91:57:15:01:56:32:81:41:47:fa:
18:b1:81:92:60:eb:35:ae:86:76:4c:58:4a:e3:3e:8f:34:67:
25:94:1e:b5:95:43:a8:f0:b3:68:2b:9e:ce:5a:ed:c5:ec:ca:
d8:e3:e4:bd:ba:1c:54:79:2e:58:b5:c8:14:22:e0:16:32:40:
94:46:9b:0c:38:06:10:4f:be:c3:15:ec:83:a5:76:87:47:98:
db:c3:be:b8:51:87:a1:13:07:ee:ad:f7:ab:42:1f:6f:f2:ea:
a9:ec:9b:00:49:ed:41:8d:63:66:ad:43:1b:83:5d:89:29:a5:
63:02:ab:af:a0:7e:0d:50:37:b1:0c:89:e1:ba:e0:55:2c:6b:
62:53:38:bd:53:55:3c:51:14:61:b0:eb:d3:e6:db:58:b0:aa:
b8:6a:d1:03:8d:4a:c0:c0:7f:32:8e:ca:fd:c4:2d:ac:c0:6f:
2c:3d:3d:e6:14:17:67:7a:8a:c3:85:be:c6:d6:c8:14:36:6b:
68:54:ec:ea:ff:e3:2a:68:72:7f:dc:eb:04:31:0a:0e:d8:03:
05:30:86:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:48:30 2025 by rpki-client on console.sobornost.net