Manifest
$ rpki-client -vvf rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.mft
File: CB2B40C722F645663A261D605D1C78BD1B720065.mft (raw, json)
Hash identifier: QBzAO0O7onsF6jIckk2m2T6jFXRVgOeHEQZA+7CzV9M=
Subject key identifier: 54:86:5D:A1:2F:C5:60:52:C4:C4:FC:0A:CF:AE:A3:0A:7C:8B:05:2B
Authority key identifier: CB:2B:40:C7:22:F6:45:66:3A:26:1D:60:5D:1C:78:BD:1B:72:00:65
Certificate issuer: /CN=cb2b40c722f645663a261d605d1c78bd1b720065
Certificate serial: 6EAF22C28CA1E6E120F768FFF02198C0373A0F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yytAxyL2RWY6Jh1gXRx4vRtyAGU.cer
Subject info access: rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.mft
Manifest number: 0334
Signing time: Mon 25 Nov 2024 10:32:00 +0000
Manifest this update: Mon 25 Nov 2024 10:27:00 +0000
Manifest next update: Tue 26 Nov 2024 11:52:00 +0000
Files and hashes: 1: CB2B40C722F645663A261D605D1C78BD1B720065.crl (hash: E9tUBCv+NVwlrpI+LapNFjNTLnod1/pBSs7tx8L8c6w=)
2: AS199514.asa (hash: z/iu5ZLu9SXKGBji4vZxPRtWFiHSeseJmOwWXknQw+M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:af:22:c2:8c:a1:e6:e1:20:f7:68:ff:f0:21:98:c0:37:3a:0f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2b40c722f645663a261d605d1c78bd1b720065
Validity
Not Before: Nov 25 10:27:00 2024 GMT
Not After : Nov 26 11:52:00 2024 GMT
Subject: CN=54865DA12FC56052C4C4FC0ACFAEA30A7C8B052B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:e4:04:a5:d3:8b:65:7a:be:5b:e7:75:1e:
69:f7:ce:c1:11:f2:e3:65:18:03:79:20:f0:c4:21:
16:e1:be:2c:09:e7:a2:4c:68:ff:03:1e:40:26:e1:
f5:6b:4a:e4:e8:0e:d1:d9:f7:64:20:94:e9:06:92:
23:f7:39:d2:9a:90:00:26:96:40:a6:b3:b2:c3:24:
aa:72:6a:a8:ec:91:8e:4a:e6:b8:a0:a1:46:ac:6c:
09:69:8c:09:d0:42:a3:c4:eb:26:0a:c7:eb:05:15:
07:44:7d:e7:82:f6:10:ff:fe:c0:ce:54:45:e0:4c:
fb:70:62:b4:98:78:3e:25:fa:2d:9e:28:18:e4:40:
87:0a:5c:f6:a9:11:f1:c2:0b:ff:67:80:8c:06:9e:
2a:35:19:6c:af:fe:6f:22:7b:bd:eb:af:3d:ad:f8:
9f:c0:ee:ad:6c:f3:65:6b:bc:ba:13:3b:7a:46:0c:
58:f4:88:1d:8f:0a:ab:33:50:cf:5e:1f:f5:38:f7:
1e:4b:a3:ca:cd:2a:49:25:ab:11:de:ae:07:d4:6b:
d3:ad:af:68:42:15:16:72:e3:fd:db:be:b5:ec:c1:
1e:33:99:30:50:11:08:f3:6a:3c:6f:6a:20:3c:07:
59:9c:52:79:ce:43:39:04:bb:fc:43:70:ad:6b:69:
83:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:86:5D:A1:2F:C5:60:52:C4:C4:FC:0A:CF:AE:A3:0A:7C:8B:05:2B
X509v3 Authority Key Identifier:
keyid:CB:2B:40:C7:22:F6:45:66:3A:26:1D:60:5D:1C:78:BD:1B:72:00:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yytAxyL2RWY6Jh1gXRx4vRtyAGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d0:29:0b:8e:b3:88:ea:c1:c5:b0:c4:f7:31:37:7f:24:9c:
a6:e7:59:16:79:d2:f5:76:94:a4:1b:08:7f:b0:c0:94:f0:d4:
ef:6c:52:8c:4b:dd:87:22:c1:0d:7d:bb:9c:a6:74:0d:2e:20:
43:b8:bc:fb:40:73:f3:84:8e:c7:77:59:2f:0e:3b:77:a2:75:
9c:2d:8e:b3:7e:cd:2d:34:3b:31:72:ce:54:eb:8a:4b:aa:e4:
1b:09:fc:ef:f9:42:29:3d:44:75:1b:f9:fc:c9:6d:83:c8:bf:
e4:32:5a:a2:d4:a9:9a:99:54:23:29:2b:2f:d0:49:db:dd:69:
ac:41:18:bd:92:bb:46:2f:4f:59:99:6a:08:82:6a:fb:5f:ec:
75:3c:54:79:53:62:88:90:ab:87:d1:55:6f:47:08:2c:ec:fa:
a6:83:7e:87:f8:88:34:6c:9e:79:bf:56:dc:3a:d9:6a:94:6d:
3c:d8:c3:fc:06:3b:95:6a:dc:81:2e:c4:f6:ac:1f:7b:c0:b8:
54:69:03:77:cf:00:da:6a:f1:b7:f9:ed:0e:a3:c4:c2:e5:f3:
8c:b9:cc:e8:ff:8d:bb:83:6d:15:0d:4d:94:90:12:07:cb:21:
65:24:ef:6e:68:4b:3e:4b:18:a9:67:c2:10:c6:39:3e:2f:90:
d2:18:f5:48
-----BEGIN CERTIFICATE-----
MIIExzCCA6+gAwIBAgIUbq8iwoyh5uEg92j/8CGYwDc6D1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2IyYjQwYzcyMmY2NDU2NjNhMjYxZDYwNWQxYzc4YmQx
YjcyMDA2NTAeFw0yNDExMjUxMDI3MDBaFw0yNDExMjYxMTUyMDBaMDMxMTAvBgNV
BAMTKDU0ODY1REExMkZDNTYwNTJDNEM0RkMwQUNGQUVBMzBBN0M4QjA1MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqFuQEpdOLZXq+W+d1Hmn3zsER
8uNlGAN5IPDEIRbhviwJ56JMaP8DHkAm4fVrSuToDtHZ92QglOkGkiP3OdKakAAm
lkCms7LDJKpyaqjskY5K5rigoUasbAlpjAnQQqPE6yYKx+sFFQdEfeeC9hD//sDO
VEXgTPtwYrSYeD4l+i2eKBjkQIcKXPapEfHCC/9ngIwGnio1GWyv/m8ie73rrz2t
+J/A7q1s82VrvLoTO3pGDFj0iB2PCqszUM9eH/U49x5Lo8rNKkklqxHergfUa9Ot
r2hCFRZy4/3bvrXswR4zmTBQEQjzajxvaiA8B1mcUnnOQzkEu/xDcK1raYOrAgMB
AAGjggHRMIIBzTAdBgNVHQ4EFgQUVIZdoS/FYFLExPwKz66jCnyLBSswHwYDVR0j
BBgwFoAUyytAxyL2RWY6Jh1gXRx4vRtyAGUwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL1JpZmZpLzAvQ0IyQjQw
QzcyMkY2NDU2NjNBMjYxRDYwNUQxQzc4QkQxQjcyMDA2NS5jcmwwZAYIKwYBBQUH
AQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL3l5dEF4eUwyUldZNkpoMWdYUng0dlJ0eUFHVS5jZXIwZQYI
KwYBBQUHAQsEWTBXMFUGCCsGAQUFBzALhklyc3luYzovL3Jwa2kuY28vcmVwby9S
aWZmaS8wL0NCMkI0MEM3MjJGNjQ1NjYzQTI2MUQ2MDVEMUM3OEJEMUI3MjAwNjUu
bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ
MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3
DQEBCwUAA4IBAQCR0CkLjrOI6sHFsMT3MTd/JJym51kWedL1dpSkGwh/sMCU8NTv
bFKMS92HIsENfbucpnQNLiBDuLz7QHPzhI7Hd1kvDjt3onWcLY6zfs0tNDsxcs5U
64pLquQbCfzv+UIpPUR1G/n8yW2DyL/kMlqi1KmamVQjKSsv0Enb3WmsQRi9krtG
L09ZmWoIgmr7X+x1PFR5U2KIkKuH0VVvRwgs7Pqmg36H+Ig0bJ55v1bcOtlqlG08
2MP8BjuVatyBLsT2rB97wLhUaQN3zwDaavG3+e0Oo8TC5fOMuczo/427g20VDU2U
kBIHyyFlJO9uaEs+SxipZ8IQxjk+L5DSGPVI
-----END CERTIFICATE-----
Generated at Sat May 10 17:59:47 2025 by rpki-client