Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
File: YsX8533eTi7k_WU1EAUpwvRE15o.mft (raw, json)
Hash identifier: OtTA+Ie/zkckhGwBORhHYc2qcghbnAAsyL7QqmeLth4=
Subject key identifier: 09:73:AF:8F:9E:D0:25:6D:EA:62:AF:93:A8:31:27:DB:9E:6C:7D:6C
Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
Certificate issuer: /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Certificate serial: 0194BD4E5BBAA463A1A0719E1BDB62943432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: HKNH5qVY82EVhwf41jFwu0WLXWQ.roa (hash: lq97v+q7hVfTasgsk/QjtVrEG9iM12Kuyq3A6kQDZ7s=)
2: YsX8533eTi7k_WU1EAUpwvRE15o.crl (hash: 27Eo/8pVwRu7sRtkCOqhTAlPXftqQm6muDOcD/7DRKI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5b:ba:a4:63:a1:a0:71:9e:1b:db:62:94:34:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=0973af8f9ed0256dea62af93a83127db9e6c7d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5d:f8:77:db:53:be:0c:f2:a8:c9:de:17:0d:
e0:69:ac:7f:df:d5:eb:c1:4a:a5:cf:91:be:af:ca:
b8:f2:d1:62:51:b8:ee:93:40:5f:1b:0d:0e:17:6b:
ad:47:6e:7b:fa:ca:ab:08:1d:57:2a:40:fa:79:9b:
41:0a:b9:f5:9d:0e:26:ed:3c:fc:42:f8:f7:f4:10:
c8:a1:19:94:a3:35:b1:a9:3f:cf:01:19:c9:f0:c4:
62:00:9d:fb:80:79:95:eb:1a:1a:3a:c7:c4:34:37:
e3:ae:a5:06:c5:8d:d2:3d:8c:29:01:c1:33:ce:aa:
c1:67:51:a3:d3:3d:55:36:1c:ef:c4:dd:8a:37:6c:
cf:09:0e:4d:93:39:bb:88:62:db:13:8c:45:ef:eb:
d9:4d:d3:f2:70:a3:14:17:aa:a3:1e:4c:a4:10:2b:
1d:91:cc:dd:5f:af:80:fc:77:6c:d6:06:05:16:69:
fc:0a:33:25:46:b0:c1:c4:ea:ef:91:85:b5:35:b7:
4a:65:3b:90:88:ee:cf:85:c0:cf:83:f0:d9:49:f4:
21:b4:a1:a0:fd:c0:a0:46:c1:99:fe:d9:23:86:18:
93:61:55:74:80:1f:9f:19:20:a1:ba:8a:b2:d1:54:
0b:bc:1a:c3:b6:0d:d7:56:c7:6c:22:21:8c:80:66:
b3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:73:AF:8F:9E:D0:25:6D:EA:62:AF:93:A8:31:27:DB:9E:6C:7D:6C
X509v3 Authority Key Identifier:
keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:11:b1:d5:21:a6:37:83:07:ef:c2:08:89:f7:6b:27:0e:a1:
4b:f3:17:e9:8d:85:e8:e4:d3:8d:65:6c:a9:da:ae:de:55:d1:
4b:17:9d:98:29:01:79:61:ff:16:28:25:45:21:12:66:af:f4:
71:ce:27:a1:ab:ac:85:e1:57:a4:9f:d1:8b:f0:a2:98:2c:81:
71:fe:a1:2c:8e:70:c3:15:e7:93:a3:4b:b0:a9:c7:39:4d:86:
c2:1a:85:59:fb:1d:96:93:ef:f8:da:81:d4:88:dd:6a:8c:39:
bf:66:fe:57:ff:ad:e6:11:b4:5d:bf:e7:21:c4:6c:3a:04:f6:
f1:fe:26:a1:b2:eb:65:9b:34:ff:00:62:3f:e5:cf:3d:a5:b9:
2c:9d:08:e6:8d:db:32:d5:a4:33:51:20:9f:94:9e:fd:d8:24:
c6:74:a9:83:f7:f7:71:22:3c:6f:d6:e9:19:1e:9e:e1:16:b0:
d9:1d:47:be:ab:ef:9a:90:fd:60:c0:38:c5:c0:58:09:e6:d4:
9e:81:33:92:d2:79:30:bd:68:30:49:e7:36:f6:fe:45:77:85:
b4:ea:93:05:eb:f1:6d:52:14:ce:d0:05:00:40:9f:ca:f3:95:
14:6e:84:5d:58:ae:83:77:9e:3f:c5:c6:55:3c:6c:a5:10:5a:
3c:ed:91:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:56:16 2025 by rpki-client