Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
File: YTXB97cUDIcufz_zRitO3GMddnQ.mft (raw, json)
Hash identifier: xGmu59/D2ygwdaofmP1f9Vz4jHJNG7UnH2A3/v+cZ6I=
Subject key identifier: 55:F6:C3:D5:F5:52:4D:C7:A2:CF:6B:5A:54:F8:3E:18:A2:A9:23:BD
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial: 0194BCA9EDB68B671874120D33460E84CACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
Manifest number: 0FF3
Signing time: Fri 31 Jan 2025 14:00:40 +0000
Manifest this update: Fri 31 Jan 2025 14:00:40 +0000
Manifest next update: Sat 01 Feb 2025 14:00:40 +0000
Files and hashes: 1: 63TdjH6W107on2R0OsWADBs0on8.roa (hash: Ncx3bdjsiwwzAHtwjbAlakIAyaghqw6YvVL5UElIrQk=)
2: YTXB97cUDIcufz_zRitO3GMddnQ.crl (hash: oPtHqdXJtfp+8+IxCbfLrG0AcmUk5ttMACCLcMdvdxA=)
3: fWsFtqjlg1LQ_p_q5K_2GnL8QEw.roa (hash: CoDBOpj4/7ndyh9Jvl792nll1Mc+xm7ePsUPRUs36YE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ed:b6:8b:67:18:74:12:0d:33:46:0e:84:ca:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Validity
Not Before: Jan 31 14:00:40 2025 GMT
Not After : Feb 1 14:00:40 2025 GMT
Subject: CN=55f6c3d5f5524dc7a2cf6b5a54f83e18a2a923bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:50:32:7b:e0:28:81:0b:05:a9:6b:4e:6e:4f:
f2:54:c9:e5:83:ab:4b:00:18:c9:13:58:02:24:07:
3f:56:b0:55:34:45:da:6a:c3:bf:7a:7b:37:d8:a0:
b4:b5:c6:57:c8:c0:e8:10:3b:47:1f:bd:13:02:24:
b0:61:e2:96:ca:26:7e:2f:ff:eb:f3:95:76:9c:f9:
0e:e9:9a:69:b0:7e:4f:02:00:ed:84:34:91:e3:b3:
d7:a3:e4:a1:e8:18:3d:a5:a3:b4:6e:ed:48:18:a6:
97:ef:a9:f4:c9:e5:f1:27:38:14:31:2f:35:ea:b0:
6d:13:ad:4d:d0:ba:da:ac:c7:40:22:e8:ff:26:d4:
3c:ba:ad:55:86:22:16:89:89:1d:dc:fe:39:b9:fd:
69:3e:10:2c:bf:d1:ee:19:79:9e:1c:91:9e:72:f3:
29:16:a9:fb:ec:eb:a2:5a:46:d7:bc:e3:bf:01:a3:
02:98:e9:d7:b3:28:7e:ec:c6:2a:05:d1:8c:45:5c:
1d:fa:8c:5b:d3:54:bc:ab:3c:54:94:7f:03:80:eb:
7b:af:a3:88:9b:e6:c3:ed:64:15:1c:6f:46:b4:6a:
04:90:75:b1:a4:0d:5a:7b:4e:11:dd:14:47:6e:0b:
b0:2f:35:29:81:4f:97:15:50:82:e0:58:a2:10:de:
76:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F6:C3:D5:F5:52:4D:C7:A2:CF:6B:5A:54:F8:3E:18:A2:A9:23:BD
X509v3 Authority Key Identifier:
keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:92:0d:8d:c8:6f:e6:64:49:76:d4:b0:77:1b:5e:54:43:ee:
32:de:b8:17:d4:0f:10:c6:d7:ca:a7:5a:60:08:cb:9c:d0:93:
96:13:1e:31:e0:b0:50:93:ee:df:b6:bd:66:ac:0a:4a:06:f9:
f5:d7:85:2a:a0:d9:cc:87:2d:92:da:c2:ca:7e:21:df:05:04:
31:ee:3d:7b:17:af:a7:53:32:19:0f:22:0a:55:06:dd:70:34:
e7:43:eb:77:69:90:98:0b:a3:38:1c:fa:c4:a8:b5:f2:65:d1:
07:28:2b:c4:35:47:78:25:d3:07:27:66:23:d2:4c:99:20:3c:
e2:a1:f1:4c:50:04:4b:7a:e0:36:05:be:9c:78:25:d8:d5:38:
09:a6:69:d6:4e:c5:9c:17:0f:41:14:57:9e:4e:9e:a0:42:90:
5e:e4:8b:9e:d7:d8:73:67:b2:7e:eb:09:7b:13:7c:49:fb:41:
7a:f4:54:79:66:2e:d1:84:6d:5e:a0:cd:1e:17:a7:ca:3c:cd:
d9:b3:a3:7b:7e:3c:08:44:c0:dc:9d:a4:b2:58:75:4e:e0:71:
4b:77:bb:47:c9:c5:ee:9d:13:b3:a5:f1:04:b2:3b:b4:bf:1b:
41:b2:ea:e1:16:b7:79:0c:f0:e7:bd:38:44:65:db:fb:ec:37:
ee:aa:60:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:50 2025 by rpki-client