Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.mft
File: YTChAogFFzqiJUSk67mECskbyNA.mft (raw, json)
Hash identifier: 6djshcSeddasrcMs7ZGdcKqiUm0US/cXYd0KwbJ0kCU=
Subject key identifier: BE:5E:EF:C3:B8:25:0A:C5:6F:28:18:9B:39:06:A4:5C:87:B7:A3:02
Authority key identifier: 61:30:A1:02:88:05:17:3A:A2:25:44:A4:EB:B9:84:0A:C9:1B:C8:D0
Certificate issuer: /CN=6130a1028805173aa22544a4ebb9840ac91bc8d0
Certificate serial: 0194BBCEF7CD0C9FDBAD53B2C15A5F32C05F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTChAogFFzqiJUSk67mECskbyNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.mft
Manifest number: 0B8A
Signing time: Fri 31 Jan 2025 10:01:30 +0000
Manifest this update: Fri 31 Jan 2025 10:01:30 +0000
Manifest next update: Sat 01 Feb 2025 10:01:30 +0000
Files and hashes: 1: YTChAogFFzqiJUSk67mECskbyNA.crl (hash: TG3Q8dxTjAYXqMsLKAVP0EN+WhYUcXynauOUDPtHLxs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f7:cd:0c:9f:db:ad:53:b2:c1:5a:5f:32:c0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6130a1028805173aa22544a4ebb9840ac91bc8d0
Validity
Not Before: Jan 31 10:01:30 2025 GMT
Not After : Feb 1 10:01:30 2025 GMT
Subject: CN=be5eefc3b8250ac56f28189b3906a45c87b7a302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:41:05:f2:a6:69:81:c8:73:c0:37:32:9f:
8e:e4:6e:59:c5:da:22:3f:e5:0c:53:db:63:cc:04:
de:76:3e:9e:43:b0:b4:32:fe:37:6c:c4:a9:91:07:
d5:2c:24:0a:4b:50:48:f6:78:0c:07:45:02:c5:3e:
c8:62:f4:5f:54:1b:72:c1:42:7d:fa:bc:71:cf:c8:
af:1d:1c:e2:5e:0c:a0:2c:65:2c:5e:37:b4:f8:58:
fa:fd:ca:10:fe:f0:65:ba:b8:9a:52:c7:49:04:83:
70:03:b5:38:58:39:52:9f:a3:b6:b9:0b:71:5b:cc:
0b:c8:de:de:dd:64:a4:92:ca:3b:c2:7a:16:33:11:
73:62:d7:e4:0a:68:78:4e:2c:4a:a7:0f:ef:28:a1:
5d:8f:be:a9:e1:87:0a:0c:d4:86:7a:8d:17:94:f3:
fd:96:ae:b9:64:b5:96:b8:73:94:56:6f:c3:ef:9c:
08:bc:a4:bc:1a:90:76:d7:5c:24:a9:df:54:da:bd:
bf:9a:c6:f3:ec:02:fc:7a:de:d6:fc:27:52:ec:44:
c2:f9:9f:24:69:c7:0d:ca:71:2e:cb:a2:32:af:f6:
58:c6:eb:99:01:fc:39:2b:bf:10:88:59:99:6e:07:
79:8a:3f:f3:fc:fc:9d:15:5b:dd:7b:50:11:b3:ac:
11:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5E:EF:C3:B8:25:0A:C5:6F:28:18:9B:39:06:A4:5C:87:B7:A3:02
X509v3 Authority Key Identifier:
keyid:61:30:A1:02:88:05:17:3A:A2:25:44:A4:EB:B9:84:0A:C9:1B:C8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTChAogFFzqiJUSk67mECskbyNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:11:4a:b9:2a:3c:53:87:a9:56:b5:38:1d:7a:82:e2:8a:a6:
95:f1:5a:a6:fb:ea:3d:5d:98:68:f5:96:9a:57:8d:7b:f4:fe:
0e:af:5b:52:53:42:df:6c:29:38:25:e3:e8:c4:9d:ca:b3:d2:
59:29:1c:85:79:ff:ff:6a:1e:9d:f2:ba:21:d9:0a:86:2e:3c:
c9:4a:69:90:f6:b2:4f:94:37:7a:1d:49:b0:2a:04:c6:6d:c5:
06:38:d7:b4:12:fe:c0:3b:4e:b9:d2:a4:89:42:13:b1:ac:ad:
e2:a3:9c:38:98:eb:61:82:2e:eb:be:3a:0d:93:4d:c1:49:b4:
5a:54:af:c9:67:59:13:15:5c:47:ce:81:95:e2:f1:4e:dc:92:
db:4e:e6:7c:f0:cf:0d:fe:27:32:ad:a3:ec:02:f5:00:72:3d:
df:56:23:36:59:23:46:63:60:1b:c8:c7:ee:0f:65:17:6f:01:
59:31:02:af:4f:2b:3a:a7:8a:27:10:ab:7e:1d:e7:cb:05:73:
ec:15:90:ac:fc:ac:58:d6:eb:bb:53:ca:72:a6:63:7a:9f:f7:
90:40:d0:d8:12:0b:f0:33:32:6e:54:4c:0f:2b:72:bd:ca:00:
c2:d0:c6:51:6e:06:d4:be:5e:96:43:94:b1:72:af:1a:cf:1c:
49:3f:40:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:45 2025 by rpki-client