Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
File: YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft (raw, json)
Hash identifier: vEQ5Ypp/gYzBD9S6Y/TDxs0HAb/e+qQm+y1k33wwnHo=
Subject key identifier: 6F:26:22:79:58:C6:03:2E:4A:E2:DD:6D:B0:64:6E:9D:62:81:A7:DD
Authority key identifier: 61:65:8D:5E:FA:2A:0A:3C:36:C9:23:93:74:25:8A:98:F7:FD:A3:88
Certificate issuer: /CN=61658d5efa2a0a3c36c9239374258a98f7fda388
Certificate serial: 0194BC04EC2F271DB5902686CC1B7D60E439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
Manifest number: 0BB3
Signing time: Fri 31 Jan 2025 11:00:26 +0000
Manifest this update: Fri 31 Jan 2025 11:00:26 +0000
Manifest next update: Sat 01 Feb 2025 11:00:26 +0000
Files and hashes: 1: YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl (hash: Hj67UHKJlDiuMjI/6ShTkIayUQB4RaxJma6K02usv48=)
2: dC8gOmayB-chyoQvohvN-0T41MI.roa (hash: CEU2++abo0F1b85LSOtJ8mERuDAvIcX+n86rAzfnRdQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ec:2f:27:1d:b5:90:26:86:cc:1b:7d:60:e4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61658d5efa2a0a3c36c9239374258a98f7fda388
Validity
Not Before: Jan 31 11:00:26 2025 GMT
Not After : Feb 1 11:00:26 2025 GMT
Subject: CN=6f26227958c6032e4ae2dd6db0646e9d6281a7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:16:e6:a4:60:12:25:ee:18:c3:a9:fe:d8:ca:
72:a0:1f:61:12:2b:ea:e9:21:a0:af:58:ae:84:84:
3b:13:d2:7a:49:7d:99:d5:4b:35:72:be:6d:1b:b0:
5e:87:85:ab:5e:0c:5e:19:df:44:54:84:0c:27:73:
34:62:dd:89:b1:4e:95:2e:ec:85:da:ff:55:39:bd:
8b:db:74:06:c6:d0:52:26:44:03:8b:d1:8d:93:ec:
f4:18:40:66:e4:2f:22:b6:58:60:38:88:10:1f:15:
46:f9:3d:bb:02:d4:84:7c:3d:08:c4:4e:1d:05:16:
87:17:db:a6:a5:3f:d1:bf:dc:57:fa:29:fb:8d:15:
dd:95:19:7c:07:f5:fd:9d:18:07:2b:9d:e1:4d:fc:
8c:62:a7:e5:8f:06:47:7b:d8:6e:17:45:5a:07:a5:
b5:c8:13:1d:a5:2f:12:71:8c:a8:af:13:80:41:7a:
fd:45:a7:50:e2:ad:b8:8d:ee:07:5e:7a:dc:28:10:
9f:fc:e0:f4:63:11:0a:29:19:60:07:cd:3c:df:ce:
4a:c1:22:fc:c5:c0:5f:94:f9:34:fa:76:f4:14:64:
2e:79:df:c0:42:a3:3e:f5:d4:33:9d:24:2f:07:39:
df:de:f7:c3:1d:73:b3:d7:ab:57:a3:0f:35:fd:e5:
4a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:26:22:79:58:C6:03:2E:4A:E2:DD:6D:B0:64:6E:9D:62:81:A7:DD
X509v3 Authority Key Identifier:
keyid:61:65:8D:5E:FA:2A:0A:3C:36:C9:23:93:74:25:8A:98:F7:FD:A3:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c0:53:8f:21:41:74:6d:e6:46:81:06:b8:c3:a8:52:cf:c0:
13:7b:87:cc:8c:57:f4:e2:43:7a:84:90:5b:fe:43:a6:1e:a9:
6f:38:ad:6b:4b:cc:90:96:99:6f:ac:0d:a3:55:68:1c:20:8e:
20:b3:7c:ea:08:a8:0f:f8:53:a8:0d:17:81:9f:f8:e5:be:e6:
68:c0:3c:3a:59:c8:3b:34:27:a8:8e:82:df:42:44:b4:88:e7:
a6:cc:f2:9c:72:03:9c:c7:3d:5b:d5:2a:52:29:96:f7:95:8f:
66:04:ee:e6:23:7d:77:1e:07:2b:0b:fa:9f:22:04:cb:9c:04:
29:bd:7b:54:9a:a5:fe:78:13:93:63:2f:49:10:69:4a:ce:23:
06:36:ce:26:a0:d2:0d:2d:10:a8:58:ae:a0:61:a1:2d:0e:2a:
87:2d:ce:b8:66:4c:5a:69:3f:76:f0:6b:4b:72:6b:91:38:bc:
78:9c:eb:3d:ab:c4:fd:ce:ee:0b:6d:85:08:d3:7a:ed:80:40:
fa:f7:f6:e5:16:b6:81:f1:fa:da:a6:d2:d7:d4:e6:c0:6c:86:
1d:d2:89:56:61:85:ce:32:84:58:22:37:70:40:ef:45:f8:97:
b6:28:f6:c5:06:3e:5a:9a:af:9f:c2:d0:5f:d8:53:bd:0d:04:
5a:6c:7a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:46 2025 by rpki-client