Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
File: Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft (raw, json)
Hash identifier: XUwQ53htQG0RBAUzYWoZIy193ews6SoKYGbHbOK2TMg=
Subject key identifier: C4:64:1F:33:24:3C:77:F7:AE:01:26:9E:74:5C:F6:1B:FD:D1:75:80
Authority key identifier: 62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
Certificate issuer: /CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Certificate serial: 0194BD4E78B6B7BF8DCC6F5817B703AF1C29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
Manifest number: 0FE7
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: 3ir5WkvJIRxtwZei2sctSN0sCz0.roa (hash: kbUd9aHqn6kQ8QUhYDDaCsn+6zI4AKFQfFGDo83vd6o=)
2: Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl (hash: 5zACrNg8wBIrL7vExeLBjJiDHOkLrkrr6AM/N4LpPuo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:78:b6:b7:bf:8d:cc:6f:58:17:b7:03:af:1c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=c4641f33243c77f7ae01269e745cf61bfdd17580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f9:ce:9f:6b:08:46:b0:79:83:0e:8a:51:f1:
67:8d:48:6b:3a:fd:d1:df:49:fc:40:30:3d:ec:58:
54:07:b6:fc:fd:8b:e1:f5:11:a3:d2:47:04:47:4f:
d2:81:7c:4f:50:19:8d:a0:ad:1a:8e:c2:68:d1:5f:
04:e3:e3:58:a6:aa:29:13:0a:2a:30:00:cf:fd:bd:
06:43:42:7f:30:7b:84:6a:e9:15:d9:85:66:61:48:
b4:66:76:3a:78:75:33:b5:d4:bc:8b:8d:6a:6c:42:
a0:bb:74:89:d7:f8:93:d7:d7:9a:9f:0c:6a:93:46:
5c:65:a1:dc:b6:a2:01:0b:d9:ae:e0:c6:a8:18:2a:
b8:18:8d:0f:eb:df:9f:43:8f:4d:cb:1b:79:26:03:
cb:a5:9c:9a:cc:52:51:41:13:fc:28:3a:e4:fa:02:
5e:33:25:a7:b3:6e:eb:5d:eb:34:e4:49:6e:30:aa:
cb:af:ed:b9:cd:10:e0:75:5b:31:a8:40:2a:d0:5a:
59:60:30:7c:46:9c:c2:f4:74:e1:98:5c:47:b1:f4:
58:06:ef:f0:7f:f1:c2:e1:23:95:94:a8:9c:fa:6a:
67:f7:d3:8f:dd:87:20:da:b2:28:a3:49:bf:79:84:
f1:b4:9b:9d:3c:34:00:90:c0:c1:ad:46:8f:90:51:
c4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:64:1F:33:24:3C:77:F7:AE:01:26:9E:74:5C:F6:1B:FD:D1:75:80
X509v3 Authority Key Identifier:
keyid:62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:c3:e0:b4:48:b8:b9:c0:e7:69:6e:b4:3e:f7:90:35:1d:8b:
f7:eb:dd:7f:b3:50:3b:bb:4f:8e:5e:e7:8b:dc:a7:70:99:c9:
a4:f4:e2:d2:99:34:61:df:00:18:79:82:73:83:28:4a:7f:24:
19:99:26:eb:a0:3e:b6:f9:9c:ee:86:89:3a:de:30:c8:26:e6:
75:e9:4a:8c:c9:7e:e4:d7:70:fb:bd:4d:d7:be:5d:85:50:18:
6f:5c:2a:c4:38:78:6d:ba:ff:f0:2b:f6:63:48:0e:fa:bf:ed:
ee:5b:52:e0:1a:61:2f:60:07:aa:e5:29:b4:9f:b3:35:cd:81:
60:33:1f:5f:e6:d4:1a:cd:33:22:4c:cd:8f:22:f2:23:fc:8f:
09:60:26:1a:8c:f5:1d:fe:6a:21:f9:c5:1d:c3:5b:89:98:a3:
aa:a3:8f:e0:f5:c2:2d:ff:0b:00:ad:ae:fa:31:89:7d:1f:07:
de:20:0f:b4:f8:e3:99:c3:3b:1c:87:ee:01:1e:c3:a1:13:00:
e0:65:ba:26:d7:c6:ea:f2:08:44:87:c7:a2:e1:ad:cd:7b:ea:
64:9f:8f:79:a7:cc:25:41:c8:9f:68:b1:89:67:6b:c9:6d:44:
44:63:ac:c4:58:7e:f3:8a:ac:8d:9a:1f:ad:20:e0:a8:53:7f:
2a:68:32:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:18 2025 by rpki-client