Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
File: YU9WZQWavHvjR17553qXl7cW_Ic.mft (raw, json)
Hash identifier: 30RjSZTP+YIjzuLYql9A6zqDdHeQkz2QV8reJsyf4eI=
Subject key identifier: 80:3F:6D:1F:17:66:AE:BF:3E:D5:D6:3E:94:16:B9:6C:D1:62:A8:86
Authority key identifier: 61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87
Certificate issuer: /CN=614f5665059abc7be3475ef9e77a9797b716fc87
Certificate serial: 0194BC04C59E77CD1B667DC0598814ECBF57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
Manifest number: 1013
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: BBB1zBhlO7PBMxmh7ehBIRq2-Nk.roa (hash: dFAIxxn9EfhCbjaj49UShIYZRajslmfUyDIcWwGGdc0=)
2: YU9WZQWavHvjR17553qXl7cW_Ic.crl (hash: /dtISvt/zmfxHZuaj3p/bOiQtQUKDlilPIPQNlQKsTA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c5:9e:77:cd:1b:66:7d:c0:59:88:14:ec:bf:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614f5665059abc7be3475ef9e77a9797b716fc87
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=803f6d1f1766aebf3ed5d63e9416b96cd162a886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:1e:b6:64:00:97:1d:d7:59:89:73:e0:24:
d9:e5:7d:41:c8:51:ad:5a:ec:f3:38:09:af:21:2a:
b8:d3:2d:8d:e1:b9:7c:f8:1d:77:b0:7f:3a:08:23:
e9:20:d3:4d:85:27:7a:76:04:8c:47:4f:1d:35:1a:
4c:6e:b7:27:f5:46:96:89:81:1b:bc:09:74:b5:ec:
79:0e:69:91:92:b3:94:5a:9a:fe:0d:75:c5:b0:a1:
36:58:78:51:26:6d:3a:35:b5:d5:75:ff:ef:99:d9:
79:6c:12:67:e4:6d:72:ff:b2:39:14:f4:8f:33:ab:
e3:5c:3d:c7:0e:1f:81:ae:d3:83:0c:cb:21:18:5b:
39:53:a2:66:3a:7a:fd:7e:27:cf:c6:21:37:3b:33:
06:b6:09:30:97:cc:15:a7:37:56:90:59:66:f8:5c:
0f:08:99:87:28:fc:db:55:88:d0:e3:fb:57:3d:44:
60:09:13:94:4b:0d:49:4d:7d:5c:77:78:51:e5:c0:
3f:eb:2a:88:c7:58:13:b3:e8:99:57:90:b5:66:d8:
1d:fe:33:ce:3f:5a:9c:67:e5:d7:72:1f:eb:cf:2c:
d6:8a:c8:40:c5:65:d4:3e:82:74:f1:01:9e:03:05:
ac:5b:0c:b1:28:65:03:0e:8a:79:e9:36:3d:10:1b:
20:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3F:6D:1F:17:66:AE:BF:3E:D5:D6:3E:94:16:B9:6C:D1:62:A8:86
X509v3 Authority Key Identifier:
keyid:61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:47:c5:3a:c3:8a:a9:2b:84:cc:ca:fb:c2:39:4b:3a:e6:1e:
0a:44:16:1b:31:b3:dd:e4:d3:6d:62:12:4b:4d:36:6b:77:66:
3d:4d:8f:af:17:02:47:cb:8a:13:66:c2:91:d4:00:c4:7a:37:
33:56:0c:f8:67:31:5a:94:b1:c6:46:e3:d3:55:2e:e5:8c:bb:
55:8e:ff:57:ae:17:29:df:25:f0:1d:5b:6b:7b:78:9a:5f:9d:
42:a6:2b:1e:fa:14:5a:84:96:b6:c3:b7:e3:fc:9a:d3:15:ab:
4a:a2:cb:1c:19:c5:d8:21:61:83:64:1e:4b:b7:9b:44:05:d7:
c5:a6:96:a6:c8:95:2f:09:b7:10:48:a4:b3:a7:7c:a1:63:0d:
7a:c9:67:05:70:6f:97:f6:c6:41:90:8a:ff:d8:e9:9e:c7:11:
f6:90:d6:2c:72:2c:6a:c3:f5:8b:08:12:f7:45:17:58:e2:2d:
e3:78:39:eb:a2:6b:04:82:29:e1:e4:90:bd:5b:6e:8f:fc:6a:
78:6a:21:54:40:2b:46:88:51:d9:9e:98:ec:6d:9c:2a:85:89:
3c:38:cf:7c:f1:cd:29:42:8a:8d:40:01:e0:30:da:c0:83:49:
6d:81:dc:f6:10:74:f8:5f:21:59:8c:1e:31:e6:01:68:01:2b:
ec:39:31:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:13 2025 by rpki-client