Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
File: YgsENUY3RvXyN9k2h77C6s8iRVE.mft (raw, json)
Hash identifier: 1B4om022kkCToDZzoHkS/MdlW/Bxh9K+Hnava86gXro=
Subject key identifier: A4:38:F8:D4:C0:3E:F3:41:EF:68:20:DE:C8:FB:A9:6C:4D:25:8A:1D
Authority key identifier: 62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
Certificate issuer: /CN=620b0435463746f5f237d93687bec2eacf224551
Certificate serial: 0194BCA97730A75237EB916C784B988F8382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
Manifest number: 060C
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: 1-dSr_bwrsUwvfc9qQEvsXILMv3w.roa (hash: SF5ovM+mleomLfSZp/NHDAE5s82AVbxDbWTJFXrQrE0=)
2: YgsENUY3RvXyN9k2h77C6s8iRVE.crl (hash: x6H+37LRqof+iEDI+Wg+JpWi++0ONIVbQy0p9rR1wRg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:77:30:a7:52:37:eb:91:6c:78:4b:98:8f:83:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620b0435463746f5f237d93687bec2eacf224551
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=a438f8d4c03ef341ef6820dec8fba96c4d258a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d0:ae:c6:dd:e8:f7:8f:9d:27:d7:b9:9f:de:
8d:e6:ad:4a:8f:92:f0:04:ef:3b:fb:71:8a:10:c0:
ef:d5:e6:6f:cb:76:a6:fc:68:3c:60:2a:22:41:f0:
0d:a5:6c:85:b4:a9:6a:cf:67:02:f7:b5:80:f4:71:
55:a3:e7:de:2f:17:1b:7f:e2:f2:bd:a8:58:62:6e:
92:82:36:77:a6:f6:7c:0d:0b:44:bb:d0:a7:3e:9e:
35:d7:e4:4f:d9:3a:9e:5d:5e:21:e7:ae:ac:b2:b6:
b8:ab:ad:ad:0c:c2:54:21:cc:34:53:8e:3f:67:11:
1f:d1:3b:86:6b:2c:26:1a:2f:10:4e:2e:f4:7f:18:
1c:31:94:0b:b1:a1:ab:b0:b5:59:e5:9e:fa:71:f3:
48:dd:d5:d7:ca:0d:8e:f5:b8:6e:9f:6f:6c:1f:1a:
74:3f:76:25:7a:eb:7b:eb:46:de:1a:d3:dd:66:28:
3c:cf:1c:a6:3a:29:d6:76:f7:74:4f:9b:a5:37:ee:
bb:a6:9a:5b:35:42:b6:20:93:0c:8c:ee:b3:aa:6c:
c2:79:ed:4d:4d:ba:08:cc:93:3b:f2:1d:40:6b:76:
26:0c:3a:d1:eb:bc:b4:a1:ce:f5:f0:27:03:c9:f7:
9c:c2:59:7b:75:1e:33:57:0e:bf:3c:20:bb:ed:f4:
3d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:38:F8:D4:C0:3E:F3:41:EF:68:20:DE:C8:FB:A9:6C:4D:25:8A:1D
X509v3 Authority Key Identifier:
keyid:62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:2e:1c:a3:1c:eb:22:74:12:bb:75:14:44:8d:c8:7c:c7:35:
2a:c6:60:52:17:06:d8:84:9a:61:29:c0:52:d7:1e:47:51:a1:
12:b6:7d:75:d8:11:9e:8a:ae:65:d3:89:e7:3d:db:1c:5d:4d:
bf:19:76:41:46:be:df:5b:1f:a8:02:cd:b6:0e:23:f6:88:9c:
81:28:d4:ea:56:73:83:0c:0b:a7:a5:76:dc:a5:56:ec:21:e9:
0c:8c:53:cf:60:e2:21:55:74:04:8a:e9:94:03:ef:57:f4:8b:
c7:cd:ab:2f:7e:9d:bf:2a:3d:cb:78:68:33:2c:38:11:59:f6:
52:c8:23:58:76:10:35:77:5f:63:ca:f2:aa:bc:fd:b9:d1:f1:
e7:c0:a2:b3:88:b1:62:11:3e:52:68:b5:cb:f5:38:f9:2a:b3:
43:7d:42:a5:56:32:fc:ce:68:54:71:d7:83:b1:83:4c:c9:79:
7c:77:cc:94:27:83:4d:4a:53:2d:a4:13:e2:fb:31:88:84:93:
48:32:88:47:64:83:8a:e9:7c:78:4c:a3:01:08:0b:4e:d1:b7:
da:f2:14:92:4a:bd:bd:a5:81:25:a6:2d:3f:c5:69:cf:69:e1:
b8:6c:a0:2a:81:63:ec:a6:cc:9f:6b:3e:02:a0:bc:28:c0:a9:
df:06:76:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:29 2025 by rpki-client