Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
File: YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft (raw, json)
Hash identifier: Y6WBOBgK+MjKtqGOUcFpFZbUmGViDb6y8gc8t/0vgT4=
Subject key identifier: D1:03:C2:83:5A:5D:DF:47:DB:76:B3:3A:FF:71:BF:9E:EB:36:11:C2
Authority key identifier: 61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
Certificate issuer: /CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Certificate serial: 0194BD4EC197AA6D12D8815433367BCADD9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
Manifest number: 0639
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: R4scpsswEHtZHUE-nwU3HaURKXg.roa (hash: og9/o35XSt8h5Pisf2/20OBVwfKzhDJ2QToFc39vgzg=)
2: YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl (hash: B6AObyiQP3NnnIh0MXk6nKrBFoy3KpBJGm9bRd/wYrk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c1:97:aa:6d:12:d8:81:54:33:36:7b:ca:dd:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=d103c2835a5ddf47db76b33aff71bf9eeb3611c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:40:02:7e:64:20:21:59:d5:61:70:b8:28:e7:
10:0a:8e:68:89:21:58:84:8a:f0:98:b0:63:6d:53:
72:13:f6:7e:89:58:39:2c:07:fc:52:7b:1c:48:fc:
24:25:30:49:cf:84:97:b6:24:29:b8:6f:bf:5b:7b:
62:92:f4:a5:6f:8e:4b:c5:5d:61:3b:90:65:9e:cb:
4a:1d:50:6c:3b:0b:c7:80:d3:61:67:5a:df:fe:7d:
33:3f:f0:20:b3:1a:32:af:2f:15:c1:7b:0d:f4:d5:
d4:01:bb:af:aa:b2:51:cf:47:58:8e:18:1b:66:fc:
aa:be:cf:27:60:c4:1f:51:ae:75:68:81:9b:78:c2:
58:f2:40:d5:8f:4d:f9:92:39:24:87:ad:de:e9:8d:
c6:af:20:b8:c7:a4:6c:46:29:6c:ec:88:49:27:4c:
2e:bd:97:c4:81:d6:ef:4c:f4:0f:b9:9c:fc:81:76:
1d:bd:7a:10:bc:b0:49:38:13:09:39:2f:41:c8:89:
c7:e1:ba:b3:b0:d5:62:92:2d:44:f1:96:e0:62:54:
88:19:44:75:c2:1d:e4:ab:c5:13:58:c5:13:da:62:
19:9b:4c:0e:8b:fc:ff:d3:9f:15:ad:06:b2:de:0f:
f5:bf:24:f0:82:68:0a:1f:bd:e0:95:82:d9:31:36:
78:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:03:C2:83:5A:5D:DF:47:DB:76:B3:3A:FF:71:BF:9E:EB:36:11:C2
X509v3 Authority Key Identifier:
keyid:61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7d:b0:79:36:e2:be:b2:a0:8e:b2:b7:2e:23:8a:55:a8:fd:
31:46:79:2b:4d:3e:5d:16:c3:5e:36:c6:4a:f5:cc:27:ea:3c:
bf:39:82:7e:f8:56:5d:43:0b:76:cb:2e:16:fc:a6:5b:d7:30:
a5:df:04:35:ad:b8:d3:24:cd:24:2c:ac:04:08:d8:4b:ae:9d:
4d:9f:b1:b1:04:15:4b:76:b1:f3:d1:f0:bb:4b:3e:bc:0b:6d:
22:25:e8:cb:18:d1:2e:d6:d0:88:d4:71:4a:a0:6b:fb:8b:96:
1a:24:6e:d3:41:a9:66:d0:2e:00:74:d8:95:a8:d7:1a:b2:a1:
53:81:98:9b:e2:9d:2f:fe:00:d9:b1:51:d2:ea:d8:a0:8b:6e:
54:50:20:a4:5f:c9:da:7d:2f:f4:9e:76:cb:81:cd:26:e5:41:
88:6b:1a:8e:a2:63:44:21:39:14:f2:97:01:71:f3:5e:4d:c2:
8f:bb:de:f8:23:9e:5c:92:a7:33:56:9f:dd:7e:55:e1:66:53:
a1:5a:3d:b8:9c:df:74:60:54:8c:af:b1:8d:44:88:be:b8:0b:
29:be:82:0e:6b:a2:50:63:03:39:76:fb:8e:21:53:2b:c2:71:
7c:6c:ea:01:e6:b1:e2:9c:9d:1a:52:34:73:9f:28:e7:86:48:
f4:7a:25:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:43:24 2025 by rpki-client