Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
File: YXfFgJJlmeg6tzW6LgT8EId4xEE.mft (raw, json)
Hash identifier: puP+C3zOqgIXw5ywsAzAe5GKBa5SOVFMG8S/aLpAkjY=
Subject key identifier: 8D:5F:CC:6D:BE:BC:73:FC:48:E2:0B:15:FA:DB:F3:D8:A1:9E:B9:48
Authority key identifier: 61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
Certificate issuer: /CN=6177c580926599e83ab735ba2e04fc108778c441
Certificate serial: 0194BBCEB2628B320EF847C7BEAF6036F1E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
Manifest number: 0B81
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: Gu9ez5zlQGgsXPCgSAa011q3NCY.roa (hash: XMVaMgOJ4WWG4Lp4VxV89GlWKPKFR9zZG9BiqqxMKyA=)
2: YXfFgJJlmeg6tzW6LgT8EId4xEE.crl (hash: AJrYQUnknbb7uyG0NDLL3sv4Ix6vBQvnBUa1UpX5c54=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b2:62:8b:32:0e:f8:47:c7:be:af:60:36:f1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6177c580926599e83ab735ba2e04fc108778c441
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=8d5fcc6dbebc73fc48e20b15fadbf3d8a19eb948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fc:7d:c2:5e:6f:c4:55:c3:74:6f:e0:c1:eb:
17:fc:3d:6f:fa:aa:fa:cb:f3:92:c9:4b:b4:4f:24:
3c:5d:44:3c:5e:14:3d:d0:36:28:14:58:fb:92:fd:
06:30:c0:f7:87:9e:b0:8b:c0:82:36:af:c8:17:3c:
e9:4c:63:3a:bc:a7:22:23:cc:09:34:56:69:95:c1:
ca:dc:22:ec:3c:2d:74:ce:50:dd:69:6e:68:42:94:
45:0c:02:11:ac:3c:62:26:43:89:22:fc:bf:b9:73:
90:49:dc:e4:f9:76:27:6f:7b:8c:9c:01:12:2b:4c:
76:76:44:01:04:43:a9:95:13:9e:5d:10:71:03:e7:
65:d4:bf:3a:b4:b3:2c:c2:7a:4f:ec:15:f7:27:2d:
bf:d7:ea:3d:73:b9:54:14:dc:b7:be:74:c1:2b:7a:
2e:0e:43:0e:c3:49:cc:c8:d5:62:0b:51:5d:fe:de:
41:54:50:90:88:c1:6d:3e:e8:da:ee:6f:2e:5f:e6:
d0:17:70:8d:7c:b3:d6:04:1d:3b:13:5c:a3:62:fb:
f6:27:3a:ab:ce:b2:77:66:2c:68:8c:68:ac:6d:f8:
9c:ed:27:91:c8:82:a8:35:8c:8c:36:2e:71:df:4b:
ae:bf:2f:59:7e:ca:43:7a:25:3e:bf:39:1a:59:c9:
12:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5F:CC:6D:BE:BC:73:FC:48:E2:0B:15:FA:DB:F3:D8:A1:9E:B9:48
X509v3 Authority Key Identifier:
keyid:61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:22:ad:58:0d:c9:4c:0e:3a:1b:e6:2e:53:94:89:ca:c7:c8:
86:5b:9d:86:8e:41:65:15:1a:4c:d6:da:45:7c:cd:cf:04:dd:
26:1e:a5:0d:4e:98:12:4d:f8:1a:20:7c:2f:00:88:c5:9b:da:
13:7c:fd:9c:c8:47:cf:2d:6e:63:6b:d5:cf:64:52:23:c7:45:
c3:80:04:5a:82:78:88:67:72:a6:25:bc:5b:98:49:04:64:26:
23:4c:b9:75:90:31:50:f5:b7:73:c1:da:9e:14:d7:07:b6:26:
bd:b5:09:d3:56:57:c3:a8:93:86:b0:23:f7:a9:2d:07:85:e7:
a6:89:2a:94:42:ea:30:cf:f4:0f:08:ed:91:82:9a:34:3e:6d:
f4:ee:00:65:d7:53:a2:a8:cc:45:18:5d:f2:d7:20:ea:98:a6:
71:17:64:32:27:07:01:f1:2b:75:ed:b4:68:ac:17:0a:6f:7a:
7e:35:50:e1:fc:25:3a:f1:31:23:f1:4f:09:41:5c:86:00:b7:
14:fb:4e:99:ce:f5:b4:65:ed:21:44:0a:42:1f:00:56:5a:1b:
ef:77:e7:06:e7:78:9c:62:02:fa:6f:4b:41:dc:37:2c:9b:18:
ee:bf:bc:60:2e:1f:fd:ff:7f:b9:a4:7b:af:04:ce:fb:92:35:
48:b4:ad:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:29 2025 by rpki-client