Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
File: YFUi433iaw1WiVrBirB9fHhKuTw.mft (raw, json)
Hash identifier: Zv6BsCjd1GkT9m8ta/USkN5xkozodwcHS2vMlTeoLnY=
Subject key identifier: B6:5C:69:FD:F5:FB:45:A9:1F:F1:65:28:DB:33:3F:ED:A4:82:2D:B5
Authority key identifier: 60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
Certificate issuer: /CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Certificate serial: 0194BD177BB16BD497DE95B3F29613B6ED0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
Manifest number: 0CDB
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: YFUi433iaw1WiVrBirB9fHhKuTw.crl (hash: ClpW0Qj7dCDGxKJQYPrPb5ThhXDEYrDSbdas1qjB1gU=)
2: v4bbx4Tyrv4mjtMYql77jSIvfEA.roa (hash: A4gl29evMU8HAtsdqZFfkRY14UgWdfJ98W4DA9n97zk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7b:b1:6b:d4:97:de:95:b3:f2:96:13:b6:ed:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=b65c69fdf5fb45a91ff16528db333feda4822db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e0:a4:23:bd:67:df:8c:73:72:36:43:ff:fa:
6b:22:97:88:29:20:66:4d:f4:28:58:a9:f5:40:3b:
3d:43:71:51:7a:ea:e5:45:fe:e8:49:f8:65:e6:2a:
63:68:47:c6:85:45:e4:2d:36:90:ff:5d:af:f2:80:
77:78:c2:1e:ee:6e:fc:1c:f2:7b:d0:82:2d:ba:dc:
55:f2:ff:ce:97:fe:11:f2:43:ad:bf:ee:de:cf:64:
3b:74:50:fe:05:01:e0:f7:e9:40:27:69:8b:2a:ef:
92:d9:5e:91:f1:e1:f3:a7:cd:d8:22:5e:16:82:e2:
81:4d:21:4c:e3:26:12:71:9a:81:f6:f2:42:6f:90:
40:9e:94:48:fd:77:d3:7d:b6:6b:b5:39:86:40:a7:
3c:e7:6b:88:cc:06:13:54:15:dc:66:53:88:f8:d3:
d5:4d:a1:9c:73:30:2b:69:7b:35:93:f9:8b:97:fe:
ae:dd:b1:54:4c:68:38:b3:1e:7b:75:af:81:0d:5d:
e3:3f:5d:63:99:10:dd:94:a2:35:a4:cf:ba:ed:e3:
24:bc:ca:28:7f:ac:b1:61:b7:52:bb:71:fc:9d:2f:
a9:17:91:d6:28:d2:6d:5d:98:35:0f:95:9a:18:4f:
97:f8:3b:c1:5f:2b:f0:25:82:89:82:46:63:7d:51:
9f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5C:69:FD:F5:FB:45:A9:1F:F1:65:28:DB:33:3F:ED:A4:82:2D:B5
X509v3 Authority Key Identifier:
keyid:60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e0:06:65:16:76:09:32:31:12:dc:0c:10:52:74:31:92:f2:
b9:0b:75:b6:e6:85:9a:30:f9:21:9c:f4:a1:aa:7f:2e:f2:a5:
e1:b7:d3:e8:d6:2c:17:45:73:a2:3e:a3:c4:99:2e:27:30:c3:
8c:54:5c:25:c8:d5:a3:a5:97:8e:e4:10:61:77:dc:2c:bb:0b:
0f:d6:56:bc:c4:b5:93:26:a9:7a:4c:b2:bc:6e:44:76:14:88:
dc:26:a3:b1:92:e5:bc:be:e4:b3:e4:c7:cf:6d:68:18:39:f1:
ed:5f:4c:6e:15:cc:06:28:53:19:7d:20:7a:0a:de:a6:ee:56:
85:7e:a6:aa:90:0b:41:c9:0b:e7:8d:00:5d:e0:31:50:43:65:
b7:88:a7:97:7a:54:3f:cd:d1:88:68:88:3a:b2:99:70:09:95:
51:f6:b6:58:55:a2:2e:ee:07:3f:17:2c:3c:3e:71:2a:3d:a7:
e7:0d:28:81:7c:6f:23:c7:86:5e:2c:3f:86:97:fc:24:1a:ba:
2a:51:be:08:89:3d:0c:05:56:0d:05:37:31:e1:e7:fd:2c:c1:
8a:3b:b5:48:3a:12:ad:3a:5e:24:7c:50:f0:27:7f:86:44:78:
e6:2c:41:4e:b9:5a:d3:79:bf:0e:4d:b7:b9:82:0c:08:e7:04:
4e:99:6b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:51:49 2025 by rpki-client