Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
File: YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft (raw, json)
Hash identifier: QdV29XGcNtgK27ithLvU+sc3DefzuqdsBn8Irqqjdzw=
Subject key identifier: A1:D1:E4:21:D7:6F:3F:41:2F:3A:7D:2A:94:3A:F6:C2:76:17:A4:73
Authority key identifier: 60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
Certificate issuer: /CN=607548c37abebc58b928ed285433d69e95df9c3b
Certificate serial: 0194BC7310068B7FD92F2CCB7DD1AADB2004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
Manifest number: 07F0
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: GvnG-mS30kZsC0VMkjG-9H9bKNc.roa (hash: fCMqeP5mwLekpgJxD7sr/iDT7Y2EP3bkaxbq5G7CFnk=)
2: TmI7Mg0osOv9bcSkbnpna9M6d0g.roa (hash: 1lYpqMce8T6tJ64vHbX2gN5OdLdLTb07QCcWuKyM15g=)
3: YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl (hash: PUQGkt+AI/7uRsmyOzZqge+mSDNflj6KzLg8NSNKqZs=)
4: rDRUKkzZmI7yjCKpqiCtK-fUy7Q.roa (hash: uAeF6E4mouy6Lmf4flTkP1sxauS/RBJXZig4r2f6XkE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:10:06:8b:7f:d9:2f:2c:cb:7d:d1:aa:db:20:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607548c37abebc58b928ed285433d69e95df9c3b
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=a1d1e421d76f3f412f3a7d2a943af6c27617a473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:55:6c:b8:41:41:db:70:5c:b7:9c:70:35:04:
11:52:bf:f5:b3:02:91:0f:ff:65:ae:1e:ab:23:6a:
11:1d:e8:75:bb:c6:13:35:b7:72:c1:50:12:d4:a1:
8b:80:c8:ca:d3:c7:b9:95:d3:74:1d:ce:87:c6:e8:
d1:77:64:09:3e:b3:6e:cf:1f:6d:2a:02:61:94:39:
66:e2:a6:12:fe:42:32:1d:9f:6e:66:3d:49:13:9c:
72:a8:09:6b:80:ef:bb:21:41:1b:03:ff:e8:b6:aa:
8c:da:53:71:99:fd:dc:a4:5f:5a:28:58:37:a3:a1:
b1:55:7f:20:87:8e:46:65:83:8a:c5:64:47:a7:5d:
f8:73:0e:a4:a4:39:2f:c6:12:a8:23:a6:e1:0f:15:
c6:9c:a5:a2:9f:83:39:ab:95:b4:79:e3:72:8b:db:
eb:93:f5:4d:10:d3:fa:64:89:6e:d9:92:19:59:e7:
c9:46:51:7b:f8:39:52:21:4b:03:4c:52:9d:08:6a:
40:75:c2:0f:b4:c7:d4:ec:bb:7d:8f:ee:0d:ac:ee:
4d:33:f9:ca:91:1a:44:02:9e:1a:c4:36:9d:81:fa:
f2:67:13:ee:b6:d4:8d:2e:d3:e4:1a:c6:b9:29:0a:
0e:39:c7:8f:b7:1b:57:fb:e0:c9:ea:05:0c:f4:a8:
51:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D1:E4:21:D7:6F:3F:41:2F:3A:7D:2A:94:3A:F6:C2:76:17:A4:73
X509v3 Authority Key Identifier:
keyid:60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:99:4d:f6:7c:57:27:7c:a3:61:a2:9a:30:f1:e9:c1:49:41:
2e:14:4c:39:c0:2b:8a:18:42:0d:57:0d:b3:b9:73:d4:8b:32:
5a:99:77:12:15:d8:88:b8:d9:0c:40:1b:64:59:5c:1f:09:23:
3a:c8:51:a7:77:fb:da:ff:49:39:6b:de:3e:42:2e:89:64:5f:
ae:b4:b8:d1:44:f4:f9:6c:94:bf:7a:fe:39:45:32:19:91:e4:
a3:fb:7a:68:11:28:8d:61:d1:2b:ec:45:8d:fe:76:23:ee:7b:
83:10:b7:7b:29:26:62:b6:8b:d5:23:f6:49:28:d8:1f:b7:04:
ea:74:0a:e3:44:44:97:9a:66:97:be:e3:c5:9c:dd:c7:01:83:
c1:26:3e:5e:54:78:cd:d6:d2:d5:b9:41:57:38:73:d3:0c:43:
78:0c:13:cb:78:ad:15:28:cf:a8:61:2b:87:1c:cd:f9:eb:fa:
f4:42:c9:2a:0d:e9:f5:5f:cf:3e:61:e9:ea:b1:f6:64:a3:7e:
12:54:13:8b:05:86:b8:e2:6e:72:49:3e:b0:e0:e6:da:8b:72:
2a:c7:b8:81:44:5f:4f:ff:c6:eb:9c:60:70:f4:35:c6:32:ab:
3f:bc:ff:74:df:fd:d7:03:7e:32:79:33:af:4a:63:7a:e9:e6:
46:5b:7b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:28 2025 by rpki-client