Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
File: yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft (raw, json)
Hash identifier: S0ayffU/62O+krmBM52wpN/fNMDGGl+abIrCr2+idtk=
Subject key identifier: B6:32:D6:57:3B:3E:90:AA:17:DD:49:4B:61:20:D7:7B:1A:40:02:21
Authority key identifier: CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
Certificate issuer: /CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Certificate serial: 0194BC73298A398DB282F7B0BEEDCE826DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
Manifest number: 0145
Signing time: Fri 31 Jan 2025 13:00:51 +0000
Manifest this update: Fri 31 Jan 2025 13:00:51 +0000
Manifest next update: Sat 01 Feb 2025 13:00:51 +0000
Files and hashes: 1: J4QRUDWtC58Td_JcZSbCpGyM8sY.roa (hash: H0Bvw5EtgtmppMkcC4FUFUt0/C7erGwYDeLbeqEvVHU=)
2: yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl (hash: iOSeqyMDgTb9Q5R0ZNKVzonUF4q1mkbReg/Lt2Of2VI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:29:8a:39:8d:b2:82:f7:b0:be:ed:ce:82:6d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Validity
Not Before: Jan 31 13:00:51 2025 GMT
Not After : Feb 1 13:00:51 2025 GMT
Subject: CN=b632d6573b3e90aa17dd494b6120d77b1a400221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:37:7a:0a:fb:26:4f:b1:81:f8:65:b0:11:ad:
14:e9:03:a4:19:23:85:fd:f8:f9:b8:c7:26:a7:54:
b1:15:bb:6b:fd:ab:53:23:0f:62:36:d3:24:e0:10:
ad:9c:7a:d6:28:c8:8b:86:8a:a9:c6:57:cd:c2:60:
23:fd:d0:c7:69:44:04:9d:03:5f:93:bb:7b:c2:a7:
72:61:1c:7c:2d:62:a6:97:25:16:37:62:84:35:35:
ee:31:8b:60:f8:9b:d0:e1:3e:92:0f:ac:e0:60:38:
79:fb:05:2c:fb:93:b0:9f:08:52:67:20:a0:e9:ae:
de:aa:30:99:cd:7e:ad:8a:3f:9a:db:c1:ad:64:a1:
d0:bd:5d:b8:3b:71:5b:42:48:17:d1:11:c6:54:d5:
f0:56:a0:34:9d:b9:08:09:08:b8:3e:e6:03:ef:69:
f2:16:e4:3f:b4:5a:76:77:8c:5e:5d:d3:af:bb:bf:
c2:e6:dd:ca:e7:9c:4f:bc:7d:56:26:a4:bc:93:ed:
97:d5:2f:52:3a:37:9b:27:d8:51:ae:40:12:ad:94:
2a:b0:7e:e2:1c:da:fd:0b:a4:d9:17:e6:88:9c:3c:
f8:9a:72:88:c2:12:c8:15:c2:fc:cb:d1:23:ee:3c:
c6:cc:66:99:c9:f3:79:bc:c6:ec:d5:0c:d6:91:ce:
9f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:32:D6:57:3B:3E:90:AA:17:DD:49:4B:61:20:D7:7B:1A:40:02:21
X509v3 Authority Key Identifier:
keyid:CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f7:a1:6c:c0:47:41:8c:22:dc:ba:02:18:51:b0:e1:12:0a:
34:74:fa:49:db:e7:92:4c:4b:42:3a:3d:1e:19:31:1a:9e:57:
b1:e7:19:f0:e3:98:06:52:7c:e7:9a:8e:31:87:a6:92:ea:ec:
33:39:35:ba:55:63:35:fe:28:28:00:a2:7d:12:a7:54:d1:83:
0a:4f:48:91:d6:93:9b:64:70:9b:49:d8:b0:e0:1b:3a:b8:ea:
e6:4a:0c:a3:df:d8:b2:04:5a:2f:cf:fc:d8:8b:21:8d:3f:e6:
e3:1d:be:5e:31:55:b9:7f:4b:f1:84:e1:fe:9a:be:39:00:14:
f8:01:08:ec:4c:d6:31:b8:f3:7a:95:b6:f0:71:78:4f:a2:73:
a6:23:48:f1:37:8b:34:1f:85:d6:77:9b:c2:76:f6:a1:aa:81:
8d:d4:94:39:c3:03:18:e7:1e:20:42:79:17:43:fd:ee:77:eb:
a6:82:92:fa:6c:c6:0f:71:1f:6c:08:ca:be:ba:5d:e4:76:09:
e3:62:04:ce:47:28:12:6c:9a:78:04:f7:d9:fa:01:c3:36:ad:
d7:3d:cb:fd:b1:85:da:70:9d:68:76:9b:42:38:26:3f:5e:cc:
a9:81:24:7a:ac:a2:53:03:a2:73:d3:35:0a:43:13:76:b9:13:
f7:f6:0a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:30 2025 by rpki-client