Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
File: YNCwIHYDvkPYSS6YUTeLi08JWU8.mft (raw, json)
Hash identifier: 5LpHOnkwH4EPjBB+rhwaiyww4y4sK5NTAobY28pc0mM=
Subject key identifier: 2F:F3:D0:F6:D1:B7:BA:CE:E1:7F:DC:19:FD:7B:BB:D4:1C:D5:B9:23
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial: 0194BD1798A85BD5209638E63DA9CA260F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: TGCJDTG82pX-vT9LeK2kOQ4sDi8.roa (hash: zRKBbHZChcvp4qDJB7Pkx8ohWvBK1TWvnJD0kE9wiHc=)
2: YNCwIHYDvkPYSS6YUTeLi08JWU8.crl (hash: xfqBuFk7aGmuZkrdXE05Nf+pByymCSAzPZMZDTbS3Gs=)
3: hmDTZOEMQo2FsgMZ2bH5HdU2vyI.roa (hash: NbIM1acTbudT3ToneHmDuzQP2dnfQF8A/BNgiqfCI44=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:98:a8:5b:d5:20:96:38:e6:3d:a9:ca:26:0f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=2ff3d0f6d1b7bacee17fdc19fd7bbbd41cd5b923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:10:78:60:82:57:9e:0e:65:da:6a:57:8d:6d:
ad:2c:54:6e:31:cc:fd:37:25:89:4f:4b:7d:9e:2c:
ce:39:ab:8a:42:3f:e8:02:5d:53:4b:aa:79:fb:50:
ec:87:23:37:5a:bc:09:c7:4f:a7:11:15:cd:63:a3:
cb:09:81:bd:14:26:d5:c2:2f:ec:e3:f1:7c:ca:a7:
48:a3:27:11:02:7a:94:96:81:cd:ba:13:da:f1:1e:
87:f0:35:36:0d:de:98:07:03:db:bd:f5:5a:e2:0c:
42:7f:aa:a9:ef:e4:3e:82:38:9d:31:d9:f2:3f:fe:
58:d0:78:aa:fa:41:2c:78:2c:67:6f:51:57:de:88:
e3:d9:16:38:4a:ca:c3:65:39:50:d7:e9:56:d2:83:
9e:6a:b9:3d:43:3b:b9:ff:6a:6a:0e:50:34:f3:86:
fc:f5:15:08:0f:a0:2a:50:4e:63:c7:d3:00:3e:4f:
96:cc:69:0e:07:69:63:4a:2b:d1:3b:c1:e7:c4:6f:
1e:73:79:6c:fd:a3:07:fa:08:db:13:56:eb:f5:7c:
0a:2f:47:7d:8f:b0:ed:39:36:88:ec:9f:98:fe:30:
21:e6:ec:af:61:66:a2:c5:c6:c2:12:7a:9e:5c:17:
bd:67:5c:ff:08:03:de:09:01:2f:0a:58:7a:11:b5:
5f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F3:D0:F6:D1:B7:BA:CE:E1:7F:DC:19:FD:7B:BB:D4:1C:D5:B9:23
X509v3 Authority Key Identifier:
keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2d:d8:5a:49:41:27:84:7c:89:cf:78:e2:41:6d:8d:0c:c9:
ee:2e:7a:7a:69:36:7f:24:56:50:87:4a:0b:63:94:f6:bb:13:
77:03:1a:57:3d:8c:52:87:6f:1e:0e:77:c6:8e:18:c0:62:ca:
3c:e4:c8:dd:90:2d:f9:7e:30:2d:81:f0:98:f1:47:65:d3:9b:
fd:65:74:85:e4:91:85:05:db:c9:40:2e:ad:ce:85:ec:5d:ba:
9c:88:78:e3:cc:b5:9b:51:67:da:a6:66:21:cf:79:72:b7:ec:
4f:a7:ed:d6:f7:83:d1:36:06:aa:15:a3:1d:fb:0f:22:0f:c8:
0e:d9:2f:e9:0b:33:c8:ef:6c:a4:54:54:1f:10:d6:8d:63:8c:
e0:98:39:b4:a1:90:50:e0:2a:1a:87:36:49:49:c8:c7:18:a8:
ff:3e:2c:4e:52:fa:2c:ad:cb:6d:69:13:bc:f8:8f:b2:80:e2:
12:06:99:02:e1:f1:4a:c6:62:8d:22:1f:73:54:28:b5:48:9a:
6b:d0:f7:c6:61:71:9e:54:58:ee:66:02:7d:b6:5f:b6:4d:fe:
ef:a5:55:28:a7:4b:6e:50:28:9d:d0:a3:1e:50:df:76:7b:be:
14:b5:33:98:51:c9:dd:d1:3a:c5:f1:ee:f3:45:3b:96:39:62:
f9:1f:a4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:45 2025 by rpki-client