Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
File: YxrKX5odz6GXBNHwN38bn-kUXgg.mft (raw, json)
Hash identifier: mL9XWstaRCzcP9X3kvmYAl0r9Lq5rOlaxFvYVvQO7yQ=
Subject key identifier: 31:B5:3B:32:B0:2E:BE:2C:4A:95:DC:B1:67:96:51:3B:80:78:88:39
Authority key identifier: 63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
Certificate issuer: /CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Certificate serial: 0194BD4EAD96BC873603F36B7111657419C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: YxrKX5odz6GXBNHwN38bn-kUXgg.crl (hash: w6GjReNMAvgGTlHSllQhPfhoJb6EslMEZbJTMQFw2jY=)
2: bdP3lbH5ZQAyroCoiOKXaEW3gls.roa (hash: cDp8fKJxsr66s5SbMWdrl57QdYSD9f5YI04JxjPak0U=)
3: qiJ5Co2COWp43yOD01u1VY4pCJY.roa (hash: Anp0UBOibdiSB6xGLwvRtwG1gQPGc4uydYTJppvlKoM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ad:96:bc:87:36:03:f3:6b:71:11:65:74:19:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=31b53b32b02ebe2c4a95dcb16796513b80788839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:74:4b:90:a8:30:a1:05:f6:f5:78:02:51:02:
7d:bc:56:52:45:37:85:18:44:ea:76:ff:5e:83:8b:
d0:a7:5f:af:7f:5b:14:a7:84:1c:fc:04:32:de:3e:
90:3d:43:b1:1b:d2:8a:65:90:d5:05:07:fa:cd:41:
1d:0f:31:40:94:5d:58:0a:0a:a4:e9:6b:cb:bb:e3:
4a:3f:b2:3f:42:73:28:2c:0e:46:97:ce:fa:1b:7f:
2a:9a:85:60:be:78:c6:66:e4:c8:f0:99:5c:0a:23:
62:c4:17:d3:68:aa:d6:92:af:a5:52:10:f1:fc:9d:
00:fc:a5:95:a3:d3:ff:29:22:97:b6:d4:bf:da:a9:
4f:62:bd:fa:b9:1c:96:80:17:9d:8a:08:2b:90:57:
a7:dc:a2:f9:a8:b6:eb:7c:77:5f:6b:47:e3:d4:c2:
df:64:0c:96:06:01:82:98:ee:6b:33:c0:93:e4:9b:
83:08:37:8d:51:2b:c6:fb:8d:ca:65:8e:06:1e:a8:
fc:12:0f:89:7f:63:6d:0c:b5:f9:28:c1:43:4b:49:
44:ea:aa:01:53:34:4b:31:a8:49:b2:8c:1f:ae:96:
a8:b9:8f:d2:25:d9:46:a0:bf:f4:bc:42:c4:49:be:
3e:82:93:dc:1f:fd:0c:1e:ae:c9:c9:41:76:f6:48:
4d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B5:3B:32:B0:2E:BE:2C:4A:95:DC:B1:67:96:51:3B:80:78:88:39
X509v3 Authority Key Identifier:
keyid:63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e2:11:2e:a4:75:23:a9:e7:da:17:dd:09:14:5c:36:6b:59:
26:cc:20:be:9b:2c:97:4a:e0:00:e0:87:ac:56:3b:dc:13:88:
77:ef:59:4d:0e:9f:03:40:26:a7:40:23:02:60:4b:34:24:89:
9b:b8:a2:06:7a:4a:55:14:b6:5b:3c:c6:d9:7d:b4:61:04:90:
33:4b:db:d5:06:9e:ee:ae:aa:13:be:fa:9f:c3:9e:13:76:47:
4a:82:a3:e1:d1:84:5d:7c:bf:49:0d:19:c4:b6:30:fd:f9:cd:
fa:e1:68:9b:44:0c:e7:61:15:1c:a9:5d:6b:cf:0f:35:dc:bf:
0d:20:d5:dd:66:ad:00:d3:21:b9:75:5d:8f:18:79:cd:74:5d:
e7:e3:86:54:c9:13:b0:13:18:3a:d8:4b:69:8e:c2:3e:11:bf:
28:48:bc:4a:f9:b2:20:fd:00:71:bc:b6:1e:4e:3c:c5:e6:2d:
ff:5a:0d:f6:69:7f:02:8b:40:9e:79:8f:04:d9:df:5c:2c:30:
be:29:21:4c:8a:f7:d6:51:ad:5b:97:40:bf:91:ea:ee:ec:f4:
04:b4:91:3d:0f:df:05:d9:96:80:dc:ec:3e:5e:be:64:51:37:
0e:59:20:ed:78:f7:16:fc:7f:e5:d3:08:49:7f:53:64:97:3d:
2d:e5:d1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:21 2025 by rpki-client