Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
File: YAluN0CSzDAL0LsGxBZAky7Pi0k.mft (raw, json)
Hash identifier: ZRQordJl9kMclhspITq95GkUQ/W+NF8R7x8QEo5Vrb8=
Subject key identifier: 0A:1B:1B:A3:2F:D2:2A:8E:65:69:F8:D7:FD:9E:13:E4:BE:69:96:D5
Authority key identifier: 60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
Certificate issuer: /CN=60096e374092cc300bd0bb06c41640932ecf8b49
Certificate serial: 0194BBCDC4A7A935F140DACEB4A6534452B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: 526G98YrX5YRgU8kSVFlOR-68SU.roa (hash: EfmIyH+1frBE08mLPE+N4lUdJCEbw7QSSljLZgrUP1M=)
2: YAluN0CSzDAL0LsGxBZAky7Pi0k.crl (hash: NXGdhrWxnozqKpTDqksHUvOteT7RHfZw5fj13FTRBVA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c4:a7:a9:35:f1:40:da:ce:b4:a6:53:44:52:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60096e374092cc300bd0bb06c41640932ecf8b49
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=0a1b1ba32fd22a8e6569f8d7fd9e13e4be6996d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:17:19:9a:f0:92:80:64:e8:67:2d:88:11:
2f:92:65:73:a7:a6:08:53:c8:8f:da:e4:1d:6c:8b:
e0:3d:ae:ff:ed:c9:53:09:86:a7:46:e2:cd:90:28:
e5:e3:f0:b0:a7:69:77:5a:25:67:5c:61:fa:50:f0:
c9:0e:9c:54:c8:03:4c:bc:fd:ab:ec:18:9d:d0:01:
65:b5:3d:7b:ce:27:5d:a7:fd:02:66:3a:ae:68:e1:
c5:57:2a:07:6d:e9:76:d9:f2:0e:1e:41:42:29:4f:
7a:2f:63:b5:e0:67:b0:24:f1:68:30:13:9e:95:1c:
80:0c:2c:f2:16:82:c6:75:67:5c:1f:09:3c:de:70:
58:a6:1e:d5:4f:c3:1e:a1:80:34:ca:85:a3:e8:13:
5a:d7:2f:20:4d:5d:5b:df:a0:c6:5f:cb:7d:ca:86:
21:e5:53:85:9f:03:36:3d:f1:f4:01:03:05:0b:f0:
cc:a3:ca:3c:11:97:7b:f3:f8:ea:a5:b4:3e:36:c0:
94:a3:15:64:b9:28:46:8b:3d:2f:3e:6b:00:be:fd:
1b:9d:de:23:f8:b8:5f:e4:6f:f2:6e:f7:bd:d9:bc:
32:6f:65:d0:6a:58:46:06:06:12:a9:77:18:09:c4:
b3:ca:48:3d:e1:8d:00:f3:13:19:3e:ae:86:4a:e1:
7b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1B:1B:A3:2F:D2:2A:8E:65:69:F8:D7:FD:9E:13:E4:BE:69:96:D5
X509v3 Authority Key Identifier:
keyid:60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:85:8b:d1:2a:9a:e8:f6:ca:59:7f:0e:48:d7:f8:08:ea:a2:
ee:42:83:6a:9a:eb:06:20:66:a9:03:31:02:d7:2f:c0:8b:d5:
83:95:fc:d3:58:6b:20:e4:16:40:26:16:49:5a:38:bd:a3:ae:
3e:30:96:3f:a0:49:5e:78:e9:04:12:49:aa:24:a7:28:b0:7d:
ec:ac:89:1b:6c:7b:b4:1e:9d:e2:b8:64:0d:68:25:ff:46:de:
83:a4:21:48:f2:cb:a0:56:b2:cc:6f:98:22:14:93:0b:9d:23:
6d:99:8f:e0:45:17:76:5f:e2:74:54:c5:71:87:1a:6a:05:e8:
9e:21:58:ac:00:1e:98:46:22:e3:f9:f0:72:1d:ab:22:c6:fc:
8b:e4:05:3b:9f:d9:d3:d6:fd:4b:73:f1:53:bb:1c:27:75:0d:
3e:60:c5:e1:ad:30:36:c4:05:2e:e8:ab:9b:2b:1b:51:c9:4f:
cf:13:c1:37:d4:fa:f1:fc:14:1f:0b:6c:af:5d:27:7f:e4:03:
1a:8f:51:14:e8:29:fb:78:2e:e4:7e:51:71:48:bc:9d:cb:2a:
53:5f:3b:86:ae:c3:51:17:e7:61:bd:68:fb:d8:47:c6:f2:d1:
29:94:c9:56:b0:f5:f2:6b:89:d8:4f:43:ba:68:aa:56:7a:df:
0d:95:9c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:30 2025 by rpki-client