Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
File: YSQjU25R-U-r_FCs-UTXmKrPQD8.mft (raw, json)
Hash identifier: Nlqdc28n4Z6Ujgv01RDMGcfeYCaPvvwwNkUvpTuyVDQ=
Subject key identifier: 9B:18:41:50:CB:5D:EB:E0:04:09:93:D3:79:67:09:87:54:78:BB:65
Authority key identifier: 61:24:23:53:6E:51:F9:4F:AB:FC:50:AC:F9:44:D7:98:AA:CF:40:3F
Certificate issuer: /CN=612423536e51f94fabfc50acf944d798aacf403f
Certificate serial: 0194BBCE60A37ED7DE73470D32F75E985D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 10:00:51 +0000
Manifest this update: Fri 31 Jan 2025 10:00:51 +0000
Manifest next update: Sat 01 Feb 2025 10:00:51 +0000
Files and hashes: 1: Wdd1tMY2qRg0hLEXFJzhYiqLyU8.roa (hash: 7fQYHjrnqnFQHkWsTRVENbZi9f45/b+aKRBgyUNF2tI=)
2: YSQjU25R-U-r_FCs-UTXmKrPQD8.crl (hash: ZLfsCuIRqimXF+K9yI21UwFSlX7wlxuvkb6lEwBp0zk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:60:a3:7e:d7:de:73:47:0d:32:f7:5e:98:5d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612423536e51f94fabfc50acf944d798aacf403f
Validity
Not Before: Jan 31 10:00:51 2025 GMT
Not After : Feb 1 10:00:51 2025 GMT
Subject: CN=9b184150cb5debe0040993d3796709875478bb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c4:45:71:6e:76:c5:eb:70:be:e5:7f:40:7b:
6c:5f:a8:1a:fe:16:29:2f:00:29:27:af:0d:a2:85:
a6:06:cc:09:0c:b6:43:29:a7:82:1b:d4:f9:b0:66:
50:8f:3c:cb:68:dd:d2:e2:5f:6a:a4:44:9f:9c:5c:
b7:c9:76:96:06:9f:00:46:04:52:f1:5f:09:ee:f1:
bc:81:2d:93:29:37:aa:ec:c3:2b:da:2b:13:cc:b0:
65:da:4b:32:da:22:e3:d2:91:fd:dd:34:1e:cf:f2:
e8:d2:95:c0:de:03:9a:9a:45:9d:83:0d:5d:01:03:
67:6f:bb:30:df:78:68:8b:a3:5f:f3:ed:a2:1a:f5:
10:3b:e3:d1:d1:fe:91:05:f0:67:21:b0:89:74:b2:
9f:82:53:2c:c8:9d:95:35:fa:2a:dc:df:aa:d3:80:
e2:d7:fa:95:2d:2d:43:bf:ce:73:cb:1c:73:99:d5:
90:b1:78:7b:92:4f:f3:91:b5:c4:54:05:38:a8:20:
ac:49:cd:cc:0f:7a:93:d6:bc:68:e1:3f:fa:64:89:
65:1a:60:3c:5b:e9:b5:be:d4:ca:b8:1b:d0:0d:2f:
f5:0f:0b:69:b9:04:aa:a7:19:33:fb:6f:72:a9:69:
f8:cc:95:51:00:db:de:43:29:42:db:40:f9:f1:c0:
a3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:18:41:50:CB:5D:EB:E0:04:09:93:D3:79:67:09:87:54:78:BB:65
X509v3 Authority Key Identifier:
keyid:61:24:23:53:6E:51:F9:4F:AB:FC:50:AC:F9:44:D7:98:AA:CF:40:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:eb:e4:82:2c:a1:71:1e:27:3a:1f:8c:38:af:60:be:75:5d:
c5:dd:cc:48:75:0b:f6:42:24:00:d0:86:7e:cb:8d:e8:84:8b:
ba:06:33:e1:18:c7:a1:ed:6a:1b:99:f1:10:ba:1f:de:bf:c9:
c6:6e:47:09:1e:cb:ac:0e:0e:31:4f:5f:c3:df:47:de:bd:ea:
56:91:d6:fb:bb:45:0c:6c:5a:7b:3d:5a:53:0e:8f:8d:a9:a0:
d1:3d:f5:8a:cd:10:68:5b:ef:70:63:a9:7c:1a:82:6b:cc:c6:
11:86:34:82:7c:81:2b:95:26:32:3e:9a:28:e5:81:24:b3:73:
de:c8:4f:c4:57:96:09:c0:e0:e1:14:e4:77:00:28:56:a0:a8:
43:de:a8:9a:39:5d:ea:03:13:cf:c8:54:70:29:62:b1:78:dd:
64:fa:10:57:8b:aa:45:cf:77:02:87:29:ea:8c:de:68:06:aa:
62:b3:b7:ed:6a:31:02:bc:70:c0:51:db:a0:34:84:2f:9e:a3:
a3:17:e1:c3:42:4a:76:90:45:f4:1a:3a:a6:2f:50:74:36:37:
df:a0:27:95:de:a8:31:3e:fb:e7:73:49:82:86:bb:45:66:02:
18:86:9f:40:c3:54:07:cf:54:8b:d9:fb:5a:e1:e2:2f:88:e9:
38:26:cc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:36 2025 by rpki-client