Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
File: YXJS67szSErc7HQFrepN4IoK-wQ.mft (raw, json)
Hash identifier: 7Y3aQmHGjkI+gbT61j+6zge2y1y+WBPPR6+0QJMfT0o=
Subject key identifier: B1:AF:14:CA:68:61:DB:B1:76:39:9F:69:B0:EF:13:A9:3E:DE:7E:BE
Authority key identifier: 61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
Certificate issuer: /CN=617252ebbb33484adcec7405adea4de08a0afb04
Certificate serial: 0194BD8578E23E66F4490328BFD13DE902AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: YXJS67szSErc7HQFrepN4IoK-wQ.crl (hash: zs9L/Ymuf8eLhQkfV9R8kL5a8fwwyqq5ZPZ11TLpMYI=)
2: doEo4Ht0sa1vtVeAkjpvUpCnHHs.roa (hash: +MKv/V0IfbD2z8rIVhSAM4id+TCFCy9eVNZqs6dovHs=)
3: t9q3JQRIfHPbUTHA-7F2iigGH4c.roa (hash: s2L1muHfCT4EhX7O1DIS6+l6imOYfyQC+qFGEKmez7U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:78:e2:3e:66:f4:49:03:28:bf:d1:3d:e9:02:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617252ebbb33484adcec7405adea4de08a0afb04
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=b1af14ca6861dbb176399f69b0ef13a93ede7ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9a:b0:d1:b5:64:96:a4:f1:ae:a0:a4:2f:7c:
13:e1:49:e2:39:6e:9d:a8:e4:30:15:c7:a0:a1:d6:
fe:d4:ca:aa:37:9b:11:2b:c6:9b:b4:7d:16:34:a4:
91:40:bd:8e:d9:36:3e:81:71:79:7a:35:48:cb:69:
be:10:1d:08:9d:5b:f3:ed:62:3e:54:99:c2:c3:59:
61:b4:3f:47:ef:2d:a7:a2:62:5e:7c:01:e9:a9:1a:
08:2b:c1:72:a5:d4:4d:fa:fc:00:83:28:86:35:70:
65:aa:a6:2e:af:3b:38:c0:ea:2a:d5:c8:af:18:d2:
f7:f9:5b:30:04:c9:c2:96:52:66:c6:63:c1:a1:39:
cc:9d:34:e8:de:82:ad:cc:65:a4:37:61:f4:05:14:
1a:bf:21:db:92:10:71:d8:25:f4:df:6c:a3:44:3c:
bb:cd:4e:ac:a5:4f:a6:75:11:74:7e:34:4c:3a:e4:
8c:e6:60:52:95:47:46:90:f2:96:46:26:15:45:01:
51:30:17:d0:85:47:c4:60:42:61:8a:3c:11:8e:65:
f1:3c:97:0b:8b:af:80:40:01:6b:e3:68:81:d0:04:
24:48:27:6f:d2:31:65:2b:37:8c:b9:08:bf:dd:f7:
22:cf:6c:96:4b:f1:40:9b:b3:00:ea:f4:fa:53:85:
d1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AF:14:CA:68:61:DB:B1:76:39:9F:69:B0:EF:13:A9:3E:DE:7E:BE
X509v3 Authority Key Identifier:
keyid:61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:fb:bb:70:a3:01:b8:bf:8f:ec:da:02:ab:b6:30:d6:52:90:
1b:5f:c6:cf:08:90:f6:8c:d9:5a:6a:ca:ea:b5:2c:a5:16:69:
33:83:96:ce:c2:48:83:19:ba:9a:21:df:77:c7:12:9d:b3:d3:
4c:d6:45:7e:b6:a1:1f:54:36:e5:0d:47:10:4c:c0:13:37:93:
32:ca:ae:bf:f3:a6:f6:dd:30:2f:41:71:d2:38:a1:4d:70:9d:
07:4e:26:56:c7:4f:11:7f:d0:56:ab:8f:d2:c3:b2:3e:94:c7:
30:cc:9a:5b:a9:ad:12:16:1d:eb:fb:0e:58:0e:77:d0:5a:0f:
60:dc:ab:ae:3f:58:7b:a0:bc:30:42:fa:68:26:f6:f9:37:71:
47:1e:6d:d6:9e:20:69:d3:e6:0b:d5:51:53:b1:a4:4c:f6:d3:
f2:12:5a:a3:35:9b:71:63:09:cf:50:7d:af:71:46:49:07:8a:
c3:68:96:d1:27:3c:df:d3:16:e6:70:dd:4b:01:4d:c5:11:c4:
e3:e1:72:19:6e:95:e9:4a:7f:74:62:88:a9:88:7d:1d:b8:6c:
aa:05:a3:39:ed:2e:2b:66:f1:c4:55:3a:ce:d3:37:16:eb:8b:
57:9b:aa:42:db:8d:5e:ec:1d:1b:98:af:4c:4b:d0:54:52:3d:
94:9e:fb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:15 2025 by rpki-client