Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
File: YEBzL9vKpSkA2yRiB1v07xUVlpU.mft (raw, json)
Hash identifier: xHubWlUnWECPQTfN5TdUn5ZVeGrEHnL+BOPDwepOaQw=
Subject key identifier: 73:37:26:99:C4:B1:DD:24:93:EA:67:9A:A8:86:C7:2E:E6:64:43:1B
Authority key identifier: 60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95
Certificate issuer: /CN=6040732fdbcaa52900db2462075bf4ef15159695
Certificate serial: 0194BD4E4A038346D0AC6A38AB04D09545DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
Manifest number: 02DB
Signing time: Fri 31 Jan 2025 17:00:12 +0000
Manifest this update: Fri 31 Jan 2025 17:00:12 +0000
Manifest next update: Sat 01 Feb 2025 17:00:12 +0000
Files and hashes: 1: 2zI93eWS4MAq1q_HzWCmHMK0vvc.roa (hash: OPrS0FrS6pSekQT7FXidaqihz4eIxPAHQ00wl3WWNU8=)
2: YEBzL9vKpSkA2yRiB1v07xUVlpU.crl (hash: wzQ4GrhW2J/1HNqhuiHkv1n6irT7bt2O5lOq0ZUxwJE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4a:03:83:46:d0:ac:6a:38:ab:04:d0:95:45:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6040732fdbcaa52900db2462075bf4ef15159695
Validity
Not Before: Jan 31 17:00:12 2025 GMT
Not After : Feb 1 17:00:12 2025 GMT
Subject: CN=73372699c4b1dd2493ea679aa886c72ee664431b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:22:71:61:d1:3c:c7:bb:d1:b0:60:98:e5:
8c:a7:98:a0:c6:c6:d5:c9:a1:26:36:60:36:1e:81:
a2:b5:53:16:d0:eb:3d:f3:41:46:16:b0:c8:57:dc:
15:eb:05:db:4e:08:c1:71:89:82:a2:70:8a:80:a0:
3e:f4:60:00:ca:39:34:bb:39:91:e3:7c:1f:fb:ef:
73:b5:24:fa:8d:0c:1b:0d:e8:ad:6d:c1:53:79:c4:
34:af:8c:97:8c:5d:9c:8c:8b:c6:b0:ad:46:e3:e4:
f7:3d:cb:9e:50:9a:ae:1d:1f:6f:84:a1:c3:ed:28:
9f:7a:3d:f1:1a:a7:e2:18:b6:e4:d8:a7:e5:25:e3:
94:35:9c:77:18:c6:f6:8b:e1:c8:55:49:b6:93:a3:
2b:92:f4:84:4c:7a:b1:76:cd:ff:e5:d5:2c:02:e9:
70:52:c4:94:88:9c:ac:05:7b:ec:22:d6:af:cb:4a:
c5:d1:c2:15:18:50:87:7f:23:17:73:bf:a0:13:ae:
8e:7d:d9:ed:f3:88:ba:81:4e:d6:26:e3:46:81:75:
bc:00:a7:bd:6b:85:82:00:86:41:da:44:b4:e4:df:
32:17:b6:64:eb:3d:70:89:5e:3b:19:98:31:8d:db:
4f:68:05:ba:05:7d:d5:cd:bb:04:2b:74:b8:f8:dc:
d1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:37:26:99:C4:B1:DD:24:93:EA:67:9A:A8:86:C7:2E:E6:64:43:1B
X509v3 Authority Key Identifier:
keyid:60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3e:3b:d7:e8:69:d2:2d:7a:97:b7:79:d1:a2:b5:dc:3d:90:
97:74:22:a9:3b:f5:4e:62:38:0a:d4:f9:cb:20:f2:d0:d9:6d:
fd:32:c7:3f:cb:f0:83:12:62:f6:74:84:13:b6:f2:8b:e5:63:
4f:60:2b:e2:39:39:41:b7:eb:cd:2a:c7:b5:a6:66:07:0c:b7:
2a:31:70:72:2b:2a:a5:5c:32:7a:84:c9:58:a1:9f:46:d0:33:
a9:26:23:1e:e1:e6:07:3f:89:8e:da:79:e3:8a:32:a3:17:a4:
24:fb:c1:01:8f:1f:0e:25:6e:ab:83:80:b7:90:94:05:a8:38:
5b:d0:d6:ae:8d:8e:18:06:c8:16:0a:db:5f:0c:bf:83:8b:39:
7b:78:2d:e2:5e:dd:d1:0e:43:a1:a1:17:a2:8e:ad:a7:7e:51:
c8:9f:1a:2f:fa:13:68:06:49:ac:59:9d:4f:4d:aa:62:8a:14:
30:2a:b1:a2:b8:1d:4f:44:31:28:2c:a6:f7:56:dc:c6:1e:e6:
8c:88:1b:04:ac:1d:5b:ba:22:de:20:f9:17:1d:8f:2b:f0:93:
2d:11:26:e7:ed:f9:72:31:21:08:c1:e2:41:e0:b4:33:a1:6b:
f3:91:f7:fe:b2:29:6d:cb:4c:bd:a6:ec:cf:55:92:1e:9a:6b:
13:07:34:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:56 2025 by rpki-client