Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
File: ytecEmuC93zGO1prbNi9rm4PWjw.mft (raw, json)
Hash identifier: nNKhHUzD5xFO+ZCbunH+o3lQ+5CPrlZTrHz0WCMnHBk=
Subject key identifier: CF:CE:06:2F:97:3E:E6:D0:96:31:91:6F:CE:02:7C:DA:9C:8F:8E:DD
Authority key identifier: CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
Certificate issuer: /CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Certificate serial: 0194BBCF0B6FE4961C7324E9B04EFD639439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 10:01:35 +0000
Manifest this update: Fri 31 Jan 2025 10:01:35 +0000
Manifest next update: Sat 01 Feb 2025 10:01:35 +0000
Files and hashes: 1: ytecEmuC93zGO1prbNi9rm4PWjw.crl (hash: 3/i4XDnl5ledNOS5OaTahTc4S0LWepRjB1tCUnD6t+o=)
2: z9zEGi_XQqptGezSebT8w5b6aS0.roa (hash: z9ugxBDlyl3BhzVIONVnCcdUfAwyBcjvQs6vKwlWW+s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:0b:6f:e4:96:1c:73:24:e9:b0:4e:fd:63:94:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Validity
Not Before: Jan 31 10:01:35 2025 GMT
Not After : Feb 1 10:01:35 2025 GMT
Subject: CN=cfce062f973ee6d09631916fce027cda9c8f8edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fd:fb:c5:61:b1:52:67:87:63:be:b8:e7:4e:
94:44:70:c7:49:ce:44:01:08:c9:ef:cd:8c:c3:ce:
17:18:41:7c:da:b5:af:63:81:a4:03:44:8f:ea:ea:
6b:72:df:d0:3f:8c:14:e3:0e:18:bc:5d:37:23:20:
8e:e1:ac:9a:3d:9f:f6:eb:2b:8f:89:e3:38:04:62:
6c:04:6d:11:21:78:d5:ad:d9:82:cb:9c:f3:3e:63:
3e:bf:42:58:76:37:c2:1e:df:66:09:7b:60:3d:27:
9c:2c:f9:ac:40:b3:9b:da:6d:77:f1:3e:ce:e8:c4:
44:4f:02:44:59:66:2e:65:1a:4a:62:8b:34:32:9c:
6b:18:f4:ed:a1:bf:6c:2a:c7:d3:18:2b:60:04:59:
ea:68:eb:51:27:d6:b4:08:2b:a7:67:d9:7a:c4:43:
9e:08:02:41:a0:be:5e:27:19:f2:6d:8c:1a:f7:28:
e9:7f:d2:4d:1e:3d:48:7b:61:71:c8:36:7a:26:0f:
cd:a8:85:a3:60:2c:d0:51:3d:85:0d:51:47:70:a3:
c9:58:54:ae:3d:a8:be:27:c3:3a:4d:b6:de:21:f5:
73:7b:a0:b4:74:1f:fa:58:32:89:6d:de:9d:5f:e8:
8f:0b:43:e1:17:05:d7:70:44:f2:d2:8f:6b:de:8c:
ff:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CE:06:2F:97:3E:E6:D0:96:31:91:6F:CE:02:7C:DA:9C:8F:8E:DD
X509v3 Authority Key Identifier:
keyid:CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:87:db:7a:e8:c1:7e:2d:af:4f:fb:fc:48:72:9d:54:5e:05:
43:42:39:1b:ad:e4:48:ea:36:ad:1a:d1:46:08:6d:fd:78:c6:
60:23:81:3a:bc:c5:17:8a:71:a6:25:56:e5:28:24:cf:f0:e2:
95:c6:79:71:ea:c7:c9:a8:78:63:de:bb:9f:2b:42:0b:ba:0a:
ae:3b:5b:da:54:2c:9b:f2:0b:f5:e8:86:19:7e:dc:21:ea:90:
97:7e:30:23:55:1d:37:cd:44:ba:17:5f:1f:b2:a3:b8:8a:c7:
27:8c:1a:75:44:9e:99:74:27:56:7b:d3:b2:69:bc:d3:e8:90:
5e:f6:2c:79:71:da:a6:f6:6f:97:9b:f7:39:0d:31:61:8a:26:
5f:50:d7:7c:10:06:5e:d2:7a:e6:02:52:8d:87:c4:a2:9d:7f:
2e:cd:b8:d4:e0:d9:33:07:26:76:af:a0:fc:fd:59:23:60:10:
e5:66:2f:eb:4f:61:2d:86:eb:80:08:6c:03:16:d4:28:65:d3:
53:0d:52:69:3f:a7:39:91:90:69:4b:20:14:38:32:a8:2f:28:
2d:b8:fb:51:48:8b:38:c2:04:03:80:1b:32:82:f0:6a:94:0d:
ec:fc:dc:6d:9f:1a:b8:a6:d9:42:67:37:0d:02:63:2d:70:39:
99:d7:3c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:39 2025 by rpki-client