Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
File: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft (raw, json)
Hash identifier: 4PqIuXrX7L/NSXXaAl98cSOS9Ty4x2uFbEh1bAAWBjw=
Subject key identifier: 63:18:D3:32:3E:55:CC:30:AA:A1:B4:66:B8:6E:A5:35:67:29:24:55
Authority key identifier: 60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
Certificate issuer: /CN=602dc2478a4bdde4c440bb58802410d2340a490e
Certificate serial: 0194BC730484A794D7E3F5813073EF88F7C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
Manifest number: 01BA
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl (hash: lX8yETnXeclDDd7bE1cVDqptLyQXN5fB5axHv+PvnrU=)
2: smYq7tWRQmDSDcZOZxN4k09kn3E.roa (hash: 1xSS1KTZCTSL9vZ9IsBObZKtAhuEJnmAaQ1yOo8feWA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:04:84:a7:94:d7:e3:f5:81:30:73:ef:88:f7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602dc2478a4bdde4c440bb58802410d2340a490e
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=6318d3323e55cc30aaa1b466b86ea53567292455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:e2:e7:b9:40:b5:df:5e:05:90:43:54:d6:
2a:7d:26:e0:f3:55:eb:96:51:32:41:ed:b4:b6:bf:
80:d6:7a:1a:b4:77:9c:44:85:51:e9:56:3f:c6:4d:
a8:04:4d:82:e5:41:a2:ec:ee:0a:9b:24:ef:07:9c:
87:eb:32:d0:df:a5:34:57:4b:8a:16:bb:b1:72:65:
e4:ab:09:4f:b7:48:cc:15:0b:c4:33:7b:0e:91:95:
a7:cc:1c:04:5e:ea:6f:01:49:c9:e6:fe:e5:af:49:
47:bb:91:f6:94:c0:7b:5a:db:51:fc:98:7a:f7:4c:
19:f6:f5:72:d5:a7:a5:25:19:83:10:e8:be:a8:c7:
8a:19:36:87:32:d0:f7:14:59:4d:ba:23:40:02:44:
4e:22:66:4d:20:db:45:ef:16:34:1b:b3:70:e3:73:
0a:42:36:3e:55:a4:c6:dc:50:99:58:94:b2:8a:17:
47:7e:5f:42:b9:19:9a:88:2f:b8:6e:48:74:56:aa:
30:96:a7:d1:b0:ab:77:5b:56:6c:c8:40:d8:08:8a:
c2:1f:c8:fd:a2:4b:b1:28:d5:69:d7:a4:68:b7:21:
49:ce:1f:b0:5e:0b:a7:bb:4c:da:1a:d9:20:70:24:
bd:a3:fe:2a:a5:05:35:0b:e0:ab:2c:ea:3e:82:e4:
3c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:18:D3:32:3E:55:CC:30:AA:A1:B4:66:B8:6E:A5:35:67:29:24:55
X509v3 Authority Key Identifier:
keyid:60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5f:22:40:7f:31:b9:70:93:b7:4f:ae:24:87:d9:70:93:74:
d9:6e:c3:82:da:4d:5d:5e:fe:19:14:cb:52:0e:97:50:90:6a:
5e:68:98:8d:9c:3d:c0:07:64:d7:39:be:2f:fb:2c:a1:6d:58:
6a:90:0f:e8:61:96:d4:45:1f:a5:18:72:59:ea:ce:54:62:8a:
bd:3d:68:c9:8f:0c:e2:77:a7:8b:d4:f9:27:d9:62:11:3d:56:
92:1b:c3:ae:f1:06:0d:54:b5:2c:d2:a8:4e:bc:c7:b5:95:45:
17:43:50:4d:6e:72:38:44:2c:0a:9a:cc:88:21:cc:96:83:b2:
44:1d:8d:bf:6a:04:61:5e:e0:b7:30:ca:df:d1:a0:bf:aa:f2:
6a:4e:cb:91:49:1e:af:00:49:f0:f6:8d:01:c2:b4:3a:fe:f9:
6b:b4:9b:fa:0c:ba:1e:ae:74:c8:bf:3a:cf:3b:78:3f:c3:cb:
3a:c5:69:86:df:36:34:e4:a1:ad:28:d5:41:07:aa:c9:b1:ef:
6f:9a:be:46:68:f2:f2:98:b1:12:be:73:79:83:06:73:e3:90:
f5:57:b6:71:39:70:8d:e7:b8:88:ec:f0:e8:70:b9:5f:6c:6b:
3d:8f:85:7d:72:7e:ee:44:1e:7e:af:b5:b3:7b:ed:51:e4:fc:
10:4c:d1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:06:36 2025 by rpki-client