Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
File: YdOddLF-aR3RsFIhxgmMr17pOjY.mft (raw, json)
Hash identifier: HzOLuvGbPbr0vul0nG0xmoPKLLypSLRR6sJnR8i8YuU=
Subject key identifier: C5:21:8C:B4:66:CE:EA:7D:1D:46:03:9C:4E:59:FB:76:86:D5:B6:2A
Authority key identifier: 61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
Certificate issuer: /CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Certificate serial: 0194BC729F153628B143C80A20AB71844A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
Manifest number: 0EF2
Signing time: Fri 31 Jan 2025 13:00:15 +0000
Manifest this update: Fri 31 Jan 2025 13:00:15 +0000
Manifest next update: Sat 01 Feb 2025 13:00:15 +0000
Files and hashes: 1: YdOddLF-aR3RsFIhxgmMr17pOjY.crl (hash: jxHm1QNOlHBbzINRIN+LswxzukfiedWRjiat7FQseAA=)
2: rs5a3rW2E-ThNoq2t8O4hGc6590.roa (hash: YMDJkD8/KCkGFvxJ1si+V/dSXJflYLlhdawvNihd//w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9f:15:36:28:b1:43:c8:0a:20:ab:71:84:4a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Validity
Not Before: Jan 31 13:00:15 2025 GMT
Not After : Feb 1 13:00:15 2025 GMT
Subject: CN=c5218cb466ceea7d1d46039c4e59fb7686d5b62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:68:63:67:8e:aa:ed:89:75:3b:0c:26:69:16:
bf:37:ea:4d:2f:85:29:c3:15:c4:01:bb:47:9e:dd:
ca:2b:d1:7e:83:31:a6:de:4e:1c:56:27:6b:03:6d:
77:66:cd:8f:56:cf:f2:00:b3:ed:49:8c:c8:16:57:
09:3c:df:df:9d:a9:5a:f4:ab:bb:16:30:c3:59:fa:
df:be:13:65:47:32:3b:24:f6:91:4c:80:71:11:bc:
05:94:5e:41:50:d5:cf:fd:24:a7:d8:19:8b:0b:cb:
c2:61:16:89:39:01:4b:6f:6c:1d:e3:da:6f:3d:24:
62:0e:60:32:1d:22:3b:3c:bc:fe:d6:52:f4:d1:24:
dd:09:64:19:9d:f0:d9:8c:3c:42:49:b5:b8:2b:8a:
21:be:bf:d7:95:4f:15:5e:a9:6a:7f:22:90:7e:f7:
25:f2:5c:3a:90:87:12:03:76:e3:9a:92:88:ff:c5:
99:f2:49:28:f8:d8:f3:e3:a4:bf:7a:4c:62:a1:f9:
45:3f:ed:03:43:8a:e5:b8:4e:29:3f:ca:0f:2b:56:
52:ff:dd:c7:08:37:5c:79:66:09:46:69:05:1c:fa:
7f:52:98:68:e8:af:72:56:3f:5a:e3:9d:92:53:60:
a6:d6:35:4c:e0:d6:be:e7:d3:35:f3:e9:7e:08:b1:
bc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:21:8C:B4:66:CE:EA:7D:1D:46:03:9C:4E:59:FB:76:86:D5:B6:2A
X509v3 Authority Key Identifier:
keyid:61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:51:e3:21:de:73:c9:31:55:d2:67:cb:b0:1f:f7:fc:f6:32:
db:99:cf:d3:73:66:46:0a:9f:8e:a6:28:b4:db:e2:5a:43:b3:
6f:54:e6:10:aa:27:6b:ea:18:d3:79:84:b7:91:53:78:90:1a:
94:bd:10:21:90:e4:d5:b5:36:ac:ea:0e:3c:14:5a:37:90:c2:
a5:70:7f:2b:7c:0a:63:5e:f2:6d:43:38:57:f2:89:a4:fd:57:
bc:8f:b8:2d:6a:34:7a:8c:d5:cb:71:c0:48:a3:1e:c3:4c:29:
41:4d:68:5c:05:2e:59:d9:5b:17:86:5b:c3:86:c2:41:22:37:
8e:3a:3a:da:2d:d1:1b:ee:7b:74:9e:3f:c6:a4:77:54:31:6f:
c7:9c:3b:08:08:7c:f4:03:1e:d0:a3:28:06:32:15:b7:ef:44:
ed:ae:b1:e8:50:aa:59:83:4b:2d:98:25:c7:b6:c9:a7:a9:7f:
f3:ed:28:23:8e:3d:23:67:3c:ce:82:e8:52:cb:1c:5c:13:63:
2e:1b:f7:1d:5a:5b:40:d7:fa:4f:0e:1b:fa:c6:3a:a0:0d:0c:
80:63:bc:15:7f:4d:28:be:65:5c:24:13:82:b9:f5:e0:1e:64:
3e:cc:4f:6d:44:23:bc:89:2f:e2:35:8e:99:cf:90:b3:18:93:
10:1a:75:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:09 2025 by rpki-client