Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
File: YC8n-tkkUqJUswoGDtODsTx1jtY.mft (raw, json)
Hash identifier: eCoih9eZ7YLqwl0Lym53Z1XSR8hNDTGRwiQGTSv0NNo=
Subject key identifier: C6:C2:1C:E7:4A:5D:A4:80:A2:2F:89:0A:FC:34:B5:F7:06:A4:E4:B8
Authority key identifier: 60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6
Certificate issuer: /CN=602f27fad92452a254b30a060ed383b13c758ed6
Certificate serial: 0194BCA9D4A8B1942E1A39C7B25447293FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
Manifest number: 068F
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: TRV1zvMwN77u4mbYXqSf5mMtgyk.roa (hash: AGCpSC7dzCZj1/xhxXIQK1OjIYEOjpJ4XzT4WLt1kl0=)
2: YC8n-tkkUqJUswoGDtODsTx1jtY.crl (hash: xAeYiw4GhquFg8sKRm+pTEpnizuHaQNFFqjvsD0Jj/w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d4:a8:b1:94:2e:1a:39:c7:b2:54:47:29:3f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602f27fad92452a254b30a060ed383b13c758ed6
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=c6c21ce74a5da480a22f890afc34b5f706a4e4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f8:d8:75:46:65:71:c4:70:3a:36:f3:49:a7:
69:a5:85:eb:ae:2d:27:88:ce:06:57:67:57:66:66:
13:53:db:24:69:6d:dc:ad:87:3a:ae:f1:ed:d2:30:
a7:6d:11:fa:51:87:3f:bb:77:8e:44:3b:c6:8a:58:
97:25:98:59:d9:5e:d4:85:7d:7e:6e:d4:23:77:d7:
92:8e:d9:f2:85:8b:11:7a:06:f3:50:e5:42:2f:22:
55:33:a0:6f:7e:17:16:5e:d2:7a:07:f8:3c:83:2a:
4d:d3:d9:ba:8a:1a:58:f7:be:5e:bb:ac:17:6b:a8:
17:b0:b7:e3:4b:19:d7:07:1d:f1:b2:9b:e3:e2:1a:
2a:b3:07:c0:d7:ec:65:62:60:10:97:b2:f8:01:49:
24:41:25:67:92:6b:0b:24:28:f9:48:71:1d:2d:f3:
58:a6:cd:e5:71:b2:29:e4:5e:a7:69:43:3a:8b:dd:
32:a5:6e:df:ac:67:2f:bc:d7:28:f2:2b:1c:92:1b:
8d:77:fc:55:54:eb:f9:4e:67:ab:5b:c1:fd:3e:ca:
85:3a:7a:93:89:98:6c:e1:74:43:a0:ed:e0:05:9a:
be:be:66:0c:31:4e:46:69:cd:36:c8:9c:95:d6:50:
2a:63:b6:eb:08:bf:01:fd:3b:99:3c:12:b9:7d:85:
9a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C2:1C:E7:4A:5D:A4:80:A2:2F:89:0A:FC:34:B5:F7:06:A4:E4:B8
X509v3 Authority Key Identifier:
keyid:60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c9:64:1f:96:71:3d:31:73:fa:29:bd:df:b0:f5:2e:60:0d:
ee:c0:f0:3a:0a:df:e4:eb:f6:d1:a0:63:f3:ed:bc:de:45:03:
ba:83:04:8e:52:8f:23:92:92:f7:5d:7e:85:f1:1f:a9:ec:24:
4e:1a:53:14:16:99:ee:0e:ea:67:81:cc:8e:b0:2d:4f:60:40:
66:af:24:20:30:ac:58:63:3e:31:57:ff:83:76:07:7c:b1:86:
02:62:ae:44:65:22:b0:b6:74:c7:36:ba:4e:f6:82:e4:04:9a:
61:24:cb:6a:2e:fb:fa:dd:d5:ef:5a:fb:8b:2c:40:10:ef:9a:
e1:e6:03:eb:29:d7:20:26:fd:ea:43:0c:a3:fe:48:a9:97:bb:
42:10:f0:7c:9b:b5:47:a0:1d:18:4f:70:5d:17:e4:d6:5d:b1:
36:8d:75:7d:18:a6:ac:df:d2:bf:be:70:8d:bc:fc:22:a6:f7:
08:e1:38:30:be:30:a6:1e:d0:45:78:66:b6:40:5e:a4:be:1a:
72:3b:98:aa:5f:98:95:44:11:8c:a7:c5:0b:b7:6b:7e:c5:ef:
b6:55:a8:e7:d2:01:9a:cb:ce:65:f4:94:c2:cc:8e:60:8b:60:
a7:b6:77:ca:eb:4a:7f:36:07:0d:f5:9a:b3:29:21:e6:85:7a:
91:dd:86:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:04:25 2025 by rpki-client