Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
File: YhGQEidXeAf0toyLjyX76pxyB2I.mft (raw, json)
Hash identifier: vq7FpNQZ8hTWezMgZIiIJnVIsP5tl5F9kAJHMEJzbzA=
Subject key identifier: 91:B8:E5:BB:11:F9:00:F3:C7:2B:66:FB:25:1B:48:F6:D0:75:96:CD
Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
Certificate issuer: /CN=6211901227577807f4b68c8b8f25fbea9c720762
Certificate serial: 0194BCE071DDDA4C8D8775C97BB0F18D935E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
Manifest number: 0EEE
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: YhGQEidXeAf0toyLjyX76pxyB2I.crl (hash: haIDS2gcdqKKhr/Pj0gtfpVd/6XnYcUT2LINqLnoFks=)
2: y7v-mWbLIi-YEJOLFYZrPZdamNM.roa (hash: fFSatUERbg8P2zLQbPAXLJNzdwJ2j7jhYqM1W6Xx4mw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:71:dd:da:4c:8d:87:75:c9:7b:b0:f1:8d:93:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=91b8e5bb11f900f3c72b66fb251b48f6d07596cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cb:9e:b3:cd:6b:67:fd:83:cd:e8:94:f5:2e:
59:22:46:4b:88:fe:12:3a:48:39:bc:a5:ec:05:1a:
48:34:9e:c9:0b:d4:f2:91:af:73:6c:e5:8f:5c:04:
df:fd:ab:9f:2e:83:58:1d:7a:ac:32:19:47:5f:88:
d7:b3:bd:b2:46:8b:e1:01:fc:75:90:49:7b:b2:7c:
c1:18:fa:7c:77:46:d1:f7:b3:cd:6a:34:47:9c:a8:
7a:94:fa:36:4d:e8:5e:8c:45:44:0f:79:8a:04:93:
1e:17:80:f4:44:85:91:8c:5d:29:29:66:11:9e:65:
e4:71:f4:f6:a5:5e:af:9b:20:d8:01:a3:60:3d:cc:
9d:97:b3:ee:59:c8:e8:9a:db:05:98:00:ec:ef:2b:
8d:7d:ba:28:05:a1:9d:76:4d:37:e4:05:b3:fd:f1:
04:df:f3:74:3a:0f:86:39:59:92:c1:91:01:c8:78:
9d:9c:44:a2:02:82:d1:3d:fe:5f:a5:c2:ec:07:34:
a0:1f:b7:ec:cd:46:b3:06:9d:e9:02:8e:34:97:db:
12:d4:92:a8:5a:27:90:2c:48:ba:61:72:7d:a0:88:
36:17:df:dc:9b:d8:df:88:d1:79:a7:dc:9a:8e:7e:
b7:3e:77:49:cc:c0:3c:c8:1b:8c:8f:11:ea:54:f0:
83:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B8:E5:BB:11:F9:00:F3:C7:2B:66:FB:25:1B:48:F6:D0:75:96:CD
X509v3 Authority Key Identifier:
keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9c:8e:36:4a:16:fa:36:57:8b:6e:37:23:4d:f7:55:cf:0e:
80:cc:43:be:14:8b:e3:1b:ac:15:ef:90:36:b1:75:ba:eb:5f:
5b:42:8b:4a:0d:97:b7:df:71:9e:71:a3:c1:b4:67:08:55:4b:
b1:73:7a:c1:b1:b6:19:65:63:08:7e:d4:6b:aa:ad:16:03:d6:
a0:47:67:7a:b7:cd:b8:48:4e:fc:66:b7:3b:98:bd:24:8b:6c:
eb:ea:3e:2d:24:89:5f:bb:3b:fa:3f:7f:63:94:09:af:77:16:
0b:ce:55:65:a7:b5:13:6d:56:95:24:13:0b:ad:36:fb:32:a5:
2d:31:80:ba:4b:df:e8:30:bd:2f:19:90:4f:8e:47:5b:ef:26:
ff:53:61:5f:18:f6:1e:f2:b8:0d:a7:2c:9d:94:6f:00:7a:e5:
a3:73:3b:1a:5e:b7:e8:fb:f4:9a:2c:07:85:f0:ff:db:f7:51:
f5:32:a2:9d:94:fe:c5:ff:68:f3:9f:ea:57:88:7b:92:d4:dc:
02:b6:7a:2d:d6:8d:ff:11:cb:0f:57:88:b8:a1:75:31:72:c8:
36:07:30:c1:43:6c:66:db:1f:ea:31:9f:f6:b4:a0:81:f3:2a:
2e:3c:c5:bc:84:de:e9:54:5d:f1:34:7d:78:09:e3:5d:32:3f:
c5:45:a0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:23:12 2025 by rpki-client