Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
File: YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft (raw, json)
Hash identifier: 2qXBtHxJgyqMzoAaBbToLuar7t0j6JW2jB4JLBOOWds=
Subject key identifier: 4D:9A:A8:67:30:90:BE:9F:78:E8:F5:E8:E7:58:0E:2B:87:60:52:64
Authority key identifier: 61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
Certificate issuer: /CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Certificate serial: 0194BBCDF056037F7FD0A3D639CA3D563D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
Manifest number: 01CF
Signing time: Fri 31 Jan 2025 10:00:23 +0000
Manifest this update: Fri 31 Jan 2025 10:00:23 +0000
Manifest next update: Sat 01 Feb 2025 10:00:23 +0000
Files and hashes: 1: YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl (hash: 3Jbv7vWZ9VFcK6FMqWnq5cgu3GvMn/qOD7afpMeL6UI=)
2: x91LhsukgPAqfQYj3W2LlNBbAek.roa (hash: F7uoWwJ/vYjK+zrUfHWPZS/ilKp/egTCjRgAcB55Dx0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f0:56:03:7f:7f:d0:a3:d6:39:ca:3d:56:3d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Validity
Not Before: Jan 31 10:00:23 2025 GMT
Not After : Feb 1 10:00:23 2025 GMT
Subject: CN=4d9aa8673090be9f78e8f5e8e7580e2b87605264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:fc:ba:d8:0a:e5:f9:52:fe:69:87:ea:2b:
62:ae:0c:74:72:c4:a3:8d:78:f7:ff:ef:d8:ea:e7:
79:1a:af:f6:3d:dd:86:9f:0c:50:e4:91:c0:f4:7f:
cd:0f:84:75:65:16:ca:47:a7:1a:48:b9:94:5d:00:
dd:7d:0f:3e:7a:84:0b:33:42:db:56:e0:28:a3:bb:
13:3c:7a:52:ab:b9:3e:ae:49:e7:b1:50:de:60:51:
ce:63:75:d7:60:26:e1:c2:0f:0e:e4:9f:56:81:8c:
8f:d9:d2:42:31:2b:5e:47:b4:fb:b1:bc:8a:19:8d:
d3:5a:a7:d1:ea:09:84:28:34:97:d8:0e:c5:26:b6:
09:55:b9:31:a3:9f:25:be:2e:9d:9a:df:1e:3b:64:
65:17:59:96:0b:da:dc:0b:34:45:9d:1e:88:4a:cb:
38:a8:07:11:c0:81:1d:77:a0:ca:28:ce:0b:c8:d2:
6f:84:9c:e3:fa:03:05:89:78:ab:f0:69:67:57:a3:
eb:f9:f1:5b:9e:01:88:e8:57:b6:4f:f8:6e:25:54:
8e:b5:1f:49:25:77:58:fc:0c:34:5f:cb:c9:0f:17:
25:bc:3a:56:d6:1f:92:48:b8:b9:08:ff:33:82:a7:
19:9e:2e:e4:db:b9:5a:68:df:15:fe:c9:46:ed:6c:
c5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9A:A8:67:30:90:BE:9F:78:E8:F5:E8:E7:58:0E:2B:87:60:52:64
X509v3 Authority Key Identifier:
keyid:61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2f:78:f9:31:67:50:51:8a:88:83:a0:e9:71:61:0d:12:de:
bd:06:b7:c9:68:f7:ae:f5:b4:27:fb:6e:6f:ab:80:1c:25:bc:
bc:a7:cc:38:5b:aa:a0:4f:bc:76:41:e8:11:2e:34:d5:3c:0c:
cf:63:8c:7e:0b:80:55:2d:ae:7e:09:da:d8:ed:d7:22:2e:18:
57:db:7b:94:64:de:3e:fc:33:d7:a0:00:a7:d2:84:ed:a2:b0:
cf:56:71:dd:62:4f:b6:26:26:c6:a3:15:4f:0b:2b:73:08:a0:
5d:d4:90:0f:d7:03:58:8d:fe:ed:f0:de:ba:a7:71:7b:d0:71:
34:eb:a5:5b:96:9e:40:d7:1a:18:fd:bf:49:16:74:39:29:02:
33:d2:ea:e5:ba:2e:03:95:78:b0:c0:9a:ef:d5:55:e0:cd:93:
60:c4:dd:b5:ee:d2:cf:64:89:58:dd:5a:a3:fd:04:6d:c7:a0:
64:7e:0c:18:02:93:db:35:fb:50:57:45:00:83:67:b6:98:40:
c9:cd:9f:bb:22:3d:e4:ca:3e:d2:67:30:de:1e:2d:74:46:d7:
87:95:2c:9d:19:e9:c9:54:e4:19:c2:05:23:58:a3:b0:c2:1b:
a3:93:db:53:a2:3b:44:27:0c:ca:86:5a:e4:46:90:c2:68:a0:
f6:97:e0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:56:59 2025 by rpki-client