Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
File: ytx04QgwQh1O7qmCRM_RtBGQN_8.mft (raw, json)
Hash identifier: L+tYxicg8+Wy9jQvsJRx3ROFcvJhU/IYuK7jwRmfB2U=
Subject key identifier: FE:C0:36:3D:8A:2E:F3:39:7D:4F:B3:EB:5C:86:62:17:03:C2:E5:0D
Authority key identifier: CA:DC:74:E1:08:30:42:1D:4E:EE:A9:82:44:CF:D1:B4:11:90:37:FF
Certificate issuer: /CN=cadc74e10830421d4eeea98244cfd1b4119037ff
Certificate serial: 0194BCE0BC91D3D4138AB83193D266716772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: 2ba1m8Gy_1XOQ9HVKpmmzSbnedQ.roa (hash: nQyh0Ol7+Fw/xV4Vz5V2aR6KWFx7hjc+pCgRAL93L9k=)
2: ytx04QgwQh1O7qmCRM_RtBGQN_8.crl (hash: 9mlUeTDiQwH6qDqxUgxmb0nQ9M6QaXTTccbUhY+Iw7I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:bc:91:d3:d4:13:8a:b8:31:93:d2:66:71:67:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cadc74e10830421d4eeea98244cfd1b4119037ff
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=fec0363d8a2ef3397d4fb3eb5c86621703c2e50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:a8:6c:25:10:c8:e2:b5:9a:70:5a:af:a3:
3e:75:5d:75:88:71:cc:74:4c:03:28:73:7c:d2:21:
43:b1:83:29:0f:42:34:ae:81:f0:f8:2f:f4:50:69:
cf:2d:cc:31:7b:fa:fd:d2:f0:9b:1a:c6:67:e3:0b:
2a:a7:b0:2b:53:e5:c8:62:14:f1:56:c8:10:23:0d:
96:e9:27:89:f6:0a:c9:21:f0:28:e0:b0:b2:d7:eb:
73:d8:84:f7:c2:5e:dc:d4:41:9d:cd:e5:a4:47:16:
bb:c8:a3:38:0d:db:86:78:d6:fe:44:2f:1b:1f:4f:
c7:89:6b:0b:c1:86:a1:cc:0e:be:f2:24:6c:9f:ca:
ab:aa:7c:c2:49:7b:5a:69:6a:0a:a3:56:ca:31:7d:
0e:76:83:e0:d7:c0:b1:f5:01:2a:0f:93:14:70:fc:
52:7a:f2:15:31:fb:20:d1:68:a1:c7:2d:81:53:5d:
ad:4f:94:52:2a:4b:ac:8e:c1:06:c6:d2:c2:74:77:
7d:3c:81:ac:7f:b0:54:8b:33:70:a1:9e:df:f6:79:
ef:52:ab:84:79:0d:05:70:03:ee:f1:0b:00:58:58:
ba:e1:37:32:68:a7:60:6f:48:4f:52:fe:91:f6:42:
bb:13:59:eb:34:1b:fa:28:52:b5:24:82:b7:30:fb:
13:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C0:36:3D:8A:2E:F3:39:7D:4F:B3:EB:5C:86:62:17:03:C2:E5:0D
X509v3 Authority Key Identifier:
keyid:CA:DC:74:E1:08:30:42:1D:4E:EE:A9:82:44:CF:D1:B4:11:90:37:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:87:18:37:26:d2:4c:47:36:7d:af:54:c5:98:61:1e:4d:15:
66:29:b5:10:18:eb:79:8f:d8:8a:06:52:2e:99:1d:13:3e:31:
e6:93:a1:5e:be:f4:fd:e2:99:b4:4b:48:4f:2b:37:b8:7d:10:
db:ff:ad:cb:d1:1c:de:5d:32:7f:b2:e0:6d:d5:8e:cf:d6:7e:
e8:1e:26:81:3f:9e:34:c3:41:13:52:3c:8e:42:8b:ea:a5:69:
32:9f:7f:16:ec:0c:bc:69:f1:b6:cf:78:f5:60:ef:fc:dd:0c:
b8:6e:d8:76:0f:42:f7:09:03:c6:9e:f7:da:8f:80:de:cd:3f:
86:80:36:ca:f7:4e:99:95:27:10:03:b0:06:5c:ee:02:cf:e8:
a7:af:6e:ef:cc:a2:67:01:9e:c5:0f:96:c1:10:40:9f:c4:f7:
cf:0c:af:33:56:c1:7d:d6:de:6a:61:48:91:d5:53:19:94:c0:
66:b6:83:ca:d0:8a:35:7b:54:e0:42:24:ee:14:5a:2b:7b:a6:
92:f3:97:8c:ab:c8:c1:38:69:de:4f:20:50:a0:b5:38:af:e1:
1b:db:ff:8e:39:e9:97:3a:24:b1:54:a1:b5:3a:b4:7c:80:01:
bc:13:5e:0d:5c:e3:a2:c5:52:2a:ce:94:fb:9e:24:71:26:32:
3a:e0:98:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:00 2025 by rpki-client