Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File: YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier: YyiAcBRczK3FpYmVij5VzdBVNll6Rmyw2VJfmuHUAVU=
Subject key identifier: 76:D3:03:2E:29:EF:D5:2D:E8:44:B4:8A:ED:F9:0D:95:0A:F7:7E:73
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 0194BC72C5048EF4B7F0ABF1D218FBD77264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number: 1151
Signing time: Fri 31 Jan 2025 13:00:25 +0000
Manifest this update: Fri 31 Jan 2025 13:00:25 +0000
Manifest next update: Sat 01 Feb 2025 13:00:25 +0000
Files and hashes: 1: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: 5TswO8uTkhxpc4/UkdxX91GxXuZZtPyvLuuAhA1FI0c=)
2: faR7v_a9Va3-r60WSU_WaTJtc24.roa (hash: thaUHgZWvI2PC5jRMcEiFXRYLXPtomHvbvJ1x6LMOHg=)
3: zEjZI2nbs9NYU83i9nAA_qIX6Ls.roa (hash: NeJZaXwcRx4Bl+3WoFWMtQtTNrN4F35s8GQu8H57fPM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c5:04:8e:f4:b7:f0:ab:f1:d2:18:fb:d7:72:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Jan 31 13:00:25 2025 GMT
Not After : Feb 1 13:00:25 2025 GMT
Subject: CN=76d3032e29efd52de844b48aedf90d950af77e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:9d:66:9d:12:23:95:19:70:02:82:6f:6b:
b4:99:eb:b7:2a:ef:c8:e8:54:5a:13:b8:bb:db:39:
cb:46:3f:02:c9:b4:f6:0e:52:22:85:bd:e1:c9:02:
88:3c:42:8a:78:40:86:ae:94:6b:4e:cd:91:c8:70:
ef:ba:1d:66:d0:c1:2f:94:c5:dc:c7:e7:9d:e3:78:
8e:d0:48:2d:cd:89:15:cf:b5:35:66:d2:a4:35:39:
60:d2:7b:36:d7:7a:77:50:af:20:45:74:78:42:1b:
20:11:6c:92:c2:c2:a4:a8:05:b4:be:08:a5:64:4f:
0f:5e:3a:de:5b:4e:d1:53:d7:41:c8:ce:1c:14:81:
15:e1:d6:2b:21:0f:07:fb:89:8e:ee:f1:05:95:7c:
08:a2:1c:a7:af:c6:07:56:7a:01:eb:6d:d5:31:cf:
6e:20:a4:68:0b:c8:10:b5:7b:dd:df:7b:2e:04:d5:
ea:af:44:a7:8d:d9:ad:4b:ab:66:ed:e3:1e:ff:37:
e8:e3:30:5e:e4:03:f0:39:41:79:09:85:34:f3:bc:
07:80:20:59:5e:94:ba:27:4b:4e:06:30:0c:a4:4e:
83:c8:66:80:b9:78:ee:bf:11:b1:27:36:68:02:3b:
63:de:06:12:64:54:7e:80:2c:62:3e:2f:a6:d0:7d:
fd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D3:03:2E:29:EF:D5:2D:E8:44:B4:8A:ED:F9:0D:95:0A:F7:7E:73
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c3:fb:c3:1f:22:32:9d:39:0b:35:dd:08:ed:76:04:a1:10:
86:17:73:76:59:06:f0:23:d2:45:38:0a:a2:d7:ee:88:7c:c0:
b0:95:e3:b8:c7:2c:f5:c0:46:86:da:c0:5f:ac:d7:12:d3:e1:
bb:fa:1c:83:25:7b:20:25:2d:ee:c4:c5:e6:6a:50:2d:43:14:
b4:95:46:f8:a2:b6:78:d7:be:18:cd:a2:cd:c1:8f:cb:25:0f:
e2:61:19:ea:1d:4a:0d:3b:6c:3a:fd:18:93:f0:01:c8:08:00:
0e:7f:d2:7b:18:f4:e1:c6:fe:6d:cb:7f:f6:6f:90:1c:8a:05:
f1:fb:61:71:5b:d8:80:0c:62:ee:26:45:46:dd:17:ab:51:ef:
b6:1b:fb:32:7e:0b:2b:ca:a7:99:9d:bd:bf:7f:cf:3a:6e:e2:
8f:64:c7:88:2b:63:9d:ca:5f:71:9a:f1:be:98:53:c5:5c:c8:
8b:18:9d:c6:74:3f:21:7d:6e:cc:85:ca:85:fd:58:c8:01:f4:
06:76:f6:ce:a0:9a:2c:ba:a9:aa:90:83:62:54:13:9e:96:64:
27:92:b0:fd:14:4b:f4:7c:53:46:15:ba:82:d6:62:e3:4f:a3:
0e:1d:87:5d:1f:4f:95:fe:3f:50:fa:ba:13:1d:b9:72:4d:32:
9e:53:f1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:36 2025 by rpki-client