Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
File: YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft (raw, json)
Hash identifier: nxztk5LygKFg+EPu/UrrnErA1O57TsdttvrHbmIDhSU=
Subject key identifier: B1:94:76:C1:15:FA:AF:61:D2:F2:2D:E7:5F:79:9C:A1:CD:F7:A4:C1
Authority key identifier: 60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
Certificate issuer: /CN=602be661e57c14659a608e9f6be605d6250047fc
Certificate serial: 0194BC3C7B5DF01B6C4C542E54C2C4C0B1A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
Manifest number: 0EBA
Signing time: Fri 31 Jan 2025 12:01:07 +0000
Manifest this update: Fri 31 Jan 2025 12:01:07 +0000
Manifest next update: Sat 01 Feb 2025 12:01:07 +0000
Files and hashes: 1: QQ6vjhCR2yyTREcRxQKVvyzivi8.roa (hash: 7L16FIPuAoIWTe7eg7gWhNFlOXbBacL341K5d1WI9xc=)
2: SeVyC3Up3eapGFgVMyNwVWT064M.roa (hash: WlXh9oaUv4z0gJQkT7t6JIoyywN2OloN8qKW62HKTds=)
3: YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl (hash: aGJCVVXkkCHBsI9zurTNNxvqHtRrlO06mYjFyjiuibU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7b:5d:f0:1b:6c:4c:54:2e:54:c2:c4:c0:b1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602be661e57c14659a608e9f6be605d6250047fc
Validity
Not Before: Jan 31 12:01:07 2025 GMT
Not After : Feb 1 12:01:07 2025 GMT
Subject: CN=b19476c115faaf61d2f22de75f799ca1cdf7a4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:14:70:63:87:33:52:a5:56:b7:6a:a5:5f:6f:
68:6b:f8:00:ea:c9:8f:cc:93:40:97:51:97:5a:58:
15:1f:06:a0:52:bd:16:31:23:5b:1a:1b:3e:6c:14:
07:4f:ae:5d:7d:46:f2:b2:ec:d7:d3:2f:2b:3c:3f:
b2:9e:30:c4:55:68:ea:24:fb:d1:1a:f1:99:5c:37:
c5:c1:f9:8f:2b:4c:c2:64:17:1a:4f:3f:43:c1:84:
75:6c:2b:1b:58:9f:d4:cd:9e:ae:0a:0b:9f:7b:90:
36:03:ea:e9:a3:55:61:2b:d9:26:cd:66:7e:d9:aa:
cb:1f:e8:3f:6e:3b:1a:1d:d4:62:39:6c:40:d6:89:
e1:13:65:20:99:6f:00:45:c4:2f:80:f1:74:bd:5c:
a9:ed:e8:73:5d:3f:3d:47:9b:c7:54:a4:82:cf:04:
78:5f:e2:9f:2a:d8:48:1a:c7:e2:ae:67:2c:92:28:
21:d5:30:2b:9d:09:84:c8:0c:76:fc:f7:50:67:b1:
45:2b:ab:44:09:bb:b1:18:55:4c:7c:7f:75:3c:64:
37:d2:f5:79:97:1c:ec:4c:94:20:fe:cc:70:98:d7:
0a:f9:1b:93:23:5c:a0:0b:07:8c:e8:79:2c:66:7f:
f9:9c:93:a4:9c:f9:a0:14:9a:93:f6:82:b3:7f:90:
0b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:94:76:C1:15:FA:AF:61:D2:F2:2D:E7:5F:79:9C:A1:CD:F7:A4:C1
X509v3 Authority Key Identifier:
keyid:60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4c:3e:91:fe:14:03:ba:ca:af:ae:c7:03:41:99:63:7d:ad:
33:25:ed:65:61:2d:90:32:2d:1a:b2:bb:09:f2:5f:72:ad:94:
0c:93:f2:77:c6:b6:04:3d:78:03:7a:c8:e3:7b:e7:3d:3c:7b:
51:aa:44:c9:02:9d:b3:89:fd:f0:c2:7f:14:e5:b9:07:a0:61:
a8:3d:70:2b:e9:f0:5c:8b:5b:e4:da:f1:69:7c:d9:3c:33:a1:
fe:e9:e0:d8:ca:fe:0f:94:18:82:c7:dc:23:1f:13:34:45:ff:
e7:a9:2f:d0:f9:c0:5b:73:5a:14:48:88:bb:46:92:fe:06:c7:
e7:cb:a0:2d:4b:ab:68:37:bd:6a:0c:96:1a:ec:b6:0d:b8:03:
ca:fd:8b:e7:ed:5c:85:d2:1a:b2:59:9a:ed:f8:25:36:19:07:
f5:3f:0d:19:e6:b7:bd:cc:0f:11:00:2c:c1:53:c6:fb:28:69:
8f:de:ec:f6:b0:c5:08:46:33:cc:76:55:22:b3:34:3f:42:38:
61:bd:4f:35:ad:2e:c2:b6:16:2f:33:19:7c:f6:6a:f2:19:17:
c3:f9:63:f4:0d:d9:5e:1e:f5:00:bb:c5:3c:70:61:a9:43:46:
79:f1:44:9a:ce:48:4b:9e:d2:e4:ec:79:e5:6f:68:e2:56:c3:
92:c3:b7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:34:34 2025 by rpki-client