Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
File: YYzEbXHnhIl4SIlh17UauhVB88Q.mft (raw, json)
Hash identifier: 23zjPlaeM0j5vk/FkO0Mr0P1YZBp0DwBLTtnr7qNFrs=
Subject key identifier: F1:97:38:83:28:76:7E:E4:1C:98:DD:D8:0B:97:10:13:02:4E:FF:58
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Certificate issuer: /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial: 0194BC3C2F15011C21F3B83FB326CE6D3784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
Manifest number: 0322
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: YYzEbXHnhIl4SIlh17UauhVB88Q.crl (hash: GE003O96hNnXzHIKnn5xqD1q42jws5ANLYKum/N60aQ=)
2: dc1575_CPynJfqSa-Ypn826PKUQ.roa (hash: 2/guOvEH0tRb/GtKMuhbCouIiIldpZn6RRaA4Jccq9s=)
3: isEuNe0uv1QAE5oG1f-itxDV0b0.roa (hash: yLEdK4lvVPQhOBBgi/fcG1RBw3EV7WEriyimfko4o3A=)
4: lvN2WOPvV5KHC8ZyAeDe5V2H9oc.roa (hash: Nh7UeQS8f90rjPYbwZZwjcnHax4rlbcgMRh3GqnO0aQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2f:15:01:1c:21:f3:b8:3f:b3:26:ce:6d:37:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=f197388328767ee41c98ddd80b971013024eff58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b1:17:9c:14:de:1b:09:89:2b:0d:bc:7f:d9:
bc:37:1d:fe:c4:63:40:ac:87:2c:9d:d6:12:72:25:
30:8f:68:56:88:67:75:64:75:bf:86:b0:bb:2b:97:
91:b3:7a:34:f5:41:50:77:ad:df:e2:c8:93:f1:f9:
9c:c5:a9:75:31:f9:4c:42:6f:a6:2b:4d:f3:d3:29:
c2:9e:25:47:a5:77:0c:ff:52:05:35:90:21:2e:84:
50:f1:11:fb:4b:6d:ee:6a:1d:20:45:ee:66:8b:e9:
70:12:72:db:a6:33:95:12:35:cc:30:5e:0c:05:23:
f5:b9:ff:49:4b:8d:1e:93:56:19:14:fc:3b:ac:5b:
0d:77:8a:3a:0f:6d:61:df:82:45:57:c5:52:f3:c3:
7b:55:b2:7a:ab:96:0c:e7:ff:dc:c4:f7:7f:64:49:
d2:c2:78:4c:2f:30:89:58:29:34:9a:86:45:a3:aa:
5e:28:fc:7f:31:70:d6:48:5b:2d:38:5b:d8:6a:e3:
99:e8:d7:54:ab:1b:c6:ac:25:5a:fb:e3:f9:03:3b:
37:04:de:15:c1:c0:bb:48:a0:24:b2:c5:2c:2f:64:
c5:99:bf:44:28:e0:9b:59:be:3a:af:93:a6:6c:ab:
bd:27:da:1e:27:37:1e:56:14:f3:cc:0b:e6:2d:31:
eb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:97:38:83:28:76:7E:E4:1C:98:DD:D8:0B:97:10:13:02:4E:FF:58
X509v3 Authority Key Identifier:
keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:80:78:53:01:5d:a7:41:d5:d4:ba:71:43:a5:93:0a:4c:0a:
50:ac:2d:c5:45:ba:d7:8d:4d:ad:1c:cd:8e:5f:ab:77:9c:c2:
75:a4:89:2c:e2:c8:9f:63:6e:1a:0c:af:76:28:f1:ca:6c:0c:
ea:d5:64:b6:e1:7e:b1:bd:43:28:1d:9a:25:18:92:9d:8d:76:
4b:7b:2a:0a:9c:be:b9:36:1f:3b:83:ac:a7:46:83:01:23:63:
3f:fa:20:47:76:20:af:10:83:ab:a0:35:56:03:b8:ae:52:f4:
a4:c3:c5:e3:e6:eb:54:b4:8d:d6:63:85:d8:11:d5:3b:e2:ef:
48:4e:d4:78:0c:20:4c:09:b4:30:22:5d:76:b4:6d:90:29:c5:
c4:93:fe:d4:68:20:db:93:14:ff:15:e8:16:21:ef:fd:97:3a:
69:57:69:de:f0:d3:2e:9b:8f:82:81:14:e5:25:31:cc:89:7f:
b8:26:06:27:d9:2a:62:3e:65:f2:d5:f1:31:b0:21:aa:87:49:
85:4d:03:23:f4:34:fc:d6:72:21:d3:23:2e:82:d6:cd:17:98:
c4:9b:b3:3c:2c:d5:42:be:9a:8e:fd:98:37:dc:b9:4e:e5:69:
e4:e3:0b:47:f8:44:4e:15:99:d5:4a:c6:b7:1c:25:d8:8f:96:
47:9d:14:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:32 2025 by rpki-client