Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft
File: YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft (raw, json)
Hash identifier: V58msrXFS0hmSGnqRx/VDPxw4pkkh3LIwOnOgUKPXN8=
Subject key identifier: 67:B4:30:23:1B:B0:A0:F3:34:07:76:CE:33:E9:4C:10:7E:08:A4:09
Authority key identifier: 60:FB:55:E9:AE:26:32:CE:DE:FD:B5:55:99:52:1C:55:B8:D0:B1:21
Certificate issuer: /CN=60fb55e9ae2632cedefdb55599521c55b8d0b121
Certificate serial: 0194BC3C512DAE988B4C341385EC637B849E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPtV6a4mMs7e_bVVmVIcVbjQsSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft
Manifest number: 05A3
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: YPtV6a4mMs7e_bVVmVIcVbjQsSE.crl (hash: A7zmCLzfMcJqULYdw/fbjMh2Ka8bKuMXIKhfAWLhnsg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:51:2d:ae:98:8b:4c:34:13:85:ec:63:7b:84:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fb55e9ae2632cedefdb55599521c55b8d0b121
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=67b430231bb0a0f3340776ce33e94c107e08a409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:fe:d6:d1:69:16:be:2e:63:d9:7c:15:0c:
a6:2a:3d:2f:ea:3f:c7:28:9d:6a:48:27:b9:ad:21:
0b:e7:07:4b:78:05:34:33:84:33:42:72:08:50:a7:
85:b4:52:d9:cd:30:2a:a4:1f:b0:93:58:45:e2:bb:
5d:4c:a5:51:95:df:90:f9:7f:f2:f2:ba:52:8d:6a:
3c:66:f5:b2:1f:ee:40:3e:93:96:90:e2:5d:f1:79:
0d:5d:0b:2e:e5:2c:42:e9:af:04:8a:6e:10:36:03:
f0:2e:36:a4:f0:5a:94:a3:91:44:8c:a9:57:fe:07:
2d:fa:1f:dd:b1:d3:c0:55:d1:7b:fe:df:82:79:54:
21:ca:a9:ae:8a:b3:38:54:cb:09:25:29:73:91:db:
96:55:cf:f5:d7:b1:4e:f1:b5:9b:e9:fd:58:ac:99:
68:58:00:23:87:bd:32:d3:f9:45:1a:f4:68:14:65:
1a:9b:f6:68:b3:40:d1:47:19:f7:9e:92:8f:c0:35:
ff:ea:75:25:03:fd:97:bb:1c:f9:6a:da:1d:4c:d9:
88:19:a8:50:56:8c:98:54:67:bb:ad:3a:e0:3a:4c:
15:73:a8:14:a8:f4:c4:61:9c:67:36:a9:c7:aa:1a:
97:4d:0f:43:c3:b5:2b:f7:92:3d:a0:ca:72:ca:1a:
a4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B4:30:23:1B:B0:A0:F3:34:07:76:CE:33:E9:4C:10:7E:08:A4:09
X509v3 Authority Key Identifier:
keyid:60:FB:55:E9:AE:26:32:CE:DE:FD:B5:55:99:52:1C:55:B8:D0:B1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPtV6a4mMs7e_bVVmVIcVbjQsSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:9d:8f:f2:ac:2b:bc:f4:6d:2c:86:69:9d:eb:f9:25:28:74:
b1:ca:4e:4b:37:3b:48:c3:67:80:12:4c:16:43:b6:f5:78:a1:
d8:02:32:e0:f6:cc:9b:19:00:95:c3:c9:e2:12:52:c7:a2:3b:
92:d8:28:a1:03:a2:54:c4:e3:67:c0:2e:69:e1:9a:16:71:38:
bd:68:8c:66:b6:b4:10:a7:15:81:8f:4f:b3:35:51:d0:fd:79:
d5:57:4a:04:72:a8:cb:d2:ab:88:33:f4:bf:f0:77:30:f2:cb:
a4:0b:0e:b1:42:b1:4c:9f:cf:82:86:86:0c:32:8f:78:d2:5e:
14:c1:e1:15:78:92:7c:fc:17:7e:b8:ab:77:f3:b4:33:69:52:
cf:64:a4:b4:32:90:66:e3:83:59:b0:00:8f:ab:ac:61:5c:c7:
55:78:c7:0b:24:30:36:cc:e4:95:84:8d:1a:82:9d:31:9d:48:
fc:32:89:4a:13:e9:d5:fc:91:9a:ad:56:9f:e3:2a:8e:ad:2c:
b3:44:3a:ef:d4:a4:14:8c:3c:75:51:76:18:23:08:76:2f:82:
68:e5:d9:5a:db:9c:bc:a3:c1:36:79:2d:bc:7c:89:6b:42:4b:
d9:b4:6d:d0:e4:50:ec:e2:c3:46:44:df:fe:a1:fc:2d:5e:ea:
32:bf:ea:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:05:11 2025 by rpki-client