Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
File: YbU0Q3UDZogVrdk80X0K0-GxqHc.mft (raw, json)
Hash identifier: SvLTmoFQr4DGSv4EXfzi3RL30BKem0fn6/GlUtv3XbQ=
Subject key identifier: 19:28:FB:B5:6A:63:38:60:70:0F:65:CC:8D:C7:C9:0E:93:7C:E2:6C
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Certificate issuer: /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial: 0194BC7316EDA35A7D16F86BFFBD27541DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
Manifest number: 143E
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: Hs5OpoVTxSJfvS3erDXXhGQXJSE.roa (hash: ETk/+dQR/qhcGpGtYBL6fSkfntPwX1tHoXTuoqNreRs=)
2: YbU0Q3UDZogVrdk80X0K0-GxqHc.crl (hash: sDVICo6+Qp6Ul0ntgVfPrJqYu6bxpf01r8Zz8VOgGkA=)
3: cRbQbZI4caSihSJdxBwTOdI7jHI.roa (hash: l064fVVkmmooFHUiz4jiDmBf7OxJUiTNePDan7lSIBE=)
4: ct4uh4Dvn38kuKb2J9OedNnfBrQ.roa (hash: nZxVoJ4prQOuIIhd7SEgU19Z8RQI5zRlz6rYzsDEzRI=)
5: u7siAwXzbgFTEGp6PKjrdqf7Z4A.roa (hash: vJGRmjZ9RvsYFu3lwU4eezlqzVwLgmj9/3K2yZjY284=)
6: y5D4TaXJLkrfa4Of0NlhAIHZfQY.roa (hash: IeCyxZUbWUBk/m+unrT9oFimJ4vs3IvgUDAcRXAQ5dA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:16:ed:a3:5a:7d:16:f8:6b:ff:bd:27:54:1d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=1928fbb56a633860700f65cc8dc7c90e937ce26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:df:09:8d:41:69:b2:d9:2f:76:3d:83:98:da:
3a:9d:04:a9:e6:df:05:16:cc:b9:ab:ae:9a:03:da:
39:60:a1:9b:b5:f8:5b:e9:15:ee:cc:fe:2e:ca:ff:
a4:5f:f4:f3:8b:de:de:25:86:41:ad:48:26:c5:d7:
a0:8d:f0:4b:14:f9:f0:4a:e2:3f:57:61:0b:52:72:
df:a3:3e:54:93:cd:6d:0b:d4:79:52:f7:a3:1c:9d:
14:db:8a:67:d6:8d:43:9b:b3:3b:9d:26:6d:d6:c5:
21:f1:ef:b1:1d:6e:a9:7b:4d:64:92:b7:74:37:1d:
1d:3b:7e:de:5f:7e:49:00:15:06:57:0e:44:88:6b:
3b:58:16:9d:2e:67:fc:d2:52:07:e8:8b:35:3e:93:
47:c7:be:aa:6e:20:b4:77:9e:a3:7a:86:59:59:a6:
2f:b6:44:c1:7c:99:ff:b3:b3:20:46:88:2f:dc:7b:
04:9f:57:f0:e6:aa:67:a0:b2:15:16:76:12:74:ba:
b4:67:2b:5a:a8:b1:53:70:d9:f8:0b:67:d1:76:ab:
6c:be:0f:9f:00:58:37:e8:f8:66:5a:eb:cd:30:cd:
2e:4d:c0:5f:a7:aa:af:81:42:9a:da:e3:23:87:42:
53:27:98:4c:07:e6:0b:ee:91:85:75:a0:34:ac:5b:
fe:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:28:FB:B5:6A:63:38:60:70:0F:65:CC:8D:C7:C9:0E:93:7C:E2:6C
X509v3 Authority Key Identifier:
keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:81:70:6c:9a:28:f7:31:a4:e3:94:c6:a2:67:1d:26:4d:a5:
02:89:a5:1a:cf:a9:c4:ec:06:45:32:eb:f1:13:0d:ba:0f:c7:
cb:f3:8d:eb:4d:e2:4d:29:ef:cb:9a:7d:f1:a5:3d:a2:41:5b:
57:59:00:df:e9:91:1c:d5:3c:f7:c8:42:8f:ca:eb:3a:a7:eb:
f6:20:aa:b1:b3:38:c8:6f:b7:2a:8c:ea:7b:75:54:eb:5b:f1:
97:6e:2f:03:ed:4b:d5:72:e1:77:30:7f:32:32:27:4c:1a:06:
8b:b1:3e:94:60:60:a5:c0:01:94:3b:a8:0a:3c:1e:b5:99:ad:
5b:db:58:1f:09:f7:61:59:e1:a0:bf:d3:7c:bb:83:4a:c0:7d:
0f:9c:85:9e:56:f2:a6:d6:88:56:75:05:7f:13:54:b1:dd:7d:
d1:69:44:ec:e7:46:0a:c3:1b:6a:d5:f4:a5:80:16:aa:c8:79:
d6:4a:89:8e:34:36:7b:1d:23:c0:45:e4:97:7f:0e:a5:24:35:
97:0f:45:e4:64:cb:8e:a3:25:41:eb:cb:e7:b0:e2:54:5a:dd:
53:d0:a4:be:f7:53:09:f8:0c:f7:76:8b:62:7b:70:1f:66:f1:
13:4a:1e:26:0f:fb:79:73:be:13:64:31:5a:2d:13:2d:51:3c:
e6:c6:a6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:11:19 2025 by rpki-client