Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
File: YT1eE3n-qdHQ9yVu0PyRg750_vs.mft (raw, json)
Hash identifier: xaYxqArZhwrITRnJcn9mbaduOp4IE/K0Fg3/KuIO0GA=
Subject key identifier: A0:49:25:D1:CD:50:DF:47:96:B8:22:27:45:64:AA:A1:26:3A:75:2C
Authority key identifier: 61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
Certificate issuer: /CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Certificate serial: 0194BD85315BFF9579E391DD26F213B5BBE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
Manifest number: 130A
Signing time: Fri 31 Jan 2025 18:00:10 +0000
Manifest this update: Fri 31 Jan 2025 18:00:10 +0000
Manifest next update: Sat 01 Feb 2025 18:00:10 +0000
Files and hashes: 1: YT1eE3n-qdHQ9yVu0PyRg750_vs.crl (hash: eL2KWBF58tD7+8DpVWneBNrVCRPM3HCgoH2+GGw5pHM=)
2: aC1zrHe-B2VbFWXSrCj-et8l1wo.roa (hash: dYtxir4EItimXJqX5OgUJO3jRJ2NZN3GpkUGUsB/28Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:31:5b:ff:95:79:e3:91:dd:26:f2:13:b5:bb:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Validity
Not Before: Jan 31 18:00:10 2025 GMT
Not After : Feb 1 18:00:10 2025 GMT
Subject: CN=a04925d1cd50df4796b822274564aaa1263a752c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:aa:e9:e1:f8:2f:18:91:80:87:74:dd:75:59:
35:a6:e5:50:c0:14:a1:72:cd:d5:28:a6:73:e8:ab:
f7:b0:a7:7b:7f:b9:43:bc:12:71:ae:10:22:96:e7:
24:a2:fe:42:6f:ba:e7:63:5f:bf:1a:9f:64:f7:de:
4a:84:6e:56:af:c4:1c:e1:8a:37:b3:98:01:a3:40:
02:c1:a5:f6:62:41:10:dc:f1:c3:fd:c3:59:f0:5c:
ca:a5:32:6c:ad:ea:8b:d4:d0:78:ad:2d:fc:6f:cc:
58:91:39:16:f2:dd:94:66:fc:81:c4:cf:31:af:d5:
92:cb:3b:c1:af:e8:0b:1a:33:74:25:8e:e4:94:8b:
ce:6b:29:44:df:4d:d0:01:93:8c:eb:84:12:91:a6:
31:b5:c5:9b:fb:5f:a5:df:76:15:3e:40:be:85:a7:
e8:01:4e:e1:a6:ff:f0:7e:29:d5:e7:38:2d:a1:28:
25:51:53:4f:ab:c8:8d:7d:fd:a7:1f:4f:c3:fa:0a:
3c:f1:83:94:d1:82:84:f8:f5:93:e6:ff:ad:ad:34:
45:13:bc:d5:07:38:76:f2:d9:fd:43:92:9b:ed:7b:
df:6c:b2:0a:03:16:e6:d3:04:6c:21:bc:20:b7:33:
1c:10:34:9a:8e:77:0a:99:27:ba:5d:ab:2a:5d:59:
ac:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:49:25:D1:CD:50:DF:47:96:B8:22:27:45:64:AA:A1:26:3A:75:2C
X509v3 Authority Key Identifier:
keyid:61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b8:94:eb:6a:7c:0c:0b:a0:46:92:00:fc:76:d6:94:26:92:
8f:ab:9d:8a:73:cb:fd:21:d6:8f:53:70:43:16:f8:d6:b7:f4:
4e:60:7b:ec:2a:b9:83:34:4a:d1:46:6b:ab:19:60:43:6f:e7:
cb:05:32:29:3b:07:77:95:84:e9:4f:cc:c1:2d:8b:92:3f:e0:
2f:f5:95:97:7f:4c:c1:cb:91:58:81:76:0f:ee:c9:97:b2:5f:
1b:e9:cd:d0:42:ea:54:2a:b7:02:4f:5f:e2:62:99:a9:b2:35:
b6:60:11:fe:ff:6d:57:0f:cc:e4:bf:4d:8e:04:9c:2f:04:8e:
f8:0c:7d:0c:0e:46:ee:0e:92:22:8a:62:eb:a1:74:e1:e4:77:
a9:0b:03:b1:f8:6a:cd:2e:76:53:3a:68:ec:ff:97:49:42:17:
97:31:6b:c2:59:59:33:d4:64:c6:ae:8e:be:02:66:16:9f:35:
27:2c:aa:89:ac:10:e9:8f:0a:79:4c:62:ff:57:c6:9a:a3:53:
62:58:13:a6:6b:cd:63:be:c7:f1:96:88:5a:8f:a9:b9:52:71:
79:56:d8:63:a2:52:f9:07:5b:8f:7c:99:ec:28:09:a1:7e:92:
e9:4e:11:10:00:f1:b9:ad:dd:d2:8c:da:0a:17:04:a0:cf:ee:
06:4b:c7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:58 2025 by rpki-client