Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.mft
File: YJEWCYTLyZHrycoKhXAH0fLBGi0.mft (raw, json)
Hash identifier: S6olPJvRXh+bnTNMi+C8SxxnADhprwUAnUKjV2jlNX4=
Subject key identifier: 9F:BF:BE:53:5E:2F:CA:20:55:00:12:AC:12:78:23:AD:5A:DC:28:81
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 0195EE057599C58F35AB76A2D777B4615614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.mft
Manifest number: 027E
Signing time: Mon 31 Mar 2025 21:04:49 +0000
Manifest this update: Mon 31 Mar 2025 21:04:49 +0000
Manifest next update: Tue 01 Apr 2025 21:04:49 +0000
Files and hashes: 1: JpoCGUNCz7qVphj4bIf-RckNokE.roa (hash: AbS0PrZTFX3CuHaQDDT+J/LHOGSSh9zm6/sI/fl4iv4=)
2: QSi-Kx2JbO-OjQtiFOkVmp0_fhk.roa (hash: YT86ayCkJpdHKqr/FXeJHI0T7+jnwOUJlWcGkvUNd7s=)
3: YJEWCYTLyZHrycoKhXAH0fLBGi0.crl (hash: WWTW7TNmLsd8pP+610bWranRqegJimvI/8Jv86q4St4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ee:05:75:99:c5:8f:35:ab:76:a2:d7:77:b4:61:56:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Mar 31 21:04:49 2025 GMT
Not After : Apr 1 21:04:49 2025 GMT
Subject: CN=9fbfbe535e2fca20550012ac127823ad5adc2881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f2:b1:a9:03:75:20:3b:33:91:3d:33:02:e8:
8f:e0:fc:d4:44:a6:c5:65:6f:0f:ff:af:c9:3f:86:
a0:01:2e:6b:79:e2:f4:fd:90:44:ce:ba:b6:fe:5e:
fd:cb:de:ee:7b:be:0a:26:25:0d:91:57:17:ba:d2:
6f:34:28:39:85:12:e7:65:07:4a:41:96:e9:98:3f:
2f:77:b3:bb:b8:d2:22:4d:2c:7d:0f:d4:de:73:1a:
2f:6b:99:ab:fa:ea:19:9f:d0:3b:ed:7f:86:d6:ea:
d2:05:e3:2a:68:b8:f0:3f:c9:2d:5e:c5:d2:fa:6f:
dd:99:d8:d1:a1:15:f5:70:e4:2b:06:0c:1e:b2:d6:
f8:bb:22:0b:de:66:91:46:49:8c:ab:72:a6:7f:83:
b0:ec:a7:78:9e:5c:a3:cf:65:24:d4:7b:50:f1:ba:
75:3e:de:56:ad:17:8b:2d:f1:98:03:21:74:e4:45:
05:b6:1e:7d:83:05:78:bf:95:4e:62:38:08:e9:ac:
b5:b5:ee:9e:2c:3e:70:b6:c6:b8:9d:10:17:bd:e5:
46:08:74:1f:a3:12:b6:ef:ca:5f:7d:e2:1d:a4:94:
b3:88:e8:ab:02:7a:1d:4b:45:1d:c2:34:38:e8:b9:
94:23:e2:47:25:46:e7:5b:a9:e4:07:62:87:d0:d6:
8c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BF:BE:53:5E:2F:CA:20:55:00:12:AC:12:78:23:AD:5A:DC:28:81
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:43:3c:0b:c0:93:0b:a7:45:55:b6:b9:22:ae:c1:ea:a0:34:
38:5d:4b:92:e5:a6:c9:ee:c4:07:a0:b0:19:44:98:7d:f4:d1:
98:29:91:ae:4c:f2:ab:87:ca:8d:f1:51:d9:f4:e6:18:e1:1c:
32:b0:d7:86:fb:19:b2:be:5f:c8:4e:db:2c:3d:40:cb:88:18:
b6:85:4b:85:02:6e:f7:0d:81:7f:fd:a2:86:51:46:aa:84:6e:
b4:8e:73:3f:d5:b6:ae:45:f2:a0:43:3f:4f:18:1d:2c:1f:8c:
93:74:92:e6:99:e8:d7:fd:b5:74:b2:c6:7e:3d:2c:4a:36:50:
4b:7c:1a:e9:79:24:5c:4f:e1:ec:01:8e:f4:5a:2b:4e:97:43:
e1:2f:66:46:7c:25:ee:a8:2c:e7:44:69:b1:a5:a6:35:d1:62:
3e:3c:46:38:bf:8e:14:1b:7c:99:42:61:05:2f:11:d5:72:a1:
95:36:23:eb:db:41:1c:9e:4e:f2:f3:f2:f5:de:23:de:cd:36:
0d:dc:4a:f2:03:51:56:65:c3:c6:85:8c:32:3a:17:57:78:91:
19:7e:be:32:61:69:da:7d:4d:85:4e:75:a8:ab:47:cb:94:ae:
47:86:85:3d:11:80:b5:42:34:b1:0c:b8:4f:9a:df:b3:10:4f:
85:43:2f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:49:13 2025 by rpki-client on console.sobornost.net