Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
File: YuJWVsULslT1gHfRuWbkdLFjR68.mft (raw, json)
Hash identifier: oEPRSAFyCuRhX498xN1oATdNU92cu31irzOppclFKIw=
Subject key identifier: CD:08:25:9A:93:CD:7B:31:59:30:8F:D3:32:22:E9:03:F4:5D:D9:DB
Authority key identifier: 62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
Certificate issuer: /CN=62e25656c50bb254f58077d1b966e474b16347af
Certificate serial: 0194BD4E907C511AEC8DC102AEBC7E949289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: 8gQzPchz9vCwdjVN_ZBPueH3G6Y.roa (hash: Z7w2/N0mbKOYhB3ua7HBgoWG65DoIXePIy8hWS+i+vg=)
2: YuJWVsULslT1gHfRuWbkdLFjR68.crl (hash: efxkkXNUzJWCyp2RhN5VNlTP7meQe/qoJnet5mzWUHY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:90:7c:51:1a:ec:8d:c1:02:ae:bc:7e:94:92:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e25656c50bb254f58077d1b966e474b16347af
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=cd08259a93cd7b3159308fd33222e903f45dd9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fd:a3:1d:cd:e1:b0:19:93:6b:6c:64:81:c6:
59:12:3e:ba:5d:89:c5:09:b3:2f:f8:08:2d:7d:50:
a3:e6:cd:ff:48:34:94:34:09:80:e5:94:ee:79:ff:
90:bb:82:4e:86:78:ac:16:1e:f3:06:65:7d:2c:64:
3b:12:80:8a:d6:86:69:64:2c:34:2e:b0:e8:96:48:
a6:72:8c:d1:fe:ff:bd:e9:99:c1:f3:16:fe:3d:7c:
02:80:83:64:a6:43:12:29:59:81:25:93:4a:d4:36:
85:49:af:ec:a9:74:13:56:08:8e:e3:f4:5d:2c:f5:
77:7b:07:5b:49:2c:54:41:c6:1c:15:e2:b4:c4:2d:
d8:f5:96:1b:f0:9f:7b:0b:b3:d1:69:ba:df:ab:27:
3a:59:cd:5c:ad:d1:bc:20:28:3f:70:5e:81:e5:0d:
63:9d:96:80:ab:39:d3:5d:f1:71:39:e9:b8:02:d0:
df:27:89:8b:1a:96:61:2c:68:57:26:31:e2:e5:a5:
35:88:b6:76:88:7b:1e:e9:76:0f:c8:39:3f:7b:4f:
89:f0:87:a6:5e:f4:84:79:1e:27:5d:e1:b2:a7:bf:
60:47:6c:0b:78:12:53:a5:ee:1d:ef:e7:7a:fe:be:
36:f3:2c:5a:bd:23:b1:d1:5f:3c:1a:2b:fe:cd:b3:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:08:25:9A:93:CD:7B:31:59:30:8F:D3:32:22:E9:03:F4:5D:D9:DB
X509v3 Authority Key Identifier:
keyid:62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:dd:cd:03:0d:01:a0:dd:31:df:64:0b:2d:44:75:74:5d:a8:
f7:46:fe:9c:a4:fb:c4:72:09:e3:5c:0e:50:39:4d:55:ef:85:
2f:d8:8b:46:14:25:6c:94:44:52:dc:6c:c6:4d:49:bc:46:14:
e9:db:04:87:18:0a:d2:ec:16:18:7b:7a:f7:2c:84:10:65:32:
81:cf:25:dc:f3:82:f6:07:70:d1:80:78:c0:f5:2e:5b:73:a7:
66:1f:b8:cb:f9:5e:b1:51:19:11:5b:bb:15:5e:5e:ab:44:4d:
62:6a:07:81:2f:d9:a9:3b:b3:9e:b0:62:d9:2d:4b:57:e5:99:
10:73:9a:9a:9d:b9:e3:fd:40:68:8f:4f:98:87:8f:b7:b7:8c:
5d:66:17:e0:ab:89:a2:e9:d1:37:e0:18:00:ce:c6:0d:f1:16:
e7:1d:1b:22:67:44:18:ac:a1:91:af:4f:73:7b:30:a4:36:2c:
6a:c2:68:50:7e:8f:ef:98:f6:bd:1c:f6:4f:ee:5e:49:ca:70:
6f:a4:5f:96:74:21:b0:8d:e0:4b:97:08:3c:e4:cd:99:e7:b7:
c8:03:00:26:3d:08:4f:bc:95:30:6c:70:90:b3:8a:38:c5:89:
a7:f9:06:15:11:f1:32:b6:82:cb:c0:4c:2c:1f:27:09:18:3e:
e3:40:50:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:29:11 2025 by rpki-client