Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
File: Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft (raw, json)
Hash identifier: MoTmx8f+sp6YJVb8Q8/s0AKLj6yz4OG7jC6l15gSUNI=
Subject key identifier: 88:53:CB:22:6B:B3:67:45:FC:85:65:62:90:3F:E6:66:6F:8A:63:6B
Authority key identifier: 62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53
Certificate issuer: /CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853
Certificate serial: 0194BCA969B6C00F1E2DFEC5DBB654C0CF41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:06 +0000
Manifest this update: Fri 31 Jan 2025 14:00:06 +0000
Manifest next update: Sat 01 Feb 2025 14:00:06 +0000
Files and hashes: 1: BLUnMEvzOCDdig3vAOJNkanKcVQ.roa (hash: FOxz1hyJdKlYisYef78m6hR6cwVT1BQH7/wecUVrCqc=)
2: Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl (hash: yUhLeLFyIUnqK03XZajRW7shJlToMxqXQCckh0A8y6Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:69:b6:c0:0f:1e:2d:fe:c5:db:b6:54:c0:cf:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853
Validity
Not Before: Jan 31 14:00:06 2025 GMT
Not After : Feb 1 14:00:06 2025 GMT
Subject: CN=8853cb226bb36745fc856562903fe6666f8a636b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:33:ac:b8:c6:1c:33:1a:ba:bb:52:2f:3e:bd:
27:6e:53:c3:4a:15:ea:7f:ae:dd:a6:59:a8:25:e1:
cf:78:d0:93:cf:ba:51:0a:5d:f4:56:0d:cf:9a:c2:
96:84:d2:24:e6:53:10:86:be:ab:c7:4d:fd:43:87:
ac:42:01:88:ed:3c:c7:5d:3b:12:52:16:80:ab:73:
fc:f7:0a:8c:40:b9:46:08:3a:e9:1c:33:25:7f:e0:
5a:49:e6:2b:54:50:9c:f1:ad:7c:e3:75:da:8c:72:
2a:e7:2e:79:14:b2:80:0c:c0:fd:fb:11:6b:a8:14:
0f:4d:d9:65:21:6e:a5:fe:60:4b:70:60:d5:fc:a2:
aa:d6:ef:4f:37:2c:d9:fa:f1:cd:6b:d5:b2:7c:8e:
aa:3c:33:16:95:d2:21:9b:83:ca:80:0b:80:32:7a:
67:bd:ac:8b:0f:16:ef:9e:06:9b:59:b6:b1:4b:03:
85:d5:a4:9a:f1:62:0d:4b:0b:66:31:34:03:d8:63:
ec:25:e3:e2:0e:6c:74:2b:62:c7:fc:d0:59:57:91:
4b:3a:35:11:fc:4e:1f:d4:42:65:f0:9b:36:c1:6d:
4b:e0:da:dc:91:7a:c5:8f:90:a6:c8:0a:97:52:3a:
2f:4a:56:c8:bf:7a:fa:a9:c3:a9:90:64:73:af:5e:
31:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:53:CB:22:6B:B3:67:45:FC:85:65:62:90:3F:E6:66:6F:8A:63:6B
X509v3 Authority Key Identifier:
keyid:62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:87:05:c6:56:d0:76:5a:8c:61:6e:76:c4:e7:42:01:77:6d:
12:cc:59:04:b0:38:ab:d6:e2:0f:52:ae:d6:39:35:67:3b:3b:
01:3a:1d:4f:ac:3b:33:70:ba:45:9b:04:3a:76:29:14:33:ae:
86:2b:66:65:8f:12:5f:6c:b4:90:ce:29:30:82:14:14:15:60:
e8:24:fa:b4:2d:2e:90:22:75:3a:24:ee:ce:bf:fb:b0:43:53:
52:8b:e0:ac:5e:30:0c:e4:a7:5a:cb:18:75:ae:b7:5c:c1:7b:
dd:01:91:02:e9:3b:b9:e3:d0:61:ca:db:de:1a:a7:37:87:86:
0d:d2:3c:39:6b:6d:9e:0e:6b:ed:2f:64:49:7b:f3:f1:1c:62:
1a:65:46:d0:ce:cc:43:24:69:25:de:34:af:4c:8d:fa:38:ef:
55:9e:3b:44:f6:01:ed:e6:c7:f0:fa:50:ec:9b:a8:9a:64:03:
f4:7b:fb:58:6a:20:6b:87:66:18:75:cb:a4:16:9a:b9:69:57:
77:20:5a:c7:e9:01:90:ba:42:f2:c1:fb:91:59:20:45:ea:90:
a1:c6:11:e3:49:27:ee:34:81:c4:b1:de:59:df:10:85:71:c2:
ac:e4:9c:c8:85:1b:1b:cc:d3:dc:8e:cc:c6:ac:72:d7:d8:24:
26:af:13:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:15:58 2025 by rpki-client