Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
File: YJDN0x06cdoc5KS9hfGYfjyk6vo.mft (raw, json)
Hash identifier: CvRX1g5DWHEMMYV4tjSJdITvQRnj1JdnRQiV4zy6sVo=
Subject key identifier: B9:D0:83:48:23:B0:8B:FD:9D:79:AC:4A:41:55:85:07:31:11:98:45
Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Certificate issuer: /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Certificate serial: 0194BCAA0B3DF60B325E2BF91F5879970E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
Manifest number: 0C4B
Signing time: Fri 31 Jan 2025 14:00:48 +0000
Manifest this update: Fri 31 Jan 2025 14:00:48 +0000
Manifest next update: Sat 01 Feb 2025 14:00:48 +0000
Files and hashes: 1: YJDN0x06cdoc5KS9hfGYfjyk6vo.crl (hash: SI/h6KjNfH/GTBtlQlVaxoDtTBGAlAtA5cIg26RhsU8=)
2: ffPjrVVu7lFrIrT7aSEeaO2AX6Y.roa (hash: 6A8IWQ2G3JPXavMyiGoa9Wq0l3UDM2Dw7jgy8bn/B9E=)
3: kIZJFU9FE0sowBjI7e7IPS7NRgU.roa (hash: 9Wc+e5T27oPhVr20geXtNISFlzFCv5eieNsW873OfKo=)
4: pDSqiruHTrt5wT6tXenOPgXVrZ8.roa (hash: dRSuxcEHLCbEbcETL0Q2NrXwBwARtdUXwOtoy1/PE/8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0b:3d:f6:0b:32:5e:2b:f9:1f:58:79:97:0e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Validity
Not Before: Jan 31 14:00:48 2025 GMT
Not After : Feb 1 14:00:48 2025 GMT
Subject: CN=b9d0834823b08bfd9d79ac4a4155850731119845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:27:9b:01:64:44:e0:ec:bb:dd:76:d7:93:6a:
24:0a:b0:bf:05:0d:e6:3f:63:40:44:99:ee:f5:fd:
60:2b:29:71:21:3d:b3:7f:4f:a0:55:3c:16:13:13:
35:63:c5:4f:70:5d:4a:a0:a2:40:56:f0:5b:54:9f:
46:26:f8:63:66:52:fb:b9:1f:b5:00:61:d1:e5:9a:
b9:f5:60:b8:f5:00:b3:08:03:f1:c7:71:64:9c:24:
f3:30:d3:15:b9:a4:a4:e5:9a:21:6a:70:85:a5:e7:
d5:02:fb:d2:d8:f9:ed:9a:20:1d:c5:29:9c:7a:b1:
9c:ed:89:0b:91:19:df:37:17:41:f3:57:d2:c1:ff:
ab:a9:76:ca:56:19:89:02:ae:d1:a9:f8:76:03:1d:
3f:7e:eb:d4:78:fa:a5:58:52:fc:df:66:2d:ca:23:
be:72:7a:07:dd:e7:49:4f:9c:40:05:c2:c5:e0:43:
07:b7:51:b5:dc:5c:dc:03:6b:3f:d4:10:f0:77:4f:
37:a4:55:2f:0b:f3:9e:f2:8b:9d:cd:7b:82:46:6c:
1e:02:89:cb:42:57:4b:50:9c:79:3c:8e:bf:41:d2:
a4:28:ef:9c:27:11:bf:7a:b5:8b:ef:f9:d5:de:aa:
9c:cc:1f:dc:9a:1a:3e:59:bb:d4:38:02:66:4d:4e:
3d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D0:83:48:23:B0:8B:FD:9D:79:AC:4A:41:55:85:07:31:11:98:45
X509v3 Authority Key Identifier:
keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:76:1f:b5:9b:ac:e0:fe:57:bb:72:0d:15:8e:4e:08:ad:a3:
b3:64:0a:1f:0d:ed:57:8d:13:75:d6:67:fb:c7:a4:0e:cc:4e:
ec:47:cb:3c:c9:e0:32:44:e8:1c:c4:40:83:a0:0f:9b:5a:77:
35:66:0e:0b:ff:48:f7:48:13:90:f0:07:b6:e0:cb:be:e4:ed:
76:5b:d5:a8:e4:38:11:55:9b:23:5d:10:74:7b:ae:fa:a8:d1:
88:40:dd:ef:0f:5c:55:e0:1b:c8:1f:73:2d:03:90:2c:21:31:
73:d6:7d:12:df:37:cc:2a:1b:ff:2e:0a:53:f4:b1:0a:c5:f6:
ec:1f:f9:bd:05:84:36:80:e8:dd:af:5e:c7:11:8c:6a:b3:e9:
5b:c3:6f:7b:0b:ab:02:da:cc:52:be:1b:c9:fd:00:23:17:c0:
b3:64:d3:d1:a9:4a:7e:f3:66:c2:24:3d:31:cf:68:7a:d1:c4:
66:8f:e7:96:15:a3:fb:a8:fa:3f:8f:fc:3d:3c:1d:9b:57:03:
68:c6:06:9f:5c:16:6d:1e:1e:f0:0c:28:ee:95:8d:7b:2a:bf:
4f:a3:e1:ad:9a:f2:48:3c:0b:9a:17:17:14:cc:3f:a6:c4:31:
ff:97:91:39:9b:5f:57:36:60:5d:a2:f6:3c:64:01:8e:83:9d:
3c:70:f7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:39 2025 by rpki-client