Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
File: YxkpXTrafm6zKYRJYcqhACyqTYY.mft (raw, json)
Hash identifier: z1aNl6x8nR+N78R6ohEL3Az8w8nB32RVTqOkbD8wkL4=
Subject key identifier: D6:2B:23:8A:A2:63:C9:5A:B5:5B:95:E8:76:D1:2F:DD:F3:DE:56:0F
Authority key identifier: 63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86
Certificate issuer: /CN=6319295d3ada7e6eb329844961caa1002caa4d86
Certificate serial: 0194BCE0C8C38D5C72B2B7D36786CA4FA577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
Manifest number: 03D5
Signing time: Fri 31 Jan 2025 15:00:35 +0000
Manifest this update: Fri 31 Jan 2025 15:00:35 +0000
Manifest next update: Sat 01 Feb 2025 15:00:35 +0000
Files and hashes: 1: 86GrooClUl71gkQpid-FncZdZKU.roa (hash: zCT8Hn2EfMRZJ+CRruBga86mHz3WUzz8AipAIgNPJEo=)
2: YxkpXTrafm6zKYRJYcqhACyqTYY.crl (hash: M0l74Kf4+tnKY6HfYrb2ORFaRoiYTRnwZmYmwZftjF0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c8:c3:8d:5c:72:b2:b7:d3:67:86:ca:4f:a5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6319295d3ada7e6eb329844961caa1002caa4d86
Validity
Not Before: Jan 31 15:00:35 2025 GMT
Not After : Feb 1 15:00:35 2025 GMT
Subject: CN=d62b238aa263c95ab55b95e876d12fddf3de560f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:06:d1:9e:63:b0:fa:e9:f0:64:e1:47:9c:bd:
17:21:14:cd:4b:3f:eb:1d:0b:45:13:89:be:d5:18:
fc:a7:10:dd:ad:e6:54:0f:d6:e7:76:d5:c9:3b:d8:
3e:e2:08:50:bb:ff:47:6d:65:90:2a:7a:77:37:2b:
96:2e:76:bb:e6:74:15:2a:92:ea:8c:d0:b1:20:ff:
17:20:19:b7:80:be:c3:2d:7e:9f:74:85:84:d5:4d:
d6:bd:f1:ae:75:ef:68:c5:6e:d2:d6:8d:c2:bd:6c:
bc:0e:55:04:c0:41:34:51:84:15:cf:a9:e8:5b:39:
8f:0f:69:c6:65:90:fe:39:ce:5b:26:d1:72:40:d6:
3f:c0:14:ab:60:fb:f5:1e:7d:ca:9c:a2:a7:e8:44:
ef:a7:92:70:ee:52:36:f9:d3:af:24:58:ad:34:91:
af:96:11:7b:9b:6c:a7:9f:b3:17:ac:ce:5c:67:cc:
b5:a4:6f:57:dc:95:4b:ee:e6:ad:81:49:9e:fb:4d:
2b:09:48:14:3d:36:42:d3:c7:f3:9b:6d:cc:f1:93:
ad:c5:12:67:05:87:9e:4a:31:0e:82:c5:a8:71:04:
c5:fd:0a:42:27:61:d4:b9:b4:7c:6d:b6:40:be:bf:
31:63:7c:78:00:3f:a7:96:6c:70:8c:85:ea:79:24:
30:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2B:23:8A:A2:63:C9:5A:B5:5B:95:E8:76:D1:2F:DD:F3:DE:56:0F
X509v3 Authority Key Identifier:
keyid:63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9b:8e:19:73:10:c7:9d:f0:bb:72:1c:e0:80:e6:db:2d:2f:
30:b9:2d:b1:dc:ab:6f:c8:32:7b:cb:cd:66:c6:c6:c9:b9:25:
aa:16:9f:35:dc:70:5c:c1:9c:99:1a:9c:dd:b9:4d:24:2f:41:
e5:7d:59:a2:03:b6:6c:a9:c8:a6:01:50:07:58:63:d6:6f:24:
0c:0d:5c:93:34:9a:8a:34:1a:3a:d0:e1:00:00:37:9a:db:ba:
a5:1b:06:d2:86:13:03:65:6f:5b:bf:74:b6:26:2d:cc:11:dc:
0b:69:5f:73:ee:c8:ab:5c:80:0b:71:bf:c2:95:73:45:3b:13:
9b:ab:81:ee:73:4b:93:c9:c0:48:c9:a8:ec:75:d1:1a:8e:cb:
65:60:ed:54:fb:de:2c:d1:31:ea:b8:5a:78:dd:1a:31:78:6e:
59:11:ed:e0:42:99:cc:30:5c:ea:91:09:89:16:a2:f0:5f:1b:
20:82:68:79:f9:95:50:4a:66:e6:51:50:5b:0b:d1:f6:21:4a:
78:a1:40:c8:9a:0d:d1:05:e6:72:06:6a:a9:5f:b4:f5:a9:eb:
f1:8a:4e:f0:ed:f6:62:be:ac:4f:cb:6e:bc:be:e5:eb:95:00:
f8:51:6f:13:7d:7d:8c:bf:3c:d9:16:a4:e0:65:29:90:37:49:
25:68:04:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:34 2025 by rpki-client