Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
File: YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft (raw, json)
Hash identifier: w88OX83m2cvsxFtwvzk2iJJ8t2v+6A/jL3CbP7MmIPI=
Subject key identifier: 4C:C7:94:CD:A5:DD:3B:5C:E7:C2:78:EA:5A:8E:F6:C3:6C:EE:08:7C
Authority key identifier: 61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC
Certificate issuer: /CN=6133ec1a240143dae111bb92d192dabf775d81ec
Certificate serial: 0194BC3C0FF6EB717CF64C54BC0D3140ED0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
Manifest number: 06D0
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: COcUW0x5kxM0ZoYaE6bjH_ilI5I.roa (hash: DiDBhNFDOT29doleyEuXM5Xz1UWaH+5+crJRRQCdBnI=)
2: YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl (hash: tZuFmYOtHRU+tN4wgus3l6ptqlu8L64O+lgMmlqiWfs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0f:f6:eb:71:7c:f6:4c:54:bc:0d:31:40:ed:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6133ec1a240143dae111bb92d192dabf775d81ec
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=4cc794cda5dd3b5ce7c278ea5a8ef6c36cee087c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4e:e0:21:15:93:ef:61:ff:6a:4d:5c:1f:2f:
ee:e6:9f:0a:6a:96:d9:be:aa:30:88:e8:d6:fb:49:
1b:fa:5c:67:20:5c:eb:47:89:f5:e2:70:18:c8:03:
10:61:bb:6c:8b:1e:84:54:c4:aa:6a:be:04:80:4c:
b7:ad:d4:eb:e7:81:71:0f:7c:ef:dc:a9:b9:68:aa:
b4:8a:0b:31:a6:02:19:09:26:45:59:aa:7f:ec:b2:
39:41:8d:a8:07:39:cf:ac:88:44:81:79:20:c7:66:
d2:ef:e0:34:11:4d:d7:f0:5b:41:e2:ff:c0:4b:e3:
78:08:7e:2f:53:56:99:7b:03:9e:13:fd:f2:01:1f:
31:9c:cf:fa:ff:2e:8b:04:6c:bf:c7:da:b3:26:71:
33:a8:43:f3:a8:75:69:47:fb:15:19:df:bb:08:1b:
62:fb:33:24:c1:e2:dd:5d:2d:80:4f:b4:7b:89:dc:
5e:e8:87:59:f0:1d:66:c2:0e:3d:75:8b:64:05:3f:
e9:cc:95:f9:01:1f:7f:5c:ad:20:fc:fa:0b:08:36:
9e:b3:60:c8:bc:4b:4c:fa:15:4b:fb:4e:9f:17:07:
4c:c5:63:59:90:ed:aa:61:66:68:be:1c:8e:6e:d0:
0c:1c:df:46:b0:b8:45:3e:25:79:c0:8f:fe:99:78:
21:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C7:94:CD:A5:DD:3B:5C:E7:C2:78:EA:5A:8E:F6:C3:6C:EE:08:7C
X509v3 Authority Key Identifier:
keyid:61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b7:91:96:87:ae:63:c7:40:ff:38:be:7f:76:77:b4:cd:58:
58:ee:96:41:d4:40:3a:3d:d6:93:c8:06:e9:2a:b7:cd:e2:05:
59:2d:53:73:8b:6f:96:5e:72:3b:46:91:00:eb:6d:8c:aa:9f:
1e:3b:2d:fd:f6:23:4d:07:70:bf:b6:5f:96:71:02:79:31:22:
ee:7e:64:39:cb:95:2c:9d:5e:88:b4:f6:ad:5e:8f:ce:3d:e0:
2a:ad:27:f1:35:99:d3:14:ff:fa:a7:de:fe:c9:77:43:39:9d:
ee:9c:65:e9:ef:dc:d6:cc:da:fd:b0:ee:07:82:31:5a:77:8d:
5b:e8:67:b9:8d:56:03:0c:89:65:5e:d0:e4:17:4f:07:ad:13:
56:9e:65:71:47:16:ec:a8:26:d0:93:aa:01:8c:03:79:52:c4:
11:05:d8:78:e1:13:db:46:1d:1f:b0:1c:12:99:22:06:8b:7b:
89:41:de:10:f8:91:68:08:d5:e6:38:b4:d6:26:c0:6c:fd:9e:
2e:f2:85:d4:c9:84:ba:7a:be:0c:bc:8e:46:42:b5:e6:d1:8c:
14:c2:9c:04:f8:31:36:7c:77:19:03:84:b7:c6:33:7a:2b:93:
2e:83:a3:17:99:1b:81:cb:34:e9:99:14:f3:4f:c4:2d:6d:2f:
38:e3:5b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:33:06 2025 by rpki-client