Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
File: YiJ2252bNM3sJiDHJX3FrUrrgy0.mft (raw, json)
Hash identifier: Ke5zBi1joPmYKYxbmpsIrEbp9NMFdkOFH8aeBokUPhs=
Subject key identifier: 21:AA:F3:26:62:05:6D:03:22:1F:B1:33:FA:79:40:BA:6A:3B:C2:A8
Authority key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
Certificate issuer: /CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Certificate serial: 0194BCE0620A3D4F4D1D75FE9412511476A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:09 +0000
Manifest this update: Fri 31 Jan 2025 15:00:09 +0000
Manifest next update: Sat 01 Feb 2025 15:00:09 +0000
Files and hashes: 1: AdTC8zOa60ytbUnvyWrYbz5T-Bk.roa (hash: 6Kj79eLeBWoibWni/+p7vdKVc5LjnECRVHDoIBU87h8=)
2: YiJ2252bNM3sJiDHJX3FrUrrgy0.crl (hash: faZAbTx0ZQqW0k82fktVQ9rPt5TXTfuc7/rIOKsAvn0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:62:0a:3d:4f:4d:1d:75:fe:94:12:51:14:76:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Validity
Not Before: Jan 31 15:00:09 2025 GMT
Not After : Feb 1 15:00:09 2025 GMT
Subject: CN=21aaf32662056d03221fb133fa7940ba6a3bc2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c3:a1:71:6e:15:fc:2c:75:2b:c1:0d:08:26:
fb:4d:6e:d1:7f:c1:cd:e8:14:bf:f8:72:5d:f7:b5:
88:82:d4:c6:4d:ab:02:0f:2a:69:24:37:02:ab:7b:
23:f1:46:69:dd:bb:7d:23:6a:e8:da:69:5b:56:c5:
99:25:98:32:c4:10:b8:29:25:3b:97:41:99:bc:9f:
06:1b:37:01:63:bd:de:b4:13:27:43:4f:f7:c6:ad:
94:c2:8b:ed:b1:f0:ed:41:c4:98:8d:d4:00:29:a8:
cf:79:a6:df:a8:8c:30:20:25:f2:20:d7:53:17:59:
90:4e:53:12:8a:67:80:cf:b1:54:f2:6d:50:ba:3b:
3f:38:c3:4c:18:0d:cd:47:64:76:36:32:d7:72:d5:
bd:67:f8:c8:25:e8:f8:10:66:f4:94:5b:73:9c:94:
65:ac:49:27:ac:17:69:3b:ac:e2:f3:bf:35:0f:de:
f9:be:4c:6c:e8:37:a7:98:09:46:83:6e:07:09:9c:
97:95:09:f7:1e:a9:11:6e:d4:8e:5a:5b:f9:e4:5d:
17:bb:f9:4f:82:b0:4f:81:3f:c7:fa:ba:a2:9e:7f:
78:43:60:1f:9c:66:bc:0a:50:9f:93:31:5d:68:25:
01:ba:98:60:85:be:8e:5c:bb:a6:56:57:ff:02:2e:
73:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AA:F3:26:62:05:6D:03:22:1F:B1:33:FA:79:40:BA:6A:3B:C2:A8
X509v3 Authority Key Identifier:
keyid:62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4a:fa:2c:81:a4:c9:86:b9:6f:64:87:64:32:8e:98:9d:51:
c5:9a:33:21:10:38:ba:63:c6:ab:82:2a:46:1b:43:56:48:f2:
f4:67:b3:46:2c:b2:e7:8f:a5:52:ca:17:86:75:fe:82:e7:04:
c4:48:ee:09:86:5c:7c:88:2f:f9:6d:5d:a7:2e:c5:a8:cd:cc:
89:a7:9a:21:c3:e9:c5:ab:1a:bf:b8:ae:eb:54:3d:fa:8f:9b:
3c:e4:19:93:5f:df:61:b2:48:f3:0b:d4:6e:7c:78:fc:2e:14:
6b:90:30:33:19:9a:57:a3:fc:30:41:78:0f:db:95:23:22:56:
08:5b:b5:f9:a2:c2:9a:13:10:28:3a:04:51:cf:68:cf:76:75:
bc:44:dc:c2:40:87:42:bb:61:49:c2:36:03:e3:78:6e:f4:4f:
13:e5:e2:6a:1d:14:38:fd:88:e0:d2:51:27:53:36:ef:e4:2c:
62:9c:9d:c9:11:07:75:82:e7:40:8b:22:2b:c9:69:0a:b2:0e:
93:0e:21:a3:f0:58:de:97:11:d4:28:d5:86:42:a8:9c:a6:10:
f1:77:76:98:47:f3:3d:7f:63:e7:e5:9c:e9:85:72:b4:2a:af:
e5:b5:7f:35:16:70:95:b6:a2:48:05:11:7a:29:7e:ad:80:cb:
ed:0e:58:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:34:59 2025 by rpki-client