Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
File: YAG5U8a-H5GDHWilwBFcIODNf5o.mft (raw, json)
Hash identifier: 7C16CeWN4jdqBnvwvqbW3bHxPzQ5CzUlAFLmzUIjjqg=
Subject key identifier: CD:91:67:B6:D2:E0:7B:83:9E:8E:B9:3D:6A:FD:5F:AE:AC:55:68:84
Authority key identifier: 60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A
Certificate issuer: /CN=6001b953c6be1f91831d68a5c0115c20e0cd7f9a
Certificate serial: 0194BD17833F9A29513095B75A79EAAB3C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
Manifest number: 040E
Signing time: Fri 31 Jan 2025 16:00:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 16:00:22 +0000
Files and hashes: 1: QQlxlfhA9BwLpxAQMkShfHqNuQ8.roa (hash: J1jtN5BQZROl/8dEYO5qeCL3b90fBYd6l0TNzemkVxs=)
2: YAG5U8a-H5GDHWilwBFcIODNf5o.crl (hash: 2l2tbPhWZY3l86b0DzDVCrsd6Yfd7kPp253Cw1VlkNw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:83:3f:9a:29:51:30:95:b7:5a:79:ea:ab:3c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6001b953c6be1f91831d68a5c0115c20e0cd7f9a
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 16:00:22 2025 GMT
Subject: CN=cd9167b6d2e07b839e8eb93d6afd5faeac556884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:f7:7c:5f:44:84:7a:36:5b:4f:e4:45:4c:
ea:93:36:e4:9c:9f:b2:55:37:6e:d8:1d:d0:30:dd:
ad:d2:04:07:e4:8c:22:18:33:58:0f:50:46:61:67:
87:b9:02:fe:ba:5a:0d:a6:da:fe:00:eb:e6:aa:64:
14:38:5d:9b:11:16:a2:3f:bf:72:c0:cb:dd:f1:8d:
5b:bc:c2:64:4c:59:cb:bf:2d:02:ea:f2:97:5d:1f:
af:8e:fe:6f:33:61:0f:89:ef:80:70:ab:80:fd:2f:
38:78:c0:40:ee:0c:e8:c5:ee:cb:2d:74:02:ef:a1:
13:68:46:5a:31:c6:7e:4b:ce:e9:55:21:e7:ab:04:
52:7e:fb:8a:b9:55:ec:78:29:3a:83:18:fa:4a:d9:
30:a6:33:a8:dd:8a:7e:07:b8:ce:69:42:7c:fe:52:
8f:8c:fe:50:1e:a6:77:95:26:77:2f:92:a6:f1:dc:
59:f0:14:ea:67:7b:df:10:15:58:c5:53:db:6c:97:
21:e5:9f:ff:bc:9f:b2:a0:ab:36:40:92:df:73:17:
74:de:f7:cc:1f:a0:c4:24:b8:c9:df:e7:32:aa:f8:
1d:30:97:66:63:72:76:7f:23:b5:d6:66:b0:ce:6f:
6c:b3:f2:af:df:b5:38:38:60:28:1e:03:fb:9b:68:
b6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:91:67:B6:D2:E0:7B:83:9E:8E:B9:3D:6A:FD:5F:AE:AC:55:68:84
X509v3 Authority Key Identifier:
keyid:60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0f:72:6c:a4:b2:b9:46:60:53:65:37:27:a7:83:a1:4e:94:
22:e5:e4:06:ca:c8:92:ee:ac:a2:37:2d:57:d8:74:ea:f9:58:
96:6d:30:51:96:42:3d:6a:6d:8a:0b:90:e3:a4:c2:a5:70:98:
b1:47:06:99:61:e7:f2:fe:c8:fd:b0:da:94:b2:99:f1:4f:20:
88:3c:e6:08:94:68:42:e1:66:97:fe:74:9d:69:fe:2f:d3:b6:
41:79:02:4e:98:fb:b2:b1:97:1c:ac:39:bd:ba:66:80:70:a5:
95:34:13:c3:23:da:75:3d:7d:ba:d4:d4:80:db:24:70:e3:0c:
5d:33:ff:f0:88:d8:a6:a5:ba:a2:e7:88:06:9d:6b:ce:3e:1b:
08:da:c0:88:30:57:e3:fc:d7:eb:35:10:ea:3e:c4:ac:f1:be:
74:f0:ac:51:72:e8:a3:58:b4:06:81:e5:30:6a:76:c2:bb:87:
1d:38:5b:9b:da:96:c7:b9:00:fd:ea:a8:cf:90:f1:50:d7:21:
87:22:12:ac:d9:92:0c:25:ec:f4:a2:14:2c:89:ec:26:e7:24:
d3:00:86:df:27:b8:6c:99:c7:29:57:eb:ec:fe:db:86:04:2b:
ec:76:15:c6:55:37:14:5d:8b:71:f2:74:71:5f:50:53:86:6c:
a9:cc:23:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:19 2025 by rpki-client