Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier: 0J4YwCVTr3SycLCukq8ySG8t38OtufK8FfVK7oCPOaU=
Subject key identifier: F9:C2:7C:FC:D5:7B:E9:FF:3F:D1:FD:30:3E:5F:4F:C5:F2:6B:39:45
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 0194BCAA3E7A26FC3D42640A289A7FE6CCCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number: 0C26
Signing time: Fri 31 Jan 2025 14:01:01 +0000
Manifest this update: Fri 31 Jan 2025 14:01:01 +0000
Manifest next update: Sat 01 Feb 2025 14:01:01 +0000
Files and hashes: 1: CNe8Ce9LX6bIFoae7IEYInIJvX8.roa (hash: vAks/DifGuIDg8MpuhTecKF4JO7GCicanpj2dhKngMI=)
2: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: /25HXnG1pjiirkHhTmAA73Bstg/Vo0d4ee7ZwkoKMj4=)
3: nXfzcpDMArjxgb2F7qR75SrYmPY.roa (hash: 50wVvlHYuRdw/re5wFDGWVBuuEfzzC0RRb8vEvTcySU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3e:7a:26:fc:3d:42:64:0a:28:9a:7f:e6:cc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Jan 31 14:01:01 2025 GMT
Not After : Feb 1 14:01:01 2025 GMT
Subject: CN=f9c27cfcd57be9ff3fd1fd303e5f4fc5f26b3945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:60:92:fc:f6:a9:63:7a:70:dc:34:8e:27:72:
c5:59:09:8e:99:7a:fc:19:b1:3c:03:0a:01:29:9e:
6e:44:9a:7b:e3:76:66:66:55:aa:77:df:fd:4f:fc:
e7:51:eb:0b:34:f3:2b:3b:10:1c:e8:5c:1f:d8:60:
0c:f1:63:a7:fe:83:2a:c1:5b:9b:83:b2:09:b4:f6:
00:ea:6d:29:0f:e3:ca:f9:6a:a2:48:db:9c:09:14:
75:18:d6:c4:a3:94:64:62:03:44:b3:32:85:3e:3e:
8f:d3:12:eb:49:b7:25:3b:f2:9d:a8:e1:4f:e6:36:
4d:cb:da:8f:11:c0:c6:55:b0:2e:2b:8f:8d:b3:ce:
e7:77:c4:7d:ec:8f:44:0f:a6:03:04:44:25:a8:13:
c4:58:44:33:be:89:09:fa:0a:1e:8a:04:fa:42:bf:
f1:f6:49:1a:a1:89:f2:33:c5:ac:30:c6:4c:e0:c2:
9c:b9:01:e8:e9:ff:8b:df:a9:17:03:50:ba:23:3a:
6a:3b:75:21:c5:e8:ac:b7:99:0b:d3:5a:1e:89:f9:
d7:82:43:51:ad:38:a8:af:ad:a6:cf:ff:67:32:6d:
16:87:37:ae:92:fc:27:e2:af:e8:d8:53:94:42:ef:
23:8b:91:06:9d:b3:ed:92:eb:56:a0:8c:85:bf:f6:
14:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C2:7C:FC:D5:7B:E9:FF:3F:D1:FD:30:3E:5F:4F:C5:F2:6B:39:45
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:af:bc:89:81:3e:dc:6a:be:c0:d4:d9:e3:af:36:75:94:86:
58:fd:3f:ae:53:5e:29:81:01:ab:9e:89:bc:03:62:e8:39:04:
62:76:6c:1f:a8:73:2e:80:15:77:8e:b7:d6:33:39:a6:24:8d:
11:94:4d:7b:96:e5:8f:d2:b8:ed:0b:6b:2f:32:90:9d:1e:fe:
58:45:00:3c:86:d5:90:20:8d:a2:16:b1:67:3a:a2:90:34:9a:
24:e3:b7:3c:c7:ee:ee:a0:11:74:86:72:21:97:cf:10:50:ff:
bd:4a:88:ca:7d:b9:22:86:63:bc:71:4a:ac:73:6e:40:d8:26:
e4:e7:d8:da:4d:d1:4e:14:92:a6:b8:f8:a5:48:fe:81:04:bf:
c7:0c:88:9c:53:a2:ef:ac:c9:9a:5b:d6:ed:24:ca:e3:45:3d:
db:26:7e:57:82:dc:be:7d:f7:45:de:01:1d:ee:69:f3:6f:1a:
6c:77:7d:42:57:db:c0:73:9e:1e:d2:70:23:59:49:55:fe:00:
d1:31:a7:e0:eb:70:24:7b:36:87:ad:41:6c:f3:1d:24:20:10:
3b:78:ea:a3:2d:a6:58:5c:9d:52:3b:e1:14:b1:a2:95:8c:39:
31:da:e3:fd:d6:4c:ba:19:08:90:b7:df:37:37:a8:7e:8c:64:
58:d3:7c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:03:11 2025 by rpki-client