Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.mft
File: YbcgLJIwwolFDtWmKxc2mgZZvGs.mft (raw, json)
Hash identifier: 1LWai/UhuTR9fIfH6imyS4x+FPlJZM+maloX7axVVME=
Subject key identifier: D4:49:7B:74:6E:C9:F5:CD:8B:CE:AD:54:A5:7F:24:03:CC:1E:7D:54
Authority key identifier: 61:B7:20:2C:92:30:C2:89:45:0E:D5:A6:2B:17:36:9A:06:59:BC:6B
Certificate issuer: /CN=61b7202c9230c289450ed5a62b17369a0659bc6b
Certificate serial: 0194BCA9AE8AD1E9BD3A89726F4A79726124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbcgLJIwwolFDtWmKxc2mgZZvGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.mft
Manifest number: 06CF
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: WEJghusKIKSFibkCzqHCeJYzUzA.roa (hash: OzzJ4qVi0bEqkT53q5LfwPnutGydp+ntCXtobu4buTA=)
2: YbcgLJIwwolFDtWmKxc2mgZZvGs.crl (hash: JybwHLhs9COGKsTTGCD6fFBKRqy/aK+IHUK8UTYhf/A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ae:8a:d1:e9:bd:3a:89:72:6f:4a:79:72:61:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b7202c9230c289450ed5a62b17369a0659bc6b
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=d4497b746ec9f5cd8bcead54a57f2403cc1e7d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8b:6b:6f:0e:1e:3d:46:96:19:c7:39:ae:27:
a1:85:b0:df:a3:35:ee:df:94:df:07:1c:fb:a3:c5:
d5:6d:a5:43:cb:25:62:a9:55:4a:b1:2a:ec:d5:2e:
70:af:17:86:fc:25:88:80:e4:69:34:7b:14:ed:19:
f8:fb:5d:ae:4b:df:09:9f:36:b5:ac:61:27:7c:a5:
af:83:7b:1f:ca:a6:a5:c5:01:d9:48:07:1c:e8:7c:
48:39:95:08:93:67:03:32:ab:7b:6e:1c:ab:8f:c3:
47:69:e1:af:87:71:90:94:2e:6f:87:74:ff:ff:82:
0b:11:5a:32:3f:1b:25:66:42:33:0a:60:65:2e:92:
a3:d9:c6:72:ce:ea:52:41:3d:b7:0e:7d:46:41:b6:
25:a8:7f:21:69:09:e0:3a:82:8d:23:78:9f:2a:e2:
23:52:90:2a:14:bd:61:de:1e:c1:17:ee:49:12:7c:
12:00:11:ed:03:71:2a:6e:ec:89:e7:cc:69:6f:fe:
cd:2e:fe:1b:a0:ac:47:5e:d5:9d:d5:d1:85:a7:6f:
4e:0b:bf:2e:5b:3b:9f:6f:16:80:2e:ef:c9:ca:8b:
85:af:27:11:1b:4b:ee:3e:a5:d9:02:65:2f:1e:79:
27:fb:72:7b:e1:29:c5:04:2b:3d:9c:19:31:9d:70:
0c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:49:7B:74:6E:C9:F5:CD:8B:CE:AD:54:A5:7F:24:03:CC:1E:7D:54
X509v3 Authority Key Identifier:
keyid:61:B7:20:2C:92:30:C2:89:45:0E:D5:A6:2B:17:36:9A:06:59:BC:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbcgLJIwwolFDtWmKxc2mgZZvGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1c:de:40:e6:12:3b:59:03:19:21:f3:35:7b:a6:e0:b3:6b:
ec:56:23:64:08:e4:82:8b:62:84:22:61:18:96:d1:45:eb:0f:
d3:6f:80:4c:66:56:6a:aa:42:3a:50:19:2f:8c:c6:55:4a:1d:
20:96:6d:aa:52:8d:3a:3c:90:62:34:db:58:8d:12:e9:f3:1a:
61:82:ed:89:07:c7:08:e8:aa:18:01:e5:7e:54:b3:4a:dc:79:
e4:02:94:b6:4c:58:f4:db:7b:b7:b1:ba:d2:4d:a1:5e:34:c4:
d4:25:a7:41:3c:06:f3:e6:10:de:64:53:15:75:e7:5a:f9:3f:
4d:83:74:79:04:59:5f:4c:b4:f4:c0:cc:36:77:8b:34:c2:dc:
4d:17:9e:e9:e5:de:fd:8e:2a:54:cd:7b:f4:38:ef:56:1c:41:
af:c7:36:d5:d1:00:98:65:b1:eb:04:76:96:a8:12:64:7f:1c:
1b:ea:5c:19:9c:2b:c1:ad:18:53:09:73:58:22:da:b5:64:e0:
e5:57:44:dc:4c:69:66:21:01:37:a9:3f:3c:27:7b:dd:7a:13:
95:31:82:80:ea:6f:a3:56:d6:f7:63:8c:f0:5a:f8:ef:ac:3f:
4a:0f:4b:ce:86:fd:4f:4c:aa:0f:9e:47:8b:fd:31:7c:b8:00:
39:8f:fa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:56 2025 by rpki-client