Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
File: YDM81vG1nAtoLh2jiSN-2j6dqRg.mft (raw, json)
Hash identifier: +QpAymzjvaIc5R3/Utfuy0l3Ev5DbgdiWdkycyBH0mE=
Subject key identifier: 95:BD:E7:AD:09:D1:73:65:3C:2B:59:21:1D:34:BC:3E:08:EC:99:81
Authority key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
Certificate issuer: /CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Certificate serial: 0194BBCE3EBDB03F182DB84690A5C3F4151A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
Manifest number: 0B0C
Signing time: Fri 31 Jan 2025 10:00:43 +0000
Manifest this update: Fri 31 Jan 2025 10:00:43 +0000
Manifest next update: Sat 01 Feb 2025 10:00:43 +0000
Files and hashes: 1: YDM81vG1nAtoLh2jiSN-2j6dqRg.crl (hash: RJlbP0Y7F5cwBCsbGsLkHsJ5CXTfbmo92A9T6nxKyFQ=)
2: YvGTICIQPtclpMrYwq9cvhdFKOI.roa (hash: VRRExLjeFp73/0IARjKER20GFoe2YDaIzWUGvE6p51I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3e:bd:b0:3f:18:2d:b8:46:90:a5:c3:f4:15:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Validity
Not Before: Jan 31 10:00:43 2025 GMT
Not After : Feb 1 10:00:43 2025 GMT
Subject: CN=95bde7ad09d173653c2b59211d34bc3e08ec9981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:dd:4e:bd:4c:ec:85:35:f0:ac:81:90:b8:09:
80:e1:79:3e:ff:18:6f:eb:2c:84:3f:88:cf:a6:c3:
19:1f:22:71:14:d4:74:32:d1:37:ae:1a:d2:19:7c:
06:72:d7:db:a1:2f:cb:af:ec:01:5b:76:86:81:87:
47:da:0f:fd:7d:f0:97:cb:fb:6c:db:ed:32:52:a1:
26:10:45:6f:80:8e:d8:d9:ba:7a:01:dc:c7:c5:1b:
5f:60:e7:7e:bc:cb:89:f7:ff:8a:ee:0f:33:53:08:
66:63:d1:22:7a:06:b7:d9:15:68:08:2d:8a:64:3b:
54:f0:e0:23:d6:af:75:c0:49:c3:64:8f:9a:99:d7:
f0:1a:ff:06:0a:f6:8c:4d:1c:e1:5d:a0:cb:a4:b1:
96:f6:8b:2e:c6:cb:94:42:14:64:dd:10:c1:d6:9a:
34:0c:1b:59:c9:6b:40:52:07:2b:25:a1:5f:76:2e:
2e:c4:22:e8:d4:c4:4c:43:a4:53:27:58:53:95:6f:
77:03:d2:b9:cc:6b:ff:fa:bd:3d:53:82:32:76:99:
dd:c6:95:04:c0:2b:ce:04:be:1f:d6:80:5e:e7:fa:
de:e9:95:13:19:cd:9e:8d:90:a3:85:49:51:45:2e:
5b:f8:66:44:0b:46:75:d4:ad:4f:86:f1:b3:56:08:
e4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BD:E7:AD:09:D1:73:65:3C:2B:59:21:1D:34:BC:3E:08:EC:99:81
X509v3 Authority Key Identifier:
keyid:60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:4e:4b:48:c2:f3:33:6e:b9:10:c3:9f:e8:43:6b:6e:11:2e:
f4:26:06:8c:e9:4a:0d:c5:4a:21:76:4d:19:b5:67:63:f3:0c:
7e:50:36:72:59:ea:34:d5:37:8a:6f:7d:87:72:9c:4c:54:3f:
94:bf:ed:eb:92:e3:43:a0:cb:21:64:48:f4:cc:ab:bd:f1:1a:
ce:b0:1c:06:c8:12:39:e4:be:ee:40:6e:68:0b:56:8a:10:8d:
a9:9c:3e:e7:c8:ac:28:0f:18:97:3e:c5:98:b5:84:12:50:61:
92:24:cc:b4:37:97:17:54:8f:b0:01:6c:66:e1:ad:8b:8e:ab:
e8:3d:05:b9:61:95:d9:87:6e:59:ee:1c:43:ef:6f:c1:b5:88:
45:ae:82:47:49:5e:fa:de:b3:cf:b4:f4:31:7a:ac:0c:44:da:
f7:8f:97:76:e9:08:ed:ff:15:e0:2f:e6:f4:d3:3e:34:53:66:
55:7d:db:d2:7a:51:b2:a6:83:e9:96:43:75:cb:1c:ca:2b:9c:
61:14:9c:5c:8e:bd:d8:cc:9b:ae:29:07:55:5e:32:6d:02:5f:
d4:e6:eb:b3:be:e9:c9:c2:c4:8c:57:c7:ba:c4:0b:3c:1b:63:
b0:7f:12:69:74:fc:0a:cc:52:a8:bf:95:4c:c9:a9:c5:c9:5a:
05:f8:7d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:16 2025 by rpki-client