Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
File: YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft (raw, json)
Hash identifier: Zyl8lKr6tKTvuCgmxdgFFLH/S5XeYG9Jdu4prs5rw4k=
Subject key identifier: B6:A0:4F:A9:BB:31:41:96:F9:D4:0E:59:D2:30:64:8D:E9:2A:92:7C
Authority key identifier: 62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
Certificate issuer: /CN=6238410338e21e8eab94119d80e41a3958491de6
Certificate serial: 0194BBCEB6D2AA75848B8695D44FA7D5CBE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
Manifest number: 0A27
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl (hash: pNxB7ZtHm1/6hV22VOT2SrUbXgxUspQ1j2GtwHtze8g=)
2: u6XKWkJxCFpT3xG3nAznfYy70cs.roa (hash: RjT1DRB5vp2FEimDEIdIqCiEf85N8q2cRNXUGa1kwyI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b6:d2:aa:75:84:8b:86:95:d4:4f:a7:d5:cb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6238410338e21e8eab94119d80e41a3958491de6
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=b6a04fa9bb314196f9d40e59d230648de92a927c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:13:07:ec:93:a5:3e:83:c1:85:68:76:68:
23:fe:25:d5:eb:e7:05:35:12:8d:65:dd:79:2b:08:
c1:42:fb:7a:84:7d:c1:92:cb:eb:b8:da:20:9c:c4:
83:3e:5c:d8:e3:22:ee:97:b3:c8:a0:3e:cb:e5:d3:
6d:70:43:9b:b7:f7:be:49:ad:bc:7a:6c:61:1c:3a:
47:39:c3:76:85:cb:dd:a3:e4:37:f7:da:dc:49:1a:
1c:bf:56:ca:e2:90:35:61:09:ef:c5:ad:df:3d:b2:
91:06:9c:e4:41:92:0f:5c:17:a6:09:c8:32:d7:13:
c2:4f:55:de:58:ca:88:f5:17:dd:7e:23:71:22:16:
b2:c4:d1:19:3c:6e:ee:4c:27:36:87:46:4f:bc:6f:
33:e3:9b:f3:73:ba:cc:3f:6e:32:62:91:eb:b3:37:
a9:80:bc:00:6e:d3:7f:ee:11:18:fe:3d:2f:49:ad:
18:6b:a6:5a:de:ff:29:09:b2:97:4b:a9:1e:29:73:
c3:86:a8:78:c1:d5:46:35:e5:c8:e8:1e:d6:79:05:
28:83:e5:b6:e1:6f:d7:b7:1e:41:aa:42:c4:0f:10:
12:4a:87:94:a0:00:5f:df:fd:52:45:b6:e6:66:89:
60:17:46:89:f3:63:f0:ea:e5:e5:b6:9a:23:36:9c:
7c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A0:4F:A9:BB:31:41:96:F9:D4:0E:59:D2:30:64:8D:E9:2A:92:7C
X509v3 Authority Key Identifier:
keyid:62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ce:c3:2e:5c:61:0f:df:50:89:39:ba:f8:4d:b5:3d:01:20:
ca:9f:95:72:c1:68:7a:33:b5:19:ec:01:d3:0f:d8:f3:f9:a7:
f8:60:c9:bb:f4:30:8b:7c:c5:9a:4c:59:4b:ed:8c:06:b8:ea:
1a:9f:18:f2:09:94:f4:8c:d3:37:ae:4b:22:6b:bd:7a:12:8e:
f3:59:d8:7d:29:8d:20:4e:0c:f5:d6:fb:7d:74:5d:5a:ad:cb:
32:bc:99:91:9f:c6:41:0b:6c:be:4f:84:f9:fe:62:d3:be:31:
ef:af:b2:84:91:36:83:82:94:48:2a:c6:75:23:dc:23:17:37:
78:76:e8:ef:64:5c:c1:70:02:05:72:eb:c2:0d:0f:a3:b8:85:
91:d1:72:64:d8:b0:96:d2:90:ae:5c:1e:1e:a0:1b:47:30:7e:
04:50:f3:4d:9e:ce:06:8a:be:cc:b1:81:c9:1f:92:c6:3b:a0:
2d:d6:d0:79:c6:22:94:12:26:99:ba:2d:95:d9:4b:39:0c:c9:
b7:63:03:01:85:50:26:b3:0f:e4:80:6c:51:8f:b8:78:e7:d8:
75:01:5a:88:89:cc:5b:a0:b8:31:92:bb:be:0b:15:79:ec:9c:
96:b7:2e:ee:78:e8:db:f5:09:40:d1:c6:c0:0d:69:65:5d:5f:
c5:be:04:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:20:29 2025 by rpki-client