Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
File: YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft (raw, json)
Hash identifier: yfS38eNBzgDlokx+V0mGPagOBsbth+w2B1x77ksHLAY=
Subject key identifier: DF:68:4B:46:55:EA:FB:4D:A9:C9:13:98:F8:C1:05:EA:EE:D6:79:D0
Authority key identifier: 61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
Certificate issuer: /CN=61b824b85aba7bc3512b1214b385de570fb294bf
Certificate serial: 0194BCE0C09FC3DB801F759D8DA12481CC85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
Manifest number: 0A26
Signing time: Fri 31 Jan 2025 15:00:33 +0000
Manifest this update: Fri 31 Jan 2025 15:00:33 +0000
Manifest next update: Sat 01 Feb 2025 15:00:33 +0000
Files and hashes: 1: YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl (hash: yGjGlh3F2LRlYgAWRylApGlWWyJQx3r09lDInY+W5as=)
2: b9-Xe57-P3gr_wKG9Fdk9x-8_jI.roa (hash: 6yS6JDMkNFqPC6IhCp7cvJnugVcw1WsjLczS6bmB5js=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c0:9f:c3:db:80:1f:75:9d:8d:a1:24:81:cc:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b824b85aba7bc3512b1214b385de570fb294bf
Validity
Not Before: Jan 31 15:00:33 2025 GMT
Not After : Feb 1 15:00:33 2025 GMT
Subject: CN=df684b4655eafb4da9c91398f8c105eaeed679d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cc:2a:87:9d:26:aa:22:53:7e:22:64:11:d5:
b1:98:9b:3c:3e:be:b5:21:b6:d3:6f:2d:ed:c0:18:
8d:72:93:d9:59:7a:4c:14:bc:31:a6:ac:cc:62:07:
fe:9a:28:11:cb:4c:3a:f4:db:69:72:fa:b1:d3:17:
72:cd:b8:77:7f:6e:94:99:e2:e2:90:95:18:79:99:
de:61:fb:d4:13:06:58:9c:42:d3:b2:bf:2c:f7:7a:
d3:6f:e1:1b:e3:fa:84:1e:95:44:f3:a2:3c:ba:18:
70:70:7e:02:4f:c5:7f:33:9e:40:77:fa:d4:5c:50:
fc:21:cd:73:1b:6e:db:c7:7b:aa:65:83:34:d5:08:
aa:50:48:10:7f:8a:29:f0:21:db:30:8a:c0:83:8a:
a4:99:9a:24:45:b5:ed:95:e3:1a:f2:7c:0e:69:57:
8c:14:df:33:48:95:71:95:88:8f:32:81:fb:18:c3:
ec:9f:1f:4e:21:51:e6:0b:f2:b8:ad:50:b9:89:24:
86:2f:96:42:fb:9d:58:95:ca:7e:4d:a6:f8:e4:f8:
a2:5e:7d:eb:f7:be:49:26:fc:3c:3e:14:bf:ef:e1:
1b:55:02:cf:b6:b8:16:bf:ec:31:4d:d8:29:0e:4b:
be:60:32:f6:1b:6b:86:48:dd:26:17:20:2e:56:43:
e2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:68:4B:46:55:EA:FB:4D:A9:C9:13:98:F8:C1:05:EA:EE:D6:79:D0
X509v3 Authority Key Identifier:
keyid:61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:04:a0:58:28:73:f5:e1:3b:38:18:4a:a1:5f:00:94:97:eb:
c8:79:ed:b2:7a:ec:5c:6d:0e:b5:0d:85:15:12:c9:45:ea:fc:
0a:96:f0:2c:d1:b0:be:ee:98:32:71:ea:00:bf:97:dd:85:24:
ec:62:ea:18:07:d7:23:69:8a:70:2e:36:26:91:11:aa:46:bc:
91:15:1c:8f:67:57:a7:75:51:7e:fe:38:2c:15:9e:7c:9f:8f:
fa:97:2b:31:c8:ed:5c:76:02:f6:73:29:37:0b:af:a9:63:cc:
64:4b:31:d1:76:21:c4:4e:86:7c:f9:6f:69:7a:69:10:7b:38:
58:ba:9b:ee:9f:53:0f:e6:9f:7e:0b:db:cd:58:f7:24:cf:9b:
4f:d5:4e:3e:0f:54:ab:9f:24:5c:dd:78:b6:7b:ca:e5:13:2c:
e8:6d:2d:9c:3b:c5:00:52:12:66:db:db:f9:50:2a:8f:fb:9c:
a0:a3:99:72:56:4d:41:49:e2:af:d1:98:19:da:93:54:71:fd:
f8:6a:10:ae:5e:a8:82:0a:9a:a1:97:ff:08:04:23:b0:0c:94:
1e:8f:74:fe:26:38:e5:e6:60:24:9e:b9:09:ad:7c:18:df:5a:
2f:c4:9e:1f:aa:7e:67:ab:7a:19:7d:bb:3b:23:9d:34:0f:7b:
1e:8e:60:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:22 2025 by rpki-client