Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
File: Yf4ur6ZKzq8fz8-8phUKei01vko.mft (raw, json)
Hash identifier: v2MoVeoq1o72ApjxNmGTL4CTJFW4Kx89YjEJcmU7Kbo=
Subject key identifier: 54:7F:95:E9:90:A6:71:E1:3C:96:14:6C:E0:C8:56:DB:30:DC:D8:71
Authority key identifier: 61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
Certificate issuer: /CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Certificate serial: 0194BC3BDACFCB08DCDE3B73CE9B1C7AC958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: Yf4ur6ZKzq8fz8-8phUKei01vko.crl (hash: IxeLOKnGIz01dCXGnySlfCH9MiZMH4mloDC3daJXmrE=)
2: wsNRODSlq_nh1GDEKdmia3PTMko.roa (hash: oJgNuBgkHwRy1QBN/xCPFqgneU9FqbAO/DZOxkV4624=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:da:cf:cb:08:dc:de:3b:73:ce:9b:1c:7a:c9:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=547f95e990a671e13c96146ce0c856db30dcd871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c9:bc:ac:72:76:59:00:fa:48:8e:31:fb:e7:
02:bd:93:ec:46:e4:be:be:12:b1:db:f8:6d:3e:fc:
ee:e4:58:6a:49:64:82:55:8e:03:92:66:ac:b8:98:
0e:55:31:ff:ad:fb:cf:bc:f9:2e:33:c1:a3:93:06:
68:67:1b:92:7c:f5:e1:b5:8c:01:a6:98:f0:47:e6:
eb:45:47:30:64:f9:46:6d:e8:8d:9a:46:f8:3d:c7:
db:90:23:2d:c8:5e:20:6e:ca:63:15:16:52:3a:57:
9c:56:f2:2b:fc:60:be:30:f0:da:2b:fe:c2:29:d2:
ad:68:0f:a7:e7:d7:1a:dd:3e:b3:5c:02:99:da:78:
a5:e4:6b:64:91:ef:21:27:8b:1d:05:c1:a4:fe:7f:
50:bf:d7:d5:b0:87:2c:e0:7c:e3:75:bd:fe:a7:e2:
1f:83:dc:bb:a3:29:87:d1:74:2f:ea:d5:31:d4:4e:
cc:af:da:9a:f7:af:06:4e:eb:75:4c:b0:06:f8:d8:
75:16:d6:77:d1:7f:3e:91:69:bd:de:d4:b4:02:8f:
50:2a:f1:2b:52:50:d1:42:5d:11:7a:e1:cf:0d:a7:
3d:bb:e7:37:05:fb:2e:e1:7b:dd:c4:9b:ef:fd:63:
32:01:af:7b:35:71:12:94:0e:92:6e:2c:1e:70:b8:
b3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7F:95:E9:90:A6:71:E1:3C:96:14:6C:E0:C8:56:DB:30:DC:D8:71
X509v3 Authority Key Identifier:
keyid:61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:02:88:08:2d:6d:b5:8c:3c:77:a1:fa:f7:d3:c5:f2:51:df:
2f:f4:d4:4d:a8:b8:07:4f:34:12:14:48:e1:15:5e:bc:2d:fa:
fa:2e:e2:e8:97:3a:36:f9:53:57:cd:73:30:58:39:a3:aa:89:
4f:9c:16:f0:55:80:d4:f2:48:ca:12:c4:cc:20:90:1c:64:8a:
36:90:27:a8:33:4e:72:58:ec:79:8c:e0:14:0a:d3:59:f8:7b:
c2:e4:61:ab:3c:e8:b0:14:3f:fa:ef:c5:11:ad:89:4f:75:1c:
6e:9a:58:77:18:ba:d3:3a:e9:c4:eb:f0:8e:0d:b7:62:a4:61:
54:a2:0e:60:fd:3c:1b:07:20:89:99:20:2b:29:21:67:38:69:
b7:41:eb:35:df:e2:1e:74:6a:ec:4f:6d:33:36:9c:c7:ea:45:
27:db:d7:f7:b7:71:6c:58:64:c1:18:b2:30:4d:f7:dc:fc:8b:
7a:ec:3b:b0:c3:3b:53:67:68:d1:47:83:7d:a7:77:bc:cc:07:
19:44:cd:d3:e9:1e:26:45:d4:2b:0f:1c:67:c7:4c:6f:88:6c:
51:88:ec:fa:99:e8:1e:7e:0f:d8:05:dc:e3:73:82:da:fa:da:
26:11:37:2d:f9:11:1d:bb:05:4f:0f:b0:8e:3f:04:0b:e4:8b:
4a:a5:4b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:36 2025 by rpki-client