Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: aI+gEC3MPyNlnQ5UJHKXgHpVbCfdyBnT7wu1Fygh+9c=
Subject key identifier: 8A:4F:EF:90:2A:A8:B8:54:63:E5:CC:40:45:7F:F0:08:44:8C:94:94
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 0194BC72828628C6C533D88912D44E8EB5F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 1357
Signing time: Fri 31 Jan 2025 13:00:08 +0000
Manifest this update: Fri 31 Jan 2025 13:00:08 +0000
Manifest next update: Sat 01 Feb 2025 13:00:08 +0000
Files and hashes: 1: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: Wi8SCTXUSPjZHaNQDCB48DFQ9q6TtZzcqQh2hVTuBrU=)
2: _wocLw8I_D0bWM_gydbHP3YBnWM.roa (hash: ipZCy+v8LxPOj8oL+HxTUZYzmJcHqr9rYLmV463tU+U=)
3: jP1IuFeYqRVYzU2ZxiYcMgwYBwo.roa (hash: 8tUnk9Rc0BoFNUvYX8+NZuDnDdmkv70Pafdtm7lPIM0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:82:86:28:c6:c5:33:d8:89:12:d4:4e:8e:b5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Jan 31 13:00:08 2025 GMT
Not After : Feb 1 13:00:08 2025 GMT
Subject: CN=8a4fef902aa8b85463e5cc40457ff008448c9494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4d:0f:97:51:61:19:67:62:21:8b:a4:78:ba:
5b:76:16:53:e9:91:e3:14:d9:31:7e:51:a7:bb:ad:
0b:f3:d8:ea:cc:b3:f2:28:3e:31:21:94:f8:75:a9:
0c:a1:7b:bf:c9:f7:b7:ce:a0:5c:36:d2:52:e0:50:
4a:75:23:67:c7:ba:35:e4:7e:f1:94:90:75:0e:4a:
64:ee:c8:8d:f7:cc:e1:c9:c8:d7:82:35:72:9f:dc:
a7:e7:12:07:2b:79:ad:4c:7b:de:55:9f:22:d0:45:
7d:4b:b4:f4:03:63:e8:6a:a8:5e:b9:de:35:80:74:
02:6e:82:b8:f5:ea:20:cd:1a:e4:40:66:12:f9:1e:
b5:61:b0:1b:c1:53:f6:b2:e4:91:fc:56:79:22:99:
d5:c9:f8:73:12:d4:65:64:c4:f2:70:cf:dd:d2:f4:
d8:10:81:ba:d1:8a:13:49:f8:8f:a7:56:2d:f8:bf:
4b:ea:ff:7d:26:f5:25:9a:2d:76:1c:2a:73:cc:86:
f1:92:3f:8b:06:3d:eb:13:19:d8:fc:74:c9:26:13:
81:ef:d7:60:0e:a0:62:bf:69:3d:32:4e:af:54:a4:
dc:d5:87:87:ae:b8:c2:a9:56:bf:e2:ba:4e:1e:06:
c6:72:08:e7:ab:d4:1f:aa:87:8a:4e:a6:60:24:54:
6a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4F:EF:90:2A:A8:B8:54:63:E5:CC:40:45:7F:F0:08:44:8C:94:94
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:cb:22:34:a0:ee:b6:a1:87:2e:59:5e:c3:2b:2e:f0:2c:f6:
e6:27:1b:73:a0:68:9e:2e:33:5e:b1:05:11:f9:a8:72:af:ac:
17:75:09:06:ef:71:e4:24:9f:10:87:34:68:c9:9a:9f:f3:d4:
ae:4d:c4:6a:3d:93:48:13:ba:26:1f:90:76:5a:97:a8:a9:27:
c6:4d:e8:9a:5b:f2:ce:8d:d2:1b:f0:fd:05:35:7f:47:29:c9:
30:78:dd:3a:08:63:35:b8:4b:e1:7b:f3:f3:b4:44:b8:db:c5:
90:c9:62:71:3f:71:07:0f:bf:2e:62:24:27:24:e4:3e:d6:80:
4d:ed:8e:11:07:a0:0d:8c:f4:cd:04:6c:c0:1f:6a:d5:5f:c5:
ea:d4:eb:3c:7b:9a:15:87:14:49:28:d1:b0:87:29:70:49:d6:
bc:19:5f:0a:03:7c:4b:33:a8:56:97:b7:66:89:90:bd:46:b0:
b3:83:2d:0e:5b:ee:36:f7:ff:0a:64:55:ad:64:ce:a4:d0:dc:
3d:13:19:95:5d:98:60:15:ff:44:cf:ee:79:32:b3:6e:e9:55:
62:f2:12:13:ae:67:07:01:cd:e5:6d:0f:93:73:62:0c:8d:94:
72:87:ed:16:34:cb:e8:1c:dc:1f:32:03:51:36:73:70:27:49:
d4:db:73:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:13 2025 by rpki-client