Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
File: YsTHQ9XCr88n8QTrbgMWEWyFx94.mft (raw, json)
Hash identifier: IIvtDlk4mDa86PE5tOxe34Y5eEk02Vk/w8ngKVg101w=
Subject key identifier: 29:F5:29:D9:2A:0C:FC:97:44:49:02:53:96:2D:25:97:1A:C3:07:5B
Authority key identifier: 62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
Certificate issuer: /CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Certificate serial: 0194BCE07D7D785C1061AE51491ED7E09FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
Manifest number: 09F6
Signing time: Fri 31 Jan 2025 15:00:16 +0000
Manifest this update: Fri 31 Jan 2025 15:00:16 +0000
Manifest next update: Sat 01 Feb 2025 15:00:16 +0000
Files and hashes: 1: O5Qp4JElVe0um1Rnuz-9xQyVCpc.roa (hash: 73YKFKe5WyNrwSKLy76+GejDIV4ldqnve1bMw3FlzZM=)
2: YsTHQ9XCr88n8QTrbgMWEWyFx94.crl (hash: z/UJ46nsXng7NheteCaVuQm31vaifM+0sxjGmQ5q07I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7d:7d:78:5c:10:61:ae:51:49:1e:d7:e0:9f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Validity
Not Before: Jan 31 15:00:16 2025 GMT
Not After : Feb 1 15:00:16 2025 GMT
Subject: CN=29f529d92a0cfc9744490253962d25971ac3075b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9a:c8:c1:fb:52:0f:21:be:79:7d:69:2c:c9:
3a:20:22:53:d4:05:52:5b:80:23:0f:f9:07:05:dd:
d1:d9:f7:5c:3b:ca:51:a3:7a:bd:f3:75:99:ed:9b:
1f:77:a4:4f:c1:27:7b:d8:5f:8b:40:fe:11:6a:c4:
7b:d7:4c:f1:f5:cf:3b:21:d4:91:43:63:fe:ee:a3:
0e:30:36:f0:26:9e:1e:62:a4:76:7b:13:bf:29:80:
16:53:75:b2:e9:16:21:63:d1:8c:56:ee:06:de:cc:
49:76:68:24:27:a1:37:c9:79:5f:c9:05:58:e2:65:
d0:f2:fb:c8:8d:74:26:8a:3c:67:1a:de:5c:4e:c9:
ed:a7:ee:18:9c:3d:54:1a:8b:a7:7c:51:e6:1e:16:
4b:5b:11:a1:9c:75:92:ac:3d:64:9c:e3:91:32:02:
7d:0d:b8:a3:89:8c:38:53:02:16:0d:a3:87:30:5d:
ec:c3:e1:44:fb:c2:71:9e:79:45:de:79:89:2a:62:
75:5c:d4:63:6d:7b:b3:d5:c1:92:dd:c6:e2:f1:19:
53:9f:2f:89:65:79:1a:57:aa:03:3e:4d:31:c1:0d:
fe:47:91:8d:68:0b:47:64:40:ae:2f:81:ec:3e:d7:
10:da:2b:fa:a7:45:c8:99:3d:b9:45:dd:b5:f1:c6:
2b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F5:29:D9:2A:0C:FC:97:44:49:02:53:96:2D:25:97:1A:C3:07:5B
X509v3 Authority Key Identifier:
keyid:62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ae:24:dc:27:af:8d:33:ee:04:94:cd:93:41:57:15:fd:27:
5b:c9:a8:e0:94:ee:c8:09:91:1b:29:d0:87:bc:0a:28:0c:08:
a6:50:f8:b9:1b:65:b9:44:7b:23:06:26:9c:59:4c:fc:c9:ba:
47:16:5c:b0:4e:a7:d2:49:80:21:6b:eb:b5:b8:d0:4b:7a:13:
b8:74:cb:88:00:30:c3:03:9c:f6:37:17:e4:b1:5c:9f:9b:04:
8a:89:77:78:b3:e2:09:0e:fa:3b:6b:74:cc:75:b8:e6:a6:70:
21:1c:90:28:a3:49:59:11:4f:ff:27:3c:d1:2f:6d:12:a0:d6:
04:47:32:f3:58:f1:4c:6d:b8:64:23:e3:b8:35:5a:ee:bf:0c:
42:34:ca:c7:79:1f:32:49:af:07:8c:45:65:1d:61:df:46:b5:
04:0f:02:ee:69:18:b6:77:84:be:b1:2c:fb:00:5f:02:27:07:
a0:7b:25:8e:d0:96:73:6a:a8:d7:1e:33:af:1a:3c:e5:2f:dc:
d2:13:5a:63:09:35:23:af:2e:17:50:70:13:18:5a:53:8e:d3:
84:6b:85:10:2c:e7:d0:4b:79:21:15:58:b7:68:86:11:50:3b:
dc:d7:1e:3f:1f:e3:e6:d3:b8:99:54:d9:30:ab:c7:b8:8a:c9:
9f:43:13:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:33:15 2025 by rpki-client