Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.mft
File: YTe126q6KK4oyOmpeA-3DCT8kZA.mft (raw, json)
Hash identifier: IhxMFHcHIwNGvULxi24r/GiRtTLevTktKuUsawA4ktQ=
Subject key identifier: 86:BB:B4:22:63:BC:DA:7B:BA:B3:EC:07:C5:6D:23:FB:41:E8:30:EA
Authority key identifier: 61:37:B5:DB:AA:BA:28:AE:28:C8:E9:A9:78:0F:B7:0C:24:FC:91:90
Certificate issuer: /CN=6137b5dbaaba28ae28c8e9a9780fb70c24fc9190
Certificate serial: 0194BD17C4DAE11C0A3E5773C85B1BE6E361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTe126q6KK4oyOmpeA-3DCT8kZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.mft
Manifest number: 0A5B
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: YTe126q6KK4oyOmpeA-3DCT8kZA.crl (hash: P/RAF8x4iIvs5pnAqmMjfSRGCYvXHbqNjnnk5aa90Ko=)
2: y77UWpMS4DRW9Z6BffFmy0sfx48.roa (hash: KSiUNsa6U/vvFkusIhQZvpAT5eNjje7RZN6spA/c4iI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c4:da:e1:1c:0a:3e:57:73:c8:5b:1b:e6:e3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6137b5dbaaba28ae28c8e9a9780fb70c24fc9190
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=86bbb42263bcda7bbab3ec07c56d23fb41e830ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0a:96:cf:c4:ee:a8:90:16:36:fd:f4:fb:d1:
80:eb:c1:a7:a8:e8:05:e5:a6:c7:8a:fa:83:60:ea:
53:11:07:0c:18:cd:c7:6c:c3:3e:12:14:25:6a:02:
7e:26:6a:7d:a4:e1:8b:41:52:c1:13:7b:29:17:4f:
3a:8b:ea:5e:d0:71:c5:bc:66:2c:81:aa:40:37:25:
ba:11:e5:ac:9f:4a:24:3f:ec:d2:ac:6d:df:ec:75:
4a:c9:3a:ba:3b:85:b5:41:2d:cf:0a:ca:b7:9d:b6:
1c:ed:6e:22:35:95:e2:92:a4:42:73:1e:45:ea:7a:
22:e0:f5:fe:17:06:40:08:42:be:b6:92:ab:04:33:
1d:29:1a:7a:ac:fe:66:38:4d:71:3b:69:3b:a2:52:
af:53:a9:96:0d:d3:98:95:12:97:c7:66:52:af:3d:
86:dc:74:c2:a3:cb:50:4e:bd:c7:3e:00:b2:af:38:
98:3f:be:14:3e:65:19:5b:61:1b:49:b4:7b:33:ae:
4c:d0:eb:20:1f:9b:5c:97:eb:c7:22:9a:21:5a:13:
2d:85:b2:d7:a7:29:78:c6:f1:f5:6a:84:58:db:20:
69:ec:59:07:9f:c3:ce:56:dd:dd:72:a5:fb:28:ad:
d2:d7:67:30:20:60:f6:61:70:d9:8f:b8:ea:45:7e:
c2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BB:B4:22:63:BC:DA:7B:BA:B3:EC:07:C5:6D:23:FB:41:E8:30:EA
X509v3 Authority Key Identifier:
keyid:61:37:B5:DB:AA:BA:28:AE:28:C8:E9:A9:78:0F:B7:0C:24:FC:91:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTe126q6KK4oyOmpeA-3DCT8kZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d8:e2:a0:3c:a5:ec:31:a8:b7:b4:ec:73:b6:0b:54:e5:ae:
54:f3:14:f8:9f:fd:70:cf:93:fd:31:15:a9:cb:e9:64:f4:47:
c0:4c:05:75:18:3c:9c:33:37:15:c9:ea:6b:51:b9:a7:9c:b7:
45:11:58:b4:81:5d:e3:3d:fc:c2:51:e0:f6:fe:e7:cb:a2:78:
42:59:f3:80:bd:39:a7:ef:13:2c:a9:e6:6e:fc:51:0f:6d:a0:
6e:61:cc:11:81:64:c2:a2:98:40:92:e8:35:0d:af:14:f6:a6:
86:7a:a0:b1:82:44:e2:9c:c3:9a:cc:9f:73:db:c7:4b:95:9e:
44:6e:ca:69:cb:28:73:ea:d1:f5:cb:f1:ee:d1:b4:fc:00:73:
86:37:27:86:4d:82:c1:d5:2b:60:bb:95:6c:5c:c0:12:4d:0d:
6d:1f:f7:0f:e3:2d:d5:c6:ad:9a:1a:b9:59:ba:8f:72:da:38:
66:a2:14:a1:a3:34:78:bc:ac:09:d4:71:60:59:57:4e:5d:e2:
c4:77:25:7d:4f:73:54:c9:e8:ff:7f:af:40:f1:e9:c8:de:d3:
22:8e:37:94:8b:e0:32:01:ce:c4:9f:2f:17:9d:9d:c3:47:e0:
60:45:b1:9d:43:47:19:af:34:6d:76:36:63:45:93:47:d8:e6:
fb:77:32:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:02 2025 by rpki-client