Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft
File: YcXtDe2GJbMrZTMgcinyxGclmEg.mft (raw, json)
Hash identifier: AADT245IvbKh+GvGtnBHtooZ3AkQJwy/2B/+St9IEig=
Subject key identifier: 7E:62:12:64:3B:B8:36:28:D9:17:27:51:09:EE:EF:E5:C1:4C:97:93
Authority key identifier: 61:C5:ED:0D:ED:86:25:B3:2B:65:33:20:72:29:F2:C4:67:25:98:48
Certificate issuer: /CN=61c5ed0ded8625b32b6533207229f2c467259848
Certificate serial: 0194BCA9E6C3CBA31C2AADDDBAC13E516A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcXtDe2GJbMrZTMgcinyxGclmEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:38 +0000
Manifest this update: Fri 31 Jan 2025 14:00:38 +0000
Manifest next update: Sat 01 Feb 2025 14:00:38 +0000
Files and hashes: 1: CYWLmYxcCQgki-Xk5YRvuSHALzs.roa (hash: 61Fic0FYH+kK7MaPnl8UV3ohGlvf2gRHDh8nlfVoQGY=)
2: YcXtDe2GJbMrZTMgcinyxGclmEg.crl (hash: dDmiQbe8bXsgQnx4jOUPkZD3WP6OmP6CWIkrlFQkcRs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e6:c3:cb:a3:1c:2a:ad:dd:ba:c1:3e:51:6a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61c5ed0ded8625b32b6533207229f2c467259848
Validity
Not Before: Jan 31 14:00:38 2025 GMT
Not After : Feb 1 14:00:38 2025 GMT
Subject: CN=7e6212643bb83628d917275109eeefe5c14c9793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6d:57:7c:31:5f:e9:ae:8a:45:95:b0:3f:60:
c4:dc:42:fe:b0:6a:30:84:6b:8e:80:23:6f:7c:d4:
d4:17:41:f0:e3:ea:a8:2c:fc:7c:92:d5:b5:c2:49:
30:3c:0a:71:8c:4a:32:ed:d3:17:86:01:70:ec:bd:
ce:77:98:aa:56:ca:26:4d:13:5c:b6:f9:0c:73:95:
1d:99:e5:1c:c5:01:55:4f:85:a1:f6:87:3e:9b:33:
98:36:da:65:e9:f4:9b:6c:23:c0:db:c6:15:2c:61:
44:e8:e3:83:b0:2d:9b:25:e8:19:ea:1a:0d:cc:13:
ad:00:5a:8d:f2:a8:f2:b3:28:7b:03:e6:4b:a9:10:
bc:f9:e3:da:22:bd:ec:34:ed:6d:ea:fd:9c:ef:7b:
bc:7a:d2:c1:9c:0c:69:f2:1b:58:d6:ba:6a:cc:d9:
74:88:e1:93:70:db:b4:dc:78:d6:9b:77:c9:37:85:
aa:1a:7c:87:7b:b5:74:a0:26:27:df:96:20:16:f3:
8b:ae:fb:b9:26:e7:49:5c:c9:a4:dd:c9:0e:7f:c0:
b6:73:83:56:a6:10:b9:cd:85:46:09:e2:33:39:01:
de:2c:fc:54:1b:2a:a9:85:5d:e8:73:51:b6:48:c9:
bd:39:c9:65:65:2b:20:70:47:9c:22:2c:f2:c2:32:
a1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:62:12:64:3B:B8:36:28:D9:17:27:51:09:EE:EF:E5:C1:4C:97:93
X509v3 Authority Key Identifier:
keyid:61:C5:ED:0D:ED:86:25:B3:2B:65:33:20:72:29:F2:C4:67:25:98:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcXtDe2GJbMrZTMgcinyxGclmEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:04:49:7d:8e:c3:de:ea:b1:d7:e1:62:71:fc:31:27:a1:b3:
95:22:89:bc:b4:5a:4d:30:e9:a9:82:c3:0e:cb:5a:b9:7c:4b:
11:da:f6:17:c4:92:46:6f:36:0e:7d:c1:4a:68:b3:f6:a6:db:
43:54:b4:68:3a:bb:08:87:1e:de:14:a0:6e:74:4e:a8:37:4c:
3f:c7:ce:13:92:41:86:d0:b5:62:0d:50:d8:47:7c:09:71:06:
13:15:dd:f5:9b:c7:a3:7f:4c:2f:67:d1:8b:44:81:28:43:9c:
03:a9:f8:c2:7c:d2:45:3e:06:2c:4a:8f:93:57:cf:45:57:03:
85:c7:74:fa:2c:68:9d:10:ba:9f:6c:66:8e:84:81:10:ec:66:
81:f9:2b:d5:d4:95:4e:a5:33:b3:de:3c:d3:cb:a1:fc:76:85:
e8:f9:4a:8d:bc:c6:9d:da:f2:d5:b2:ce:a8:72:66:c6:f1:b9:
51:97:09:50:e8:30:1c:3a:d4:be:e0:86:91:ed:b9:ae:e2:f8:
47:e5:63:d6:27:9a:64:23:a3:6a:ac:75:e3:be:6f:17:ef:4e:
55:e3:20:20:11:e8:73:e7:2a:d8:e5:9f:88:49:e7:bf:fa:63:
e0:83:1d:58:20:da:a0:95:5a:70:40:43:ac:00:a5:90:d8:18:
64:f6:70:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:12 2025 by rpki-client