Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
File: YaXSF3WehhaW_HftmqY7lO2zvn0.mft (raw, json)
Hash identifier: VMAsxjoJFOFwIC50slzZNfxCTzu0Un9l5YplJT+bEnY=
Subject key identifier: E5:A0:C7:B3:9E:56:CA:43:E8:9E:BC:56:A8:E1:2D:8A:D8:0F:26:C5
Authority key identifier: 61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
Certificate issuer: /CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Certificate serial: 0194BBCE38C0064A784BEC8DC243B628606F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: 5fuh3MDvvFTdM9YPWplIlmW8ZkA.roa (hash: Wdi/0+eUolZTOBljIE3hewam0WUu332lXIc8cs32Fgk=)
2: 925S4SchOi83vL3V68Y_AUuJSD8.roa (hash: 6EULq2ShinRvQFwY+uALe+ivLl2vWfr/F3fyELn3cug=)
3: PGmGsgYp4SpOgDQPzfkm2Kp84ms.roa (hash: QvQzg0nCw1e7QpH5gXcvQpoprtCI6UOH6zwCxDuFkv0=)
4: YaXSF3WehhaW_HftmqY7lO2zvn0.crl (hash: 4d+T1KpsgnuIWWMS38C+dU23y+4uAYiEaRqbPybF7ew=)
5: z3s2kSvc4H2ywLCnLljgXCeMKHc.roa (hash: pgMrP+tE9sQxVvQRywnzdq3UOn28MH01XXGUWXVHask=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:38:c0:06:4a:78:4b:ec:8d:c2:43:b6:28:60:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=e5a0c7b39e56ca43e89ebc56a8e12d8ad80f26c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e5:0a:d4:ad:d2:a6:ef:ac:1c:bb:dd:9c:fe:
49:9f:9f:96:9a:8e:82:b7:87:99:d8:38:54:92:98:
7e:c6:f9:9b:4c:fe:27:5e:ca:ef:64:2d:c9:81:3a:
00:65:36:5c:fe:3b:7f:63:fa:2d:06:84:20:c1:aa:
2c:a9:88:17:b4:df:51:31:78:67:4e:8a:03:51:66:
25:5c:ca:2c:ab:0f:e9:df:ab:ad:02:7e:ab:40:52:
eb:50:89:ed:58:ca:6e:b2:69:0e:40:de:cb:19:2f:
d1:5b:5a:04:80:dc:15:7e:43:b2:1c:d2:1b:72:40:
59:d3:4c:8b:a6:3a:9b:08:40:77:d2:c4:e3:82:33:
a7:45:d9:5c:d2:05:86:24:35:b9:99:5c:5d:7a:57:
9d:05:0b:6c:fe:cf:c9:b3:cc:0b:92:a6:cf:77:0f:
1e:ff:46:c0:ef:74:6d:70:f7:35:7c:f5:72:13:21:
2b:98:8a:0c:5a:67:54:71:88:2c:71:9b:f7:89:be:
41:5d:36:fc:ee:0f:1c:0b:eb:ac:99:17:34:1e:ce:
c4:74:ee:3b:47:05:b2:8a:5e:3b:3b:d1:df:d2:b9:
07:ac:65:d8:b4:58:a1:57:2e:49:71:74:f5:f2:55:
26:94:01:fc:fa:6d:48:7b:56:86:3a:3f:a2:03:9c:
6f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A0:C7:B3:9E:56:CA:43:E8:9E:BC:56:A8:E1:2D:8A:D8:0F:26:C5
X509v3 Authority Key Identifier:
keyid:61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:73:00:a6:f2:16:3a:e8:ca:76:25:d4:67:18:c4:3b:2b:0d:
cd:ab:ba:19:50:5c:e9:db:06:29:5a:10:4a:7b:ec:d2:a9:1e:
6d:a8:20:4b:02:82:57:ca:44:f1:3f:3e:2f:eb:02:6e:1d:b7:
0c:b7:e1:c4:5d:35:57:6a:73:3c:e4:23:9a:b4:97:78:9c:87:
54:3d:22:cf:80:cb:51:91:ef:7e:73:cd:72:3c:c3:c2:65:53:
b9:9a:0d:6c:94:58:8c:6c:47:1e:51:2c:b3:52:a3:bd:d2:a9:
55:c9:57:f5:24:43:e6:21:59:03:a4:36:bd:0f:e8:5a:81:b5:
41:05:02:9a:75:6b:9e:c6:8d:1a:12:cb:47:2d:04:8b:31:f2:
09:63:c4:26:c2:4d:00:19:1f:ab:7f:62:8b:32:6a:a6:a4:90:
80:dc:88:e7:64:a8:f7:63:c2:6f:9d:f6:ec:0c:76:7f:31:c1:
b7:49:f4:fb:ad:ed:49:df:e7:23:0f:7c:de:37:ec:9e:ff:65:
c4:95:2f:59:4d:61:28:9e:a7:58:80:a5:7d:68:dc:1e:7a:18:
f8:13:3f:ec:97:93:eb:1d:01:55:57:ee:b8:19:45:48:9a:e1:
11:4a:d7:05:75:50:5a:a7:db:10:85:9a:4e:2e:66:cd:65:b7:
8e:22:f0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:35 2025 by rpki-client