Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
File: YL83NiAUbm8piugtLIqDccrLexs.mft (raw, json)
Hash identifier: waWB3YA61ObhZnLEfN0N8Pn/L64u5EPEqjhnclCCinI=
Subject key identifier: 01:7A:08:0F:5D:F6:FE:37:F5:F6:FB:FA:CF:11:74:09:C9:AD:02:3A
Authority key identifier: 60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B
Certificate issuer: /CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b
Certificate serial: 0194BBCE99E1DD98C40FF8309F2E28B5340F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: FcPpw1IibzSy4BenkulclpDum4U.roa (hash: HSUDUncC0CCpqaUKBhWSJTD0GmSsEAzCocsfF6H1tqA=)
2: YL83NiAUbm8piugtLIqDccrLexs.crl (hash: CfwCMj2OIgnYTNCLYRXeU3UkqcLcXos6JOPyQcPPOiE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:99:e1:dd:98:c4:0f:f8:30:9f:2e:28:b5:34:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=017a080f5df6fe37f5f6fbfacf117409c9ad023a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:56:44:56:d5:5a:a1:27:e5:91:75:c2:0d:84:
2c:91:f6:76:77:59:8e:35:31:2d:72:d0:dc:f1:55:
1d:55:b6:e4:96:39:cb:ae:f4:40:33:87:d8:5c:cc:
f5:1a:68:5b:d7:2f:c0:86:c8:47:d4:89:d5:a4:6e:
50:90:44:29:82:8a:ee:c9:3e:ed:5f:11:78:a3:b8:
23:5a:ca:be:f7:c0:33:52:b7:6b:bb:cf:2f:81:ea:
c2:43:e5:00:86:24:96:d6:e6:97:0c:fd:be:b2:1d:
96:46:81:c3:8b:d2:4f:80:13:96:e1:5b:f5:4b:2e:
86:e7:95:75:2d:6e:22:d3:7c:8e:d8:02:31:16:30:
0b:dc:06:7a:ed:bc:ae:65:b0:ec:6b:43:9e:22:7a:
d0:a1:15:7d:ec:8b:4e:06:34:9a:8d:88:e2:a5:d9:
65:32:af:b8:de:14:df:6d:cb:4e:b3:e3:f5:b5:66:
21:ec:1f:27:fc:71:9c:cd:43:10:9d:f7:6c:5a:b9:
be:42:43:dd:55:31:a2:28:8d:7d:ce:45:d6:aa:7d:
6c:bf:01:2d:9c:e0:f8:c6:b0:2c:bc:35:e5:58:7c:
cc:64:17:e4:0e:30:5f:46:6c:20:d5:2f:5b:02:1b:
01:f6:c1:8b:9b:f2:d5:49:35:76:dd:a3:02:d1:a0:
88:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7A:08:0F:5D:F6:FE:37:F5:F6:FB:FA:CF:11:74:09:C9:AD:02:3A
X509v3 Authority Key Identifier:
keyid:60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:38:7d:8b:79:d9:05:59:31:b6:51:19:4c:cd:4b:00:cf:29:
e3:2d:99:e0:f4:08:98:d1:6c:83:6d:fa:90:27:dc:eb:53:1a:
e4:d7:34:af:b9:35:05:ba:37:cc:77:83:42:eb:5e:bd:db:4a:
e8:f2:72:48:bf:dc:7e:99:38:7a:96:e3:3e:94:96:c8:9f:80:
e4:ea:e1:8b:f9:ad:71:dc:1c:2e:62:83:ae:72:c7:84:2e:ab:
5d:12:dc:7a:f9:2d:0d:19:b3:0f:37:1c:99:de:1c:e8:25:ea:
66:4d:c2:f4:28:52:50:26:df:5d:13:55:95:3a:96:17:39:61:
dc:53:a0:ba:1b:10:58:b0:77:7b:d4:e6:d0:df:e7:22:f5:8d:
6a:7e:b0:d8:b0:71:b0:7e:bd:16:7f:f0:23:f6:96:fe:3e:32:
eb:8c:91:d2:aa:8f:b7:34:69:32:c3:63:54:4b:21:8f:64:1a:
df:0e:ff:c1:25:ce:eb:b9:19:a5:a7:1f:ae:01:77:fc:28:cd:
49:87:e0:8e:09:7d:e5:7d:91:bf:9c:10:1c:42:d0:14:40:86:
53:74:cd:e0:69:8d:6a:89:22:25:ab:44:a8:dd:59:55:21:f0:
98:71:c3:5b:8f:37:ec:68:5f:99:39:c2:19:09:3a:28:b9:e0:
f7:cd:35:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:48:43 2025 by rpki-client