Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft
File: YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft (raw, json)
Hash identifier: QL9TUv0acNEEy2iQtwbg5qnkVCNh3unldqE0SNrORZ8=
Subject key identifier: 71:BF:93:B7:D7:49:FE:F1:EC:C6:2F:F0:C3:EB:C6:63:41:DB:AC:E7
Authority key identifier: 62:7A:99:50:9E:D5:1D:F9:3A:33:F2:A4:E2:FD:66:2D:1C:8D:66:0B
Certificate issuer: /CN=627a99509ed51df93a33f2a4e2fd662d1c8d660b
Certificate serial: 0194BCAA12D99624545A45F3312DFDBA2203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft
Manifest number: 18
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: FRrrM4yAfnu6pnFh5wowlvqVDWA.roa (hash: Hv8/4ynB8VDf7OX62BWXwwqyCndg3mMaA+WdwhpJSlw=)
2: YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl (hash: QXVcu3VBIRNfG1eNx5sfBNmdQc7NJHAhdIT+glsYpNA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:12:d9:96:24:54:5a:45:f3:31:2d:fd:ba:22:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=627a99509ed51df93a33f2a4e2fd662d1c8d660b
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=71bf93b7d749fef1ecc62ff0c3ebc66341dbace7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7e:c0:4c:b5:ec:8d:e6:a0:9c:fc:61:a7:1c:
4c:e6:42:a2:31:1c:e7:5a:47:8a:64:d8:8b:9a:b8:
3c:d0:ec:b0:82:9d:e3:d1:d4:c5:d9:e3:6f:10:e9:
0a:83:ff:b7:77:04:23:25:e0:f5:70:73:fe:d8:6b:
6c:45:17:df:ca:18:04:55:70:86:3a:48:f5:3c:05:
59:f9:f1:5b:60:cc:0e:7d:89:33:71:47:72:21:65:
04:83:e4:5f:22:ff:2a:f2:7c:88:c8:47:cb:11:db:
29:f4:97:23:5f:7f:c4:5e:95:29:d6:49:da:ac:02:
8f:1e:ec:2c:ba:49:d7:a7:46:6e:b3:e5:ff:f5:c4:
0d:92:b8:80:d2:02:9f:70:af:a5:20:6f:28:80:40:
18:3a:98:e6:8d:5a:65:54:44:94:6a:ed:d5:5a:62:
2d:17:ce:6d:d0:10:8e:23:9c:58:54:32:3a:88:05:
54:be:77:71:81:ef:87:06:ed:b1:cf:65:67:74:9d:
fb:f4:9d:a2:e8:96:73:b9:66:47:f1:12:c5:41:22:
81:2a:69:ff:72:35:8e:79:f5:be:6d:99:db:a3:63:
15:c0:a2:1e:94:4b:00:e2:34:8d:89:c0:95:17:9c:
5b:8a:37:20:7a:e9:c8:6e:ac:fd:4a:fe:ba:02:e9:
d0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BF:93:B7:D7:49:FE:F1:EC:C6:2F:F0:C3:EB:C6:63:41:DB:AC:E7
X509v3 Authority Key Identifier:
keyid:62:7A:99:50:9E:D5:1D:F9:3A:33:F2:A4:E2:FD:66:2D:1C:8D:66:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0b:cd:d9:d3:70:26:06:1a:e7:9a:d8:ba:57:19:44:a9:d4:
eb:ac:20:95:4c:3c:f1:82:10:0b:d8:60:5a:77:f7:84:c1:16:
29:2d:4d:ee:9e:ff:ef:3c:85:a4:cb:73:e7:64:60:2e:c9:89:
d3:04:c8:9d:7f:0f:c1:74:13:e0:5d:95:78:b8:89:6f:e1:67:
0b:1a:c5:45:f4:49:76:fa:e1:fe:6b:83:b9:5c:bb:40:fd:30:
cd:60:70:c1:7a:64:19:10:ee:95:78:c3:fd:d9:ec:31:20:a3:
6f:0f:b4:eb:4b:f5:95:b5:e4:50:45:27:15:1e:15:58:a2:85:
cd:06:79:25:1b:d4:b7:5a:2b:5a:1a:c4:58:74:4a:c4:70:64:
4f:e0:6f:e1:58:d0:07:8b:a6:63:ad:e3:77:0b:69:1a:6d:5e:
98:79:75:71:94:42:0b:8b:78:4e:90:2e:f6:46:55:f1:6f:28:
fc:43:17:94:cb:8b:5a:be:35:80:3f:31:86:ba:31:72:f8:05:
d9:7a:f0:68:26:44:c4:e9:0a:ce:69:ad:a5:1e:4f:b5:27:5d:
f9:6e:9c:37:80:a5:95:27:fa:71:fd:e1:49:87:b1:4b:c8:90:
20:e0:28:3e:e6:d1:e4:91:c8:0d:e6:b8:dd:f8:dc:2e:24:4e:
8b:50:b5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:56:32 2025 by rpki-client