Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
File: YWAUEB_7zmdROc1MAroAY0rYbgI.mft (raw, json)
Hash identifier: YjySEgGApU2DWcGSOm2xlJ7sTGcGezopIuJfjE6YezQ=
Subject key identifier: 63:CD:11:24:2F:BD:9E:C5:05:1A:81:CB:8F:39:73:C6:6A:22:3B:9F
Authority key identifier: 61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
Certificate issuer: /CN=616014101ffbce675139cd4c02ba00634ad86e02
Certificate serial: 0194BC04B5C678306EF143CE95993891FB27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: 7vWonm9bF5IcZc4b_JwarXdqm9s.roa (hash: hJURA5qklA/bOkBC37NwKVvc+QzGI8iekbBVx5yVdVA=)
2: YWAUEB_7zmdROc1MAroAY0rYbgI.crl (hash: RBnFKvf9fQSMKMMslEgm7DHwkBl4P6cRRVN+A5GStwU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b5:c6:78:30:6e:f1:43:ce:95:99:38:91:fb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=616014101ffbce675139cd4c02ba00634ad86e02
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=63cd11242fbd9ec5051a81cb8f3973c66a223b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:94:71:a9:cb:15:8b:c1:a4:ae:98:38:92:
fe:03:15:72:db:cf:4d:1c:a0:76:41:4a:53:6d:8e:
f4:9e:b4:68:7f:d9:58:c4:0a:44:d0:30:5b:03:08:
2c:6c:07:70:1e:21:87:32:61:fb:7d:8c:39:44:93:
3b:92:51:c1:b2:fd:2e:91:c2:38:37:b7:95:e2:7d:
5c:55:45:35:29:aa:ed:a8:d5:74:c0:e5:8e:39:9a:
e6:d0:69:54:ff:6f:48:51:9f:47:5f:9d:ed:c8:64:
ae:f7:f6:a8:cb:ff:85:fc:1d:57:f1:aa:48:a4:6d:
92:08:d8:6e:96:a4:a5:6c:36:ca:8e:2c:67:4b:fe:
ca:15:6a:b1:37:91:95:fe:09:5a:43:b3:0f:20:61:
8d:1b:e0:db:63:08:02:8a:52:45:7c:64:7b:9f:0c:
9b:67:d3:22:a9:69:5f:6c:18:70:f8:82:c9:06:4f:
ff:29:de:c9:3d:64:9d:eb:16:8f:51:0a:7a:b6:85:
9c:66:d0:6c:d7:7c:a3:a8:73:33:3b:14:a1:91:5f:
35:2f:fc:ac:56:5e:fa:b7:3d:18:f4:d8:90:8a:e8:
4e:d3:25:b3:82:6e:8b:3c:2e:6f:93:85:6a:93:72:
40:98:0a:82:f0:68:60:0c:5e:74:ba:b9:ad:fc:ce:
62:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CD:11:24:2F:BD:9E:C5:05:1A:81:CB:8F:39:73:C6:6A:22:3B:9F
X509v3 Authority Key Identifier:
keyid:61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9e:5e:27:b4:33:b7:b7:ca:11:59:81:0a:47:19:4c:0a:1f:
60:07:ca:f8:58:28:59:85:78:2c:8e:fd:10:a7:c6:6a:2e:55:
d7:8b:8d:e7:fe:91:1d:98:a8:27:bf:17:dd:ab:55:6c:e3:07:
12:dd:e6:6a:1e:b9:75:06:0d:76:6d:7a:3d:86:ee:fe:b1:8e:
cd:1c:0d:c3:38:9c:c8:ab:7c:91:c0:41:58:78:4a:9c:19:5e:
b5:b0:0b:89:e1:a5:c6:58:b5:af:03:16:cf:d5:54:dd:b9:f4:
3d:c2:58:24:e2:bc:50:26:c5:ef:9d:e9:48:74:89:ba:42:b0:
aa:c8:c6:9d:1f:95:78:a4:c7:bd:d6:e7:ab:af:13:f7:c1:3d:
ee:7b:90:b6:b6:5c:ca:04:68:4b:97:53:88:d4:91:24:f7:2d:
ec:3c:d6:86:00:39:39:01:7e:d3:b3:ac:8c:5c:96:47:0f:65:
e5:95:0e:b2:ef:b8:5b:f5:4d:c5:bc:9e:6d:94:d5:58:c3:79:
fb:8e:d0:f3:d6:76:ea:7d:30:23:11:f7:96:00:b9:c6:1b:63:
68:93:ee:13:99:ea:08:51:ee:13:a1:40:9b:30:eb:0e:54:aa:
b9:ed:4f:e4:71:ec:33:5a:00:da:f7:f9:b0:b1:54:07:72:f4:
b9:3d:88:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:54:38 2025 by rpki-client