Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
File: YGNeBMNML3ge6YChZR_2blEyvEQ.mft (raw, json)
Hash identifier: n7YLRJaG5eOyKOtl7AIsYO9zltikCF7pA8PmJEqFMcQ=
Subject key identifier: 1D:D8:43:E9:13:74:3D:A5:15:5D:2E:B4:94:17:32:45:A8:88:42:85
Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
Certificate issuer: /CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Certificate serial: 0194BC72B8FDC3ED960EAB968CC5165592EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
Manifest number: 0C21
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: 9f1DS6Cs5mwbsSirLF1iMiPFwB4.roa (hash: laOVozjgpPVLFsRSwM+OxBsO79TXqDgtN3WvmKu3704=)
2: YGNeBMNML3ge6YChZR_2blEyvEQ.crl (hash: as079qO44xslStNjClqRnkz1HCnXlzJ/pJKdwkzIFKA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b8:fd:c3:ed:96:0e:ab:96:8c:c5:16:55:92:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=1dd843e913743da5155d2eb494173245a8884285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ab:bd:70:d7:ca:7d:b4:96:66:78:59:95:5f:
fd:7f:26:4f:1f:1e:6b:64:04:b1:8d:7f:90:eb:a5:
07:92:cd:49:ad:8b:6b:b3:c7:a2:10:c6:eb:42:70:
06:2c:e4:49:e5:fa:8c:29:a2:d8:34:6e:fe:bd:bc:
0b:bd:b7:0d:9c:a0:36:f9:8d:41:30:aa:15:30:22:
e4:50:7b:ad:05:d3:5a:a1:16:58:e1:3a:17:61:85:
17:b1:49:57:70:82:e1:ac:96:47:3d:88:15:32:fe:
af:a6:0b:2a:d2:ce:95:a1:d8:5c:5d:ac:89:6d:51:
36:21:5e:b2:62:5e:13:ee:66:f4:66:37:90:b3:03:
5d:55:07:b4:98:b2:f5:01:5a:95:67:21:e2:77:82:
f6:e9:4e:e0:2d:3e:24:81:28:70:ca:38:57:5d:bf:
ae:40:25:98:5f:18:dc:48:b6:0d:ec:26:83:76:1f:
92:b1:82:a4:40:ab:ad:3a:91:5e:ab:b2:17:85:8d:
8f:d0:3f:2b:7a:2a:3f:21:36:22:6f:f6:15:8f:e8:
24:e9:a3:a1:cd:40:7d:14:81:c0:5d:e6:1a:6b:59:
06:a8:4a:94:69:89:b2:cb:d7:37:64:84:6d:3f:e7:
82:c0:b1:f1:fd:07:2e:07:13:e1:69:53:51:e6:eb:
8b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D8:43:E9:13:74:3D:A5:15:5D:2E:B4:94:17:32:45:A8:88:42:85
X509v3 Authority Key Identifier:
keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:2d:75:8d:9a:5c:ee:c7:34:a5:81:8e:f0:36:40:53:17:5f:
e7:17:17:42:ec:57:39:42:fc:c5:8d:fd:ac:e9:6f:5d:73:3e:
87:c9:64:4c:78:b5:87:83:74:e7:8e:bd:ed:82:3d:7a:87:2f:
7d:95:ed:5b:76:b9:22:b4:e7:70:d0:ee:8a:7b:b8:30:c9:c9:
3d:da:bb:1c:0a:17:67:b3:62:0e:8c:dd:d6:68:53:00:0f:fc:
66:a5:6d:85:49:bf:4d:fa:ef:dd:f2:60:31:3b:d4:1f:b9:af:
9a:39:29:b0:34:fd:4b:7a:2f:76:60:2a:b3:5b:32:1c:0f:cc:
64:92:67:66:06:cf:5e:4e:05:db:7b:dc:49:85:16:4d:e7:c7:
04:c9:23:e6:aa:af:79:d5:df:f6:0f:09:78:22:6c:f6:9d:fd:
38:07:c2:cd:87:d7:3f:78:49:63:f9:56:08:d8:03:0e:ca:aa:
76:78:9c:7f:0c:76:cc:58:b0:1f:c2:2e:9d:50:48:86:10:97:
59:74:0c:e4:af:3e:0e:82:61:15:29:a5:c1:68:65:e4:71:f8:
b0:5e:dc:48:0a:89:3a:4e:72:1d:c6:b0:2a:a6:4f:e9:73:57:
7f:96:2b:01:65:02:b2:ff:f5:1a:db:a5:bd:ae:92:8d:a2:d8:
46:04:90:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:04 2025 by rpki-client