Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
File: YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft (raw, json)
Hash identifier: UvOy8IqOIJKjUfzgB2GuBNjWHRcPM1qsIGrpGvUY3BM=
Subject key identifier: D1:A4:C3:BB:F0:05:D3:16:51:9B:D6:3C:5E:D2:DB:F8:57:BA:DB:C6
Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
Certificate issuer: /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Certificate serial: 0194BC3C3997EBA2310DA4525229AC9ACB56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
Manifest number: 0BC4
Signing time: Fri 31 Jan 2025 12:00:50 +0000
Manifest this update: Fri 31 Jan 2025 12:00:50 +0000
Manifest next update: Sat 01 Feb 2025 12:00:50 +0000
Files and hashes: 1: 02GOfZbMNICRgOj9G0mIGs2I4vI.roa (hash: 7F9bn3m0UkAUH0crYUw2LxUKO5iFZMnEUQvddNdyyzY=)
2: 1wktyXo13sUHT1rATESg5FNiuyk.roa (hash: hCP3ZMMgaFh8n4sim6mqZazNXZKLtUNK2izenZ+UBc4=)
3: YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl (hash: m3b2d5mBbajjdcIHixONP+4mdXGylQAWVDKFn6gBQGo=)
4: yxSHMNq1K4qzrK8RBcry_vpRL0Y.roa (hash: ES8XPk3Ggq1Zs2KaMQwv/Lx7ybdkBhCiefUow9lLBOk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:39:97:eb:a2:31:0d:a4:52:52:29:ac:9a:cb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Validity
Not Before: Jan 31 12:00:50 2025 GMT
Not After : Feb 1 12:00:50 2025 GMT
Subject: CN=d1a4c3bbf005d316519bd63c5ed2dbf857badbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:18:4c:fb:2c:82:bc:8b:ca:f8:70:b5:7d:b3:
44:aa:36:3f:b7:1c:18:dc:93:b1:ff:ef:f7:c3:4f:
90:bd:ff:dc:b0:eb:6e:24:ad:5b:41:ea:4c:35:48:
c5:70:f1:01:52:98:a6:5d:1a:9b:51:1e:7f:18:00:
8c:45:26:df:a4:19:42:c6:10:e1:0b:f8:63:fe:9b:
aa:66:dc:f7:51:6f:45:08:fb:e6:93:d6:c8:47:54:
35:7f:c2:af:06:63:4f:f7:81:df:7a:dd:4b:37:05:
3f:c8:17:7d:c1:3f:e8:c0:a7:76:02:9e:85:56:65:
46:89:36:4b:82:29:3a:55:ed:af:b6:9c:98:62:bc:
68:80:29:4d:e6:61:b7:6e:2e:da:f5:4f:a4:5f:9a:
af:ad:b0:cd:4c:9d:26:e7:74:6d:16:ef:c1:9c:5c:
8d:69:f8:92:94:68:2a:f6:e7:0b:15:a2:f7:5c:3e:
e8:a0:cd:85:94:f3:19:9c:59:da:b3:e3:88:32:72:
83:c1:50:52:90:81:87:25:6b:c2:00:0a:91:09:1b:
fe:90:29:90:ef:c2:8f:1b:3e:dd:42:ee:91:d3:a5:
2a:0b:43:94:40:6f:c9:08:50:8d:f5:a9:32:f0:dd:
7e:c3:f7:44:d8:54:27:f8:4b:75:f4:e0:3f:8e:1b:
92:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A4:C3:BB:F0:05:D3:16:51:9B:D6:3C:5E:D2:DB:F8:57:BA:DB:C6
X509v3 Authority Key Identifier:
keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:bc:6f:51:04:34:af:31:df:41:7e:4a:be:48:ea:83:94:e3:
58:21:a2:48:11:0f:3a:f3:ac:cc:2b:11:d4:b6:38:82:76:a9:
94:ef:85:cf:cb:04:8d:14:72:f6:94:34:6a:3a:ed:78:1e:6c:
d7:03:4d:4c:7d:a4:95:b5:4d:bf:16:2b:50:b6:bf:af:29:bb:
0d:02:f6:c6:df:49:08:27:a0:7f:c5:2b:c9:2b:04:8c:f4:3d:
19:44:9c:8f:16:16:9f:86:3a:84:d6:ae:08:d6:64:da:98:c9:
16:48:51:97:d8:88:a4:d9:9f:a3:4e:74:47:8d:e7:97:66:f8:
89:d5:c2:6c:80:b9:9f:0d:cd:58:b0:97:3f:a9:09:f8:6a:2e:
c3:bf:7a:fe:1f:7d:86:81:b8:a6:39:53:b7:15:b4:4a:13:f9:
99:ed:97:93:a1:0d:03:74:a4:a2:34:fb:85:ea:0a:26:12:f5:
12:a9:3f:b8:b5:84:5c:02:e0:a4:ca:6d:c6:c2:8e:f8:12:68:
56:b2:83:eb:b0:ec:28:66:4d:78:b1:ed:5f:43:0b:e0:d5:79:
a8:ca:51:2f:fb:89:32:92:15:92:09:bc:4f:2c:a6:8e:88:ca:
28:74:11:c2:b2:b5:1a:35:fc:26:7a:ad:74:30:16:26:58:35:
38:35:6c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:08 2025 by rpki-client