Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
File: YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft (raw, json)
Hash identifier: IoHgp8Ziyc+sr/ButTHxcXSo227sCiyRws/hvWOt1G8=
Subject key identifier: C6:AE:50:2B:52:FE:B3:33:52:6A:E9:96:3A:6A:32:74:68:F2:DD:FF
Authority key identifier: 61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3
Certificate issuer: /CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
Certificate serial: 0194BC3BE62FC2D370EE2C068CBE43DCDABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
Manifest number: 0AEF
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl (hash: UZKMOFiXR5Bq2h4x7fYqn94DQtgBEkMh9ghyu1RIXgo=)
2: tm8Rt7Sc2c1PcYKasPfyO3eBX9M.roa (hash: fWTds4doBQAqbglPwbw6IGwEFIO7de7/7OMc6gbtl08=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e6:2f:c2:d3:70:ee:2c:06:8c:be:43:dc:da:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=c6ae502b52feb333526ae9963a6a327468f2ddff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:65:97:2c:c5:8f:bf:9a:8e:5e:61:4c:d6:d3:
05:62:d0:80:60:b6:e3:9b:39:94:ec:4a:59:d9:79:
47:68:39:44:da:da:e6:e2:41:9d:d3:1f:50:db:7d:
7e:62:dd:ed:3a:f7:b6:d9:d6:84:19:cd:52:a2:a3:
88:7c:28:98:ab:70:ee:a7:21:10:4a:a1:76:8f:e6:
0e:53:72:82:d5:81:80:1e:03:11:b5:ae:cd:69:70:
e4:0b:bd:97:ff:21:ca:e3:4d:0b:a6:81:6a:9b:00:
84:50:7e:e0:0d:95:f4:e9:a1:a6:03:f1:27:a5:5e:
bf:63:0d:52:1d:cd:fe:29:4e:31:80:00:41:7f:d2:
1e:77:cf:5c:89:fd:93:8c:8a:71:da:ad:c1:62:9f:
2a:e2:2a:9b:eb:62:6d:d6:9f:eb:68:b9:8c:9a:f3:
54:ee:8a:f7:e7:4d:63:de:0f:74:e2:7e:af:ae:f2:
06:44:2b:bd:46:30:b5:94:4f:71:87:88:24:5b:5b:
a8:9e:aa:dd:fe:11:b8:66:5a:f5:84:68:a9:1f:6e:
93:84:d9:a8:33:11:78:ed:69:27:a1:20:0d:37:06:
97:5b:91:20:1d:ea:b0:58:3e:ec:cb:27:e4:45:5f:
8a:03:fb:ad:b7:b9:57:d1:e9:79:1e:d2:bf:6c:23:
45:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AE:50:2B:52:FE:B3:33:52:6A:E9:96:3A:6A:32:74:68:F2:DD:FF
X509v3 Authority Key Identifier:
keyid:61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:60:2c:e3:8d:64:2f:f9:65:82:60:22:11:4a:f2:14:d1:35:
be:20:88:91:e1:ad:29:2d:4f:89:7d:ef:f5:75:76:80:d0:46:
23:20:77:d2:09:ba:71:4c:65:a2:9a:f3:4b:68:58:d3:de:fa:
46:20:37:9b:97:8b:f5:ac:29:7c:fe:f6:f3:0d:3f:d7:a7:c1:
92:36:45:66:3d:8d:f3:d1:b1:65:01:08:69:1c:13:85:d5:9e:
f5:4b:02:6e:ae:03:36:c2:32:ec:e4:79:22:6d:55:2e:f4:c8:
c4:17:50:97:63:66:c9:55:5c:4a:5d:c6:37:a4:e5:24:d8:73:
54:d5:79:f1:b7:45:4f:70:37:e8:af:54:35:b9:d4:dc:97:a4:
9c:28:41:a0:18:14:a5:92:1c:0d:99:e1:ad:5b:fe:3f:a3:64:
da:92:db:6f:f7:03:35:4b:2c:6e:c4:1c:19:02:68:60:d0:8d:
e3:00:9c:32:ba:5e:54:54:09:1d:37:d1:d8:b3:32:0f:ca:e0:
62:f7:84:04:8b:24:94:52:fb:b8:49:d1:bd:62:48:81:2c:b2:
6a:b3:9b:1e:9f:ea:5d:fe:29:31:5e:4e:75:d8:fa:22:00:a4:
aa:e3:6f:5d:84:3c:9a:a6:0b:16:2c:af:60:6c:bf:e6:cd:b7:
b2:13:0f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:00 2025 by rpki-client