Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
File: YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft (raw, json)
Hash identifier: k4T/h1IsNBAWXM/Ao3p6I+XcX4BDgEz5fnbJRxvCNa0=
Subject key identifier: B9:40:12:5E:CF:E4:81:BD:66:8C:3D:0C:80:8D:A4:3C:58:FA:BE:25
Authority key identifier: 62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50
Certificate issuer: /CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
Certificate serial: 0194BC3BC0FADF9FC23FB1BAFC28FCC3DF3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: Fd7jj4UgNX8KUEunLGyTOECk2zM.roa (hash: 4ykrgJNWkElQuXhdhPDtDMLnIYLOev4Sm6TYtDwClXU=)
2: YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl (hash: Xd+eGMOn7x4w+fuSFel7v5w4ZcVTrnO5rzgGOMzgJbI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c0:fa:df:9f:c2:3f:b1:ba:fc:28:fc:c3:df:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=b940125ecfe481bd668c3d0c808da43c58fabe25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:4c:e4:bc:eb:96:91:69:6e:a5:e0:47:8b:
8f:75:35:c5:56:25:ce:36:53:18:96:c0:2d:e8:bf:
64:54:73:b2:99:ff:1e:c7:7d:a5:ce:f5:27:8e:c6:
bb:2f:43:a7:24:b5:87:a9:03:20:26:93:fa:69:c4:
bd:c7:df:80:b2:25:38:9f:5d:f6:57:7a:97:2d:ac:
8f:1d:aa:0a:a6:38:cb:12:8c:8c:ef:26:5f:52:c4:
62:80:5e:72:5b:31:83:f6:5c:23:96:97:a2:c9:d7:
4f:59:c6:c0:93:eb:69:6f:96:3e:f2:ca:62:f6:b8:
b9:8c:e3:02:46:5e:a2:6e:e7:7f:2e:ef:64:94:6c:
56:be:b6:4e:33:7c:63:b3:a0:6f:30:a6:c9:21:25:
b3:46:71:df:d3:2d:36:71:22:c6:23:7d:53:32:36:
02:2b:bf:c8:9d:82:a4:a7:55:a4:a8:c9:6e:e3:b1:
d4:7f:26:09:bf:05:f0:4f:24:bf:6c:47:2a:b9:cf:
e4:34:38:23:e5:23:8d:de:19:04:21:41:cb:79:83:
9d:4a:c3:29:e8:fc:2b:fe:12:ae:b0:6a:aa:35:a3:
ba:1d:50:f0:46:1d:86:ab:77:a3:81:54:6c:f3:81:
37:cc:0c:c0:83:ef:b1:f6:9a:f4:2f:9f:f4:6a:24:
6b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:40:12:5E:CF:E4:81:BD:66:8C:3D:0C:80:8D:A4:3C:58:FA:BE:25
X509v3 Authority Key Identifier:
keyid:62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:2b:e5:34:44:79:b4:d2:36:a9:f5:90:6c:ed:b4:24:b3:ed:
89:31:e8:c9:ea:10:3a:79:46:32:9f:75:42:f5:1b:11:78:9f:
66:60:64:f5:b6:00:07:a1:df:45:ee:60:7b:1c:a0:5f:9f:b2:
a0:46:1d:8a:33:62:e6:fc:64:d9:21:e3:3f:33:e6:c9:9d:94:
5e:6f:ba:f3:70:8f:2b:bc:c4:b4:dd:6d:e7:8e:d2:3b:d0:aa:
69:9d:10:57:70:21:65:55:51:67:f4:87:1f:31:5f:70:ef:d8:
6f:4c:eb:d8:e1:26:16:ba:9c:b4:3a:6f:b3:d1:38:9c:b6:c3:
ee:18:63:72:6c:01:86:58:d9:0b:11:0a:06:15:25:a4:e4:a8:
26:72:23:fb:77:94:8d:d9:09:58:8d:de:8f:d8:8f:a7:1c:88:
0b:67:13:64:f8:00:c0:9e:ed:49:b2:9a:5a:9a:40:09:38:62:
c6:f0:52:2c:4f:44:96:5b:9b:c5:b0:26:bb:c3:03:62:98:e3:
67:34:0e:d9:54:2f:90:6d:f1:41:15:6d:22:29:73:00:4d:0f:
6b:d3:39:93:0e:a0:a2:52:8f:88:75:1b:ff:cf:5c:8b:5e:50:
2a:dc:3c:04:23:eb:ff:16:ac:89:44:ac:1c:81:9c:d1:c7:8e:
be:43:85:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:17 2025 by rpki-client