Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
File: YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft (raw, json)
Hash identifier: T0h9FnxZlkcgJWCuEk6Fsu37a8d1s+WujgweOCY/CGc=
Subject key identifier: 60:C4:D8:4E:38:84:06:A5:80:28:21:AA:63:A9:47:37:21:28:82:1E
Authority key identifier: 60:34:56:1C:03:9A:C6:45:0B:EC:8F:D5:95:C1:48:CC:77:0A:A0:36
Certificate issuer: /CN=6034561c039ac6450bec8fd595c148cc770aa036
Certificate serial: 0194BD4E90E46691EC5DF4CD581E34B15006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
Manifest number: 0109
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: 7xDyuzwf2JBogicNs1WCGieFUKo.roa (hash: KauAldM8NLiLBGjbpKvhWpk4brd0+mLiraKkETNshfA=)
2: YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl (hash: LukkDcD2tRRbgyPAVS9NjG9m3abjZOSe8ZjeD7BZKqU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:90:e4:66:91:ec:5d:f4:cd:58:1e:34:b1:50:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6034561c039ac6450bec8fd595c148cc770aa036
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=60c4d84e388406a5802821aa63a947372128821e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:68:2c:ff:a8:b8:5e:bb:f1:ce:ab:ad:33:05:
80:07:6b:ab:3f:a9:2c:0c:1e:0d:c9:ac:29:f7:08:
17:1e:0c:06:fb:96:db:98:91:58:87:74:03:ee:d0:
75:3a:12:22:59:f9:3d:93:f0:9b:e3:53:41:eb:08:
b4:ec:ab:b2:84:90:a1:31:cf:84:3e:7f:38:a1:9b:
2a:27:cb:10:6d:a7:06:5c:e6:4c:0f:e2:b8:e2:97:
dc:df:eb:60:2e:19:e6:3a:90:cc:7f:54:55:65:24:
35:ad:b9:41:a0:a7:e5:de:d5:ae:41:3a:88:66:e0:
26:d8:01:8c:15:44:b7:2c:7f:ae:f5:0a:19:1f:d4:
17:39:e9:b0:9c:56:6d:f3:c1:a1:c7:44:84:32:aa:
81:67:47:5e:2c:c7:33:e6:9c:94:65:9c:73:50:51:
7d:17:01:2d:3b:c5:f1:43:25:70:3a:2b:f5:c7:cf:
4c:dd:51:15:26:16:a8:6f:47:6d:06:a7:14:c4:88:
a8:8e:45:51:8f:51:8d:84:d3:4c:5c:36:58:9f:c5:
9d:a9:e8:37:3d:48:c5:47:20:3d:e8:81:b4:d3:e4:
9a:05:33:e0:16:9f:29:70:2d:65:ea:8f:a7:f1:44:
22:8c:f3:a9:d0:7b:8f:51:d7:0c:c0:90:39:28:ca:
11:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C4:D8:4E:38:84:06:A5:80:28:21:AA:63:A9:47:37:21:28:82:1E
X509v3 Authority Key Identifier:
keyid:60:34:56:1C:03:9A:C6:45:0B:EC:8F:D5:95:C1:48:CC:77:0A:A0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:25:83:30:d1:66:3d:38:24:0c:75:56:5d:dc:78:86:20:be:
89:58:73:ed:61:e3:4d:1e:75:e5:69:77:83:e4:a1:1d:13:57:
06:6d:fa:39:06:75:7d:da:5d:77:fc:b0:49:e0:1f:7d:b3:ea:
a9:d3:6d:6c:22:8e:17:ef:3a:e5:0e:f1:87:be:1e:be:e4:f4:
c4:a1:4c:78:c7:f0:dd:82:55:55:73:5a:72:c6:93:92:91:0c:
0d:03:f3:04:16:51:4c:04:90:3f:82:d0:1c:0b:a9:6d:72:2e:
aa:1f:7b:27:0b:73:93:f1:fb:fa:8e:fc:09:7a:1c:bd:45:5e:
81:ce:a8:3f:2a:41:8d:72:d0:88:f3:27:0a:36:54:a3:dd:3a:
37:08:8a:8f:3e:fe:63:83:f4:8a:6f:24:ec:11:3f:ce:52:90:
a4:5d:93:12:8d:b0:e7:87:e0:c4:08:5a:98:e9:4e:6d:b4:49:
4e:f2:f3:b2:9f:fb:08:83:6b:88:db:d6:f4:45:67:50:d6:9f:
0e:84:a5:c5:74:5b:88:6c:86:e5:b2:df:b0:3b:fc:27:ed:46:
1e:e7:76:23:55:53:82:ef:b1:b9:ab:70:f8:58:d0:b7:d9:31:
81:d8:14:e2:56:ed:f1:5d:4b:f0:d2:a4:4b:0f:2c:12:6a:ec:
56:29:1b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:08 2025 by rpki-client