Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
File: YH4TV4xoDumP2q0gI3DxDjwoKvw.mft (raw, json)
Hash identifier: ntoKHmmVetNotH6PNn98PF/o1pn+LuDHohyne6xAzKw=
Subject key identifier: 77:FB:A2:87:95:11:B3:8B:DB:32:14:6B:12:84:93:6F:64:95:6E:40
Authority key identifier: 60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
Certificate issuer: /CN=607e13578c680ee98fdaad202370f10e3c282afc
Certificate serial: 0194BC04E1640B8E0BFC047BC84A33833915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
Manifest number: 0D12
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: YH4TV4xoDumP2q0gI3DxDjwoKvw.crl (hash: rjbQPBNR2wgC6QeF+pi6dr4ji994gP67XJnsKn0N6mc=)
2: wjF-boaSBdJpFX21HtXG9GjSpyA.roa (hash: AbHr9ss+TI1KskPrNJWukMpmmelIuYFTcEXRCT6a0es=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e1:64:0b:8e:0b:fc:04:7b:c8:4a:33:83:39:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e13578c680ee98fdaad202370f10e3c282afc
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=77fba2879511b38bdb32146b1284936f64956e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a3:77:40:53:6e:59:c2:98:c2:46:92:f3:6c:
19:8b:74:d1:b9:17:79:f1:83:c4:6c:e0:ce:22:f2:
27:8f:63:3f:fe:16:08:09:9f:e1:1c:09:14:7c:82:
8e:ff:52:67:e8:2a:f3:cc:ad:8b:d9:7d:60:0a:8f:
37:e8:0f:b9:48:43:21:96:fa:a1:26:f2:d7:71:c5:
16:e7:e7:33:70:c5:32:49:2e:41:bc:2c:60:6d:9d:
95:0c:da:12:2b:ec:f4:83:75:60:4f:ee:c8:ef:35:
a0:6d:52:2f:f1:3a:ff:be:cd:5c:a1:bd:ba:f9:c8:
84:31:a9:97:68:30:cc:05:5f:00:bf:de:2e:26:6f:
d0:6f:cd:9e:4a:ea:ad:75:37:d5:c6:f2:5c:a5:45:
4c:72:21:58:ed:0f:4c:95:16:18:a2:83:1b:df:33:
7b:74:b8:cd:55:ee:69:01:57:cf:02:e8:7d:f2:68:
52:27:27:da:6d:8b:b1:4a:99:b8:2e:dc:9a:5d:ba:
66:b8:47:e0:49:80:5d:76:85:8a:9c:9d:03:9c:38:
64:0a:95:29:01:ff:fb:68:84:7c:0c:ce:b0:20:0c:
8b:7e:be:e4:b7:85:7f:2f:87:51:7f:36:29:ae:2d:
32:33:81:86:e1:fd:ca:16:59:d8:07:e2:87:9f:20:
48:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FB:A2:87:95:11:B3:8B:DB:32:14:6B:12:84:93:6F:64:95:6E:40
X509v3 Authority Key Identifier:
keyid:60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e2:f4:4c:a6:0e:a4:0c:d3:1f:c7:72:a3:28:64:ef:57:bd:
1a:ba:f1:ed:8c:cb:0f:70:6b:92:57:a7:04:3a:6b:20:de:db:
4c:35:13:00:68:be:7d:2f:fc:97:66:62:12:58:f3:30:72:f0:
72:24:d6:d6:08:38:05:b4:41:e7:8b:35:1d:88:18:11:b0:3a:
15:5b:72:04:a6:0d:f2:04:3d:7c:56:46:00:4e:71:81:fd:da:
b4:50:e2:4d:a8:1d:dd:df:c2:7f:fd:57:28:79:79:73:e6:ed:
10:74:2a:b9:0e:85:fc:b0:0e:c2:5e:7b:51:53:3d:98:77:30:
be:63:c6:47:5b:c0:5a:a0:ef:f0:fd:6e:4d:80:2f:82:58:5f:
45:73:46:44:82:b8:ee:91:28:d5:be:9d:8b:6d:95:4e:fb:ac:
f3:ac:10:cc:c9:b5:4f:c6:68:ca:f3:0b:1c:56:25:b6:3e:dd:
83:42:3d:59:ba:ef:bb:79:83:7c:e7:b2:a9:28:32:52:52:2f:
f6:79:90:64:58:d9:42:3b:66:47:3a:30:71:fb:b8:d9:b8:9a:
ff:a7:e7:95:db:54:67:f4:d0:95:b3:6f:54:00:bb:ff:92:30:
81:42:cf:e8:d2:cb:15:e0:4c:db:d4:48:30:42:51:e3:2d:35:
d1:1d:5b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:53:41 2025 by rpki-client