Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.mft
File: YPclN-3x3At_aURTRQvKSu74P2Q.mft (raw, json)
Hash identifier: iSHxivIj68ZJki8qTYNtMs4lDDcYdJQQhDrFtLBxujo=
Subject key identifier: 2F:C7:F3:63:1A:C4:CD:A5:72:D5:CF:F2:FC:BD:BA:6F:E2:CF:98:5E
Authority key identifier: 60:F7:25:37:ED:F1:DC:0B:7F:69:44:53:45:0B:CA:4A:EE:F8:3F:64
Certificate issuer: /CN=60f72537edf1dc0b7f694453450bca4aeef83f64
Certificate serial: 0194BC04CF7A28022934C62D7EC131940F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPclN-3x3At_aURTRQvKSu74P2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.mft
Manifest number: 08BA
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: 64MeW97pL92-_QUPEgapyM7HNao.roa (hash: gMWV3xN0pHUk4BWbscqYu+HnLvJWI7ZvfzjkigsBbmk=)
2: YPclN-3x3At_aURTRQvKSu74P2Q.crl (hash: cZZeS591lQOBDpYVjy4lcV/tWWV/yLjytumN+s/coF8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:cf:7a:28:02:29:34:c6:2d:7e:c1:31:94:0f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f72537edf1dc0b7f694453450bca4aeef83f64
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=2fc7f3631ac4cda572d5cff2fcbdba6fe2cf985e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:72:d4:e0:5a:4f:d9:1d:03:96:8d:bd:99:
b8:a7:d1:b6:5f:80:d2:14:bb:57:83:55:85:55:df:
85:b7:82:d5:8e:80:82:41:f5:ee:77:98:ec:fb:9f:
d4:73:22:02:44:78:02:c3:b0:fb:fd:ed:5a:43:a4:
57:99:56:04:9f:7c:f4:e6:03:76:6c:53:5f:d6:5d:
ab:da:f2:84:da:a8:a1:63:99:9b:22:20:e3:34:dd:
70:32:e4:55:e6:91:fa:0b:4b:d9:c4:19:59:02:6a:
73:8c:65:70:a3:e7:22:85:31:19:e4:0c:43:37:5f:
1d:0a:82:71:cc:be:fe:ab:9b:2b:64:fb:1f:9f:07:
71:40:de:3c:62:45:b9:23:49:49:65:88:00:1e:28:
bc:14:3a:cf:23:b3:0b:41:25:1d:1b:fa:e2:99:20:
3a:ee:2f:cd:12:e6:df:93:9f:52:e3:46:35:af:87:
54:86:fc:22:4b:c6:53:cc:c7:a2:cb:5f:2f:8b:c6:
b7:df:23:4a:ff:50:87:b5:ad:6a:2b:59:58:9e:d7:
cf:37:32:e1:2b:5e:73:36:01:94:ea:b9:d1:3d:6c:
cf:8d:df:8a:8f:ce:3d:76:9f:46:3f:05:07:9a:92:
51:0d:cc:ad:10:a8:36:fa:bf:91:eb:b7:f4:31:87:
3d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C7:F3:63:1A:C4:CD:A5:72:D5:CF:F2:FC:BD:BA:6F:E2:CF:98:5E
X509v3 Authority Key Identifier:
keyid:60:F7:25:37:ED:F1:DC:0B:7F:69:44:53:45:0B:CA:4A:EE:F8:3F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPclN-3x3At_aURTRQvKSu74P2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:80:a4:c6:97:46:d0:fe:53:2d:b1:c7:2a:87:87:a2:80:20:
08:c4:fb:37:3a:21:c8:d8:fb:b2:90:72:dc:37:db:7e:fc:bf:
48:50:f6:a3:ef:29:9a:22:1d:27:d5:0f:64:c3:1d:1b:21:60:
a0:98:f4:09:6e:68:48:b6:be:0f:31:82:20:d5:58:13:b3:8c:
6e:ec:06:3b:5c:b1:df:e5:5b:cf:1d:fc:db:36:b3:7a:e0:21:
03:24:67:2b:70:9b:17:83:83:5e:0f:0e:b0:bf:4e:eb:36:ca:
d8:6d:14:c7:fa:02:80:dd:dc:7a:17:5e:5a:83:a2:88:fc:2e:
0c:4e:8b:d1:94:15:a1:04:ee:88:c8:1a:85:42:ea:62:2e:10:
dd:2b:03:54:2e:72:75:1e:8e:91:db:fa:1d:69:f2:3c:66:99:
32:8c:74:56:e2:3c:12:5e:9e:1c:1b:5d:d1:7a:d4:82:48:6b:
b7:f1:c8:f5:ed:b4:34:17:a1:fd:e5:2a:de:13:bb:cb:3a:98:
c8:95:c2:bd:7c:7d:04:69:00:88:c3:04:7b:24:e9:8b:d1:6f:
91:99:85:e5:54:f5:83:c7:25:d6:f8:6b:cd:f3:ab:45:5a:36:
ec:93:91:ae:c1:ca:6c:2b:11:eb:89:e5:ad:f3:17:7b:f6:d9:
b0:6c:ab:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:13:34 2025 by rpki-client