Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
File: YblVGO1PVYKi9sEZVXQChLwIgTQ.mft (raw, json)
Hash identifier: IMlX/9LpofR3l1sgVtvXa0TSoJFGVcsxNjne5PUvqvI=
Subject key identifier: 36:5C:2A:4C:2F:AE:C2:E6:9E:8D:2F:51:86:75:0E:BA:36:A8:40:08
Authority key identifier: 61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
Certificate issuer: /CN=61b95518ed4f5582a2f6c11955740284bc088134
Certificate serial: 0194BCA9E9F5858F76994E19C622ECA90033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
Manifest number: 04A9
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: QPglHGOSHFrs1mgAtq2zwd82Smc.roa (hash: y5xHnZXArsaVabnfSwbndMTBY0pIDvTGUm5JTD4ZakI=)
2: YblVGO1PVYKi9sEZVXQChLwIgTQ.crl (hash: 2qbFNOxW9lw9hx7JTYwnA/Mzmc4bO6/8EA7EJsPZ30E=)
3: eTJhKe-LETepmtUCJc23KDC15Os.roa (hash: bWxC4iCttKGE5WGBMq9/txv6VyYSnQgWWwgULLvAoD4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e9:f5:85:8f:76:99:4e:19:c6:22:ec:a9:00:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b95518ed4f5582a2f6c11955740284bc088134
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=365c2a4c2faec2e69e8d2f5186750eba36a84008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:16:ce:a8:28:70:4f:21:63:65:08:45:d8:82:
07:d0:9d:d4:20:6f:82:77:3d:9e:97:08:97:ff:fe:
0d:ce:b0:74:2f:63:dd:d9:cf:56:51:48:c4:11:cc:
f7:3d:ef:85:b7:ce:90:f2:09:f6:9c:5c:62:53:7a:
99:5e:6e:02:2b:49:f5:44:67:68:58:d6:f3:06:97:
92:ee:2e:a1:38:38:39:58:e6:a6:43:65:85:d0:e0:
3e:fc:3b:ce:56:db:a5:45:e7:3c:5b:b0:9f:14:6f:
6d:11:b8:b2:21:56:e0:d7:8f:11:8a:d8:e9:84:db:
1e:2a:db:98:fe:9d:d3:c3:55:43:be:e8:d9:58:28:
a7:f0:2a:85:b3:26:69:b2:cf:39:d9:0b:73:47:b0:
60:50:b9:cd:11:9a:16:2b:a2:59:4a:72:f7:4f:8e:
88:cd:12:66:cf:89:5d:56:67:64:20:b8:76:19:28:
d9:57:2b:0c:d3:a0:33:d0:b4:22:27:47:3f:e2:4a:
1a:9b:ff:f9:84:8b:d3:e1:bf:cd:24:b8:32:3f:95:
3c:0b:48:30:78:cf:26:1d:3b:43:ea:43:f0:e9:32:
3e:6c:f2:18:46:89:ff:57:8b:7f:e2:d5:94:18:bf:
82:fb:c7:3f:a3:9d:5d:7d:31:a1:a1:f6:5d:e1:02:
00:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5C:2A:4C:2F:AE:C2:E6:9E:8D:2F:51:86:75:0E:BA:36:A8:40:08
X509v3 Authority Key Identifier:
keyid:61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6a:a1:2a:50:75:e0:52:7a:c6:6e:3e:01:80:8b:78:1f:8e:
6f:78:ac:bf:1c:6f:c0:fa:18:c2:7d:31:ed:43:a1:0e:0f:4c:
ab:99:5b:71:db:6f:8c:5a:51:63:00:61:dd:49:a8:3b:56:33:
a4:8b:43:25:99:52:f4:c9:b3:2d:45:55:84:eb:97:53:2b:57:
32:3e:15:00:b1:0e:5a:26:61:54:21:14:79:39:c3:86:15:88:
23:b4:15:03:94:20:80:bd:78:90:e7:4e:96:32:29:de:c9:71:
22:a7:7e:4f:48:32:09:64:48:6f:19:43:f1:8f:3f:c5:74:2b:
75:5c:fb:21:09:24:75:47:8b:5f:8a:99:68:5e:7a:34:c2:6d:
9b:25:f0:e1:d2:1e:c8:49:9d:21:fa:f9:17:96:af:76:b6:70:
e8:d7:42:73:3e:37:ac:25:3d:ac:02:1c:4b:17:8b:46:d6:65:
e6:21:48:aa:b5:d5:77:ec:df:f1:7b:a6:3d:41:b9:c9:b0:0e:
6a:72:32:dd:a1:bc:cb:81:8d:25:b0:86:6f:28:a3:ab:29:5a:
db:22:23:1a:cb:c4:53:97:04:d2:c7:8f:2d:17:65:26:dc:d6:
0e:d3:3a:8e:48:18:44:ba:2d:14:09:fd:b8:f9:ff:fe:d2:a8:
92:c6:ad:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:14 2025 by rpki-client