Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
File: YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft (raw, json)
Hash identifier: MG/2CF9BR3sssn7T0gD2Pxeg/go7Ch8DMvmLApj/nqc=
Subject key identifier: 5D:8A:60:C9:5E:31:C7:A1:F2:52:6C:DF:29:E7:13:C5:91:96:A8:7F
Authority key identifier: 61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6
Certificate issuer: /CN=614256ed38fb1e96944926db4c66c4d088acfbd6
Certificate serial: 0194BD4E440215DA0B5ECC76C92E2DF69D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:10 +0000
Manifest this update: Fri 31 Jan 2025 17:00:10 +0000
Manifest next update: Sat 01 Feb 2025 17:00:10 +0000
Files and hashes: 1: BoZqZz072WMffBg633aOURbd2Lg.roa (hash: b9zcHNJaQ+Hj+ANj7i08VVN5oo2tzosCmEXhBWweaRk=)
2: YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl (hash: ggGIlwGEyNaImBmerqgKrkEfxMadcZvJpb81O1hOGvs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:44:02:15:da:0b:5e:cc:76:c9:2e:2d:f6:9d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614256ed38fb1e96944926db4c66c4d088acfbd6
Validity
Not Before: Jan 31 17:00:10 2025 GMT
Not After : Feb 1 17:00:10 2025 GMT
Subject: CN=5d8a60c95e31c7a1f2526cdf29e713c59196a87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:62:63:5b:80:a7:f2:11:8a:0f:93:07:43:40:
ea:b9:be:7a:c7:78:d2:64:b5:b2:b3:ca:76:d8:9f:
bc:e1:91:03:d8:7e:63:5e:ab:7b:38:e5:df:39:37:
71:b7:59:75:b8:0c:7e:e8:bd:c7:b9:d4:e9:71:d6:
d9:f8:09:e9:9d:6d:f8:83:f1:de:b5:b8:82:99:47:
06:65:9d:9e:4a:0d:08:ad:93:27:30:30:da:f9:58:
a0:99:f5:92:60:63:bb:42:14:0f:bb:c7:70:7c:ce:
b4:2e:f1:1a:37:f4:bd:4a:11:74:05:33:23:e6:33:
e0:7f:90:77:ff:4b:07:83:f1:de:0a:b3:e6:b5:cf:
19:c4:03:8e:7a:40:eb:1d:5d:ed:00:5b:37:3f:f2:
b1:4d:3e:22:a0:b5:76:a8:a6:4f:43:4f:d6:70:2b:
94:7f:c9:20:ea:e7:72:80:62:24:f4:84:bd:0f:bc:
9f:17:0f:e5:b7:c5:c7:79:67:c1:47:42:b0:f5:b9:
ef:3a:6c:ce:b7:b9:b5:68:5b:59:0c:2c:3b:88:ff:
06:e7:26:2c:e8:d1:fc:a1:0f:aa:2f:63:88:d5:68:
cf:49:3b:99:c9:87:d9:cd:03:95:ad:c7:0f:5c:57:
d8:6f:f4:be:93:49:43:f0:8f:4a:e0:ad:22:2e:fb:
02:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8A:60:C9:5E:31:C7:A1:F2:52:6C:DF:29:E7:13:C5:91:96:A8:7F
X509v3 Authority Key Identifier:
keyid:61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ea:01:d0:96:d5:e0:86:67:bd:9e:80:8d:d7:d6:76:a0:5a:
68:b1:3d:3c:53:ae:89:0e:eb:c8:f8:3d:a2:d7:62:a8:14:c6:
76:75:e5:db:38:f8:7e:ae:50:68:da:15:ec:37:65:43:cc:a8:
9a:e2:3c:c1:26:c4:db:30:20:5c:ec:f2:71:29:3a:48:b2:83:
b6:c7:d9:87:69:a6:8b:10:bb:45:b8:5d:20:45:18:7e:dc:5f:
eb:1b:cf:32:1f:1d:5f:3c:68:19:cb:6f:77:40:72:3d:bf:1d:
ea:dc:34:ce:9e:48:c8:16:46:e2:51:70:0d:1f:e6:77:90:1d:
c3:97:25:ee:d2:db:66:93:64:24:48:e9:46:91:e2:8d:25:5e:
8d:ba:96:56:11:3e:23:76:f3:e7:e6:48:6b:0d:bb:d3:98:29:
14:7a:c2:77:35:a7:0e:7c:99:9d:91:55:e9:a6:53:e8:f5:5a:
df:46:ee:6b:a6:79:a0:c3:f2:90:46:d6:3c:c7:1e:fb:c8:58:
a6:6e:d4:56:c5:59:7d:b6:e4:61:d1:cd:f7:58:68:c3:55:c9:
e0:11:e0:0b:b2:24:fc:88:b4:a9:41:de:af:b1:1c:50:f7:f5:
fa:2c:e1:9d:fc:d4:4a:65:3f:4c:9e:60:59:40:06:ce:36:32:
df:e8:35:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:14:36 2025 by rpki-client