Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
File: YmqokTLSpoTY0qGj9-QPIjRjbzg.mft (raw, json)
Hash identifier: slvkMx00h1O9GviTDKCw6Dks7MoeVAdRW7hlLO5BJtU=
Subject key identifier: 85:7A:8D:D9:41:CC:0E:72:18:AA:D0:6D:C4:2D:5C:5D:53:5A:C2:A1
Authority key identifier: 62:6A:A8:91:32:D2:A6:84:D8:D2:A1:A3:F7:E4:0F:22:34:63:6F:38
Certificate issuer: /CN=626aa89132d2a684d8d2a1a3f7e40f2234636f38
Certificate serial: 0194BC3C835D7591734CFFEBA25CF076C238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
Manifest number: 1206
Signing time: Fri 31 Jan 2025 12:01:09 +0000
Manifest this update: Fri 31 Jan 2025 12:01:09 +0000
Manifest next update: Sat 01 Feb 2025 12:01:09 +0000
Files and hashes: 1: YmqokTLSpoTY0qGj9-QPIjRjbzg.crl (hash: HhvwVwcXGkB5SLFKrrYWSnxIj8gbuCouUIiqPL6Df7Y=)
2: xj0Zl5jyKNtmExsm8HUfZTBh1W4.roa (hash: qJ7mmoo0SJOyk9TkckQkyKsoiQJfN7oKl35vQICMSm0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:83:5d:75:91:73:4c:ff:eb:a2:5c:f0:76:c2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626aa89132d2a684d8d2a1a3f7e40f2234636f38
Validity
Not Before: Jan 31 12:01:09 2025 GMT
Not After : Feb 1 12:01:09 2025 GMT
Subject: CN=857a8dd941cc0e7218aad06dc42d5c5d535ac2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:62:c3:28:bd:5d:8c:6e:53:b7:de:ad:2d:75:
43:6a:59:dd:b0:77:7f:18:6a:24:a9:97:23:39:c0:
37:be:2a:47:f5:65:91:46:8e:24:ac:2c:da:09:d0:
81:f3:7a:d4:39:4a:75:fa:c7:c4:67:ca:c3:a8:ad:
16:f5:ef:42:8e:c0:df:57:2f:be:ae:a0:45:cd:04:
cf:2b:31:0d:85:9d:b9:6c:f1:b9:33:e2:04:be:f0:
8b:e1:6c:af:0d:33:00:6a:8f:10:48:a9:92:77:c9:
f9:5c:61:80:ee:33:7b:18:66:ed:77:0d:67:e3:f9:
77:de:f3:be:ed:b5:69:fc:9a:bd:49:07:b8:66:26:
01:09:fa:5b:0a:64:c0:12:5f:9d:c2:30:f4:24:dd:
b9:75:ab:e7:29:7c:24:5f:5c:b8:d5:dc:a5:14:41:
2e:3d:4f:f5:6e:97:de:bc:fb:a1:46:d3:9a:9f:7e:
e1:e6:1f:80:28:d1:50:a4:cf:b7:07:2a:6f:44:48:
f4:d2:8b:df:b8:3a:5f:34:98:3d:94:56:24:bb:9a:
37:4a:99:12:6f:b5:4b:8f:13:5f:0b:3f:02:0e:88:
3e:4e:14:79:fe:13:23:af:20:f9:61:64:e4:c6:40:
96:fb:8d:7b:82:0b:53:28:1d:2d:92:81:e7:42:bb:
c8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7A:8D:D9:41:CC:0E:72:18:AA:D0:6D:C4:2D:5C:5D:53:5A:C2:A1
X509v3 Authority Key Identifier:
keyid:62:6A:A8:91:32:D2:A6:84:D8:D2:A1:A3:F7:E4:0F:22:34:63:6F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e4:c7:6a:4c:74:32:10:6a:8c:fd:da:7c:e3:39:b1:48:21:
2a:60:75:3b:d0:07:e3:0f:99:97:42:a4:f6:21:7b:a1:02:76:
45:67:dd:cc:14:11:99:9e:87:cb:6f:f0:1a:fe:68:be:11:52:
b8:b0:f7:a5:4d:35:14:bc:20:8c:50:f6:d3:e5:bf:41:81:39:
24:ac:b2:7f:96:47:8d:93:39:41:d8:87:00:04:5e:a3:bf:25:
bf:22:eb:fd:ed:fd:4e:8f:8c:a2:ed:a4:bd:f3:2f:af:82:dc:
3c:28:64:b5:ba:56:06:8e:fa:7a:79:c2:25:35:53:87:a5:0a:
f7:08:88:e1:c1:2c:c5:17:a1:e0:08:b5:ae:4c:0a:71:51:b0:
c3:b1:19:4e:2a:d9:28:c1:d3:c6:84:0d:58:12:23:d8:cd:78:
d3:5f:7a:49:2d:e8:ee:6a:76:d1:25:97:9c:36:07:6c:38:aa:
9b:b8:d2:9d:4c:84:eb:a4:d0:e0:b8:91:58:cc:a5:3f:e9:45:
04:d3:00:2e:f9:bd:f0:4b:6a:ba:b2:85:31:fb:b2:5c:7a:f6:
98:32:8c:86:29:ab:9b:cc:2e:2a:5c:40:ba:3e:1f:9f:ab:9b:
7e:96:f2:fb:64:3f:4c:19:99:a4:70:ac:8b:ef:1c:23:64:21:
ec:11:be:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:06 2025 by rpki-client