Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
File: YboL58zjgOa7dOPF_OoIHpeZrlQ.mft (raw, json)
Hash identifier: 4cFboxke079feogOL2UbKG93UOnpNan6Si4exaircTs=
Subject key identifier: 8E:24:77:E2:0D:F7:D6:C9:75:2E:83:43:E0:2B:30:A6:60:7A:38:81
Authority key identifier: 61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
Certificate issuer: /CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Certificate serial: 0194BD4E6513CFD1C9BB3DA34E44EF92068C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
Manifest number: 1170
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: Ki-l0-NqB3-W8rebOsp5Nz1tUCQ.roa (hash: mOSRLmnG86S35tEBG8q88cLaUeF47X7BqzDM8g9ROLA=)
2: YboL58zjgOa7dOPF_OoIHpeZrlQ.crl (hash: 5XzWh4DqeMPEn53Av8t1o5Icdqu8BAi3WnJpCVbDfm8=)
3: eQBFv7lAPEwDFMIhf4M6orVjXWY.roa (hash: C5S9wVh8SkZ4xVzErIy7UKem7Vv0JZ4fOHj6nlUXYkE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:65:13:cf:d1:c9:bb:3d:a3:4e:44:ef:92:06:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=8e2477e20df7d6c9752e8343e02b30a6607a3881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:25:17:7e:5f:17:f5:18:ff:80:69:c5:c0:
d8:a1:1f:7e:d4:cc:93:f1:1a:77:93:f1:fd:22:90:
83:b1:cf:06:84:e3:53:2f:0b:cf:b7:58:c6:9d:92:
c9:eb:d7:75:14:9d:80:49:ed:07:2a:f0:11:71:40:
9f:55:bf:86:29:9c:58:31:e5:0a:0d:7b:42:44:d2:
a1:40:87:8d:40:c7:a0:8f:0a:a1:31:5f:f0:f4:cf:
c4:aa:39:2c:95:41:1d:ea:dd:fd:cf:2d:03:ce:93:
00:86:db:9e:50:07:1e:b8:07:fa:cd:14:36:dd:59:
2b:48:b4:4d:9f:77:5a:29:8c:fd:6e:d5:0a:d6:27:
30:a2:04:e2:f1:58:90:11:e4:62:f2:e3:1a:f4:4d:
2e:f6:6c:7e:df:e3:2c:92:5d:41:56:e7:5d:66:1e:
af:65:ab:f1:7a:80:e6:e1:24:8a:e7:0a:de:66:7c:
14:fb:6e:7a:2b:6d:0d:aa:0c:23:b1:b7:6f:6e:6b:
0a:8f:df:d8:cd:80:31:1f:93:14:8b:12:08:90:1a:
81:88:98:cc:83:35:24:9a:6f:8d:40:13:ea:b9:53:
92:2e:da:f5:fb:d9:cf:a9:57:64:f1:e0:eb:17:94:
b0:50:8b:20:1c:2e:cc:c0:23:a4:0a:fd:0b:e2:fe:
7a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:24:77:E2:0D:F7:D6:C9:75:2E:83:43:E0:2B:30:A6:60:7A:38:81
X509v3 Authority Key Identifier:
keyid:61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:bc:0c:97:0f:6d:ff:dc:28:74:f4:ac:8a:f8:fb:a6:ea:86:
ab:1d:0e:d9:50:07:ac:72:a9:d3:d8:18:30:4e:c1:66:03:a4:
1f:b1:75:25:c7:f5:27:f2:ab:d6:57:9f:66:ef:8b:75:7a:e6:
5a:2a:70:f5:64:74:e5:ac:9d:fc:45:18:73:0b:f9:13:47:f1:
80:aa:86:2f:9b:ff:55:dd:97:40:c0:6d:ad:d2:7a:78:e6:5c:
f3:e2:02:f0:3b:59:7d:c9:da:6c:fd:8e:57:d2:e0:73:a8:7a:
2a:1f:be:39:f3:84:6b:5a:48:1a:88:6b:fc:5e:80:a3:bd:b6:
52:79:a2:40:11:49:ba:ff:78:ea:a1:21:f8:93:26:27:dc:b5:
9b:95:16:2a:6c:76:af:9b:65:62:c2:fd:59:63:55:54:3d:bf:
ef:9c:c4:fe:42:c5:58:dc:7d:a9:b8:c5:f4:a7:95:a8:36:b0:
a3:77:db:e4:48:bd:01:61:db:f4:02:27:2a:af:73:c9:e3:1f:
95:7e:e9:4a:2e:5d:3e:7d:a8:2e:31:8f:2e:83:48:6c:c5:9b:
7b:a2:fd:06:95:9b:82:4e:62:00:9a:be:34:97:fa:62:26:7c:
1f:7e:9d:ec:c5:f4:53:94:da:89:ad:cd:25:b8:ab:08:07:6b:
f0:6f:9c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:45:26 2025 by rpki-client