Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
File: YIH8-etwqw4f3KwJx_m7XgFMnb0.mft (raw, json)
Hash identifier: TPI5wnoQI+niRhxpp2nHPSAZ0aibYN4nNTjEA5PWZzs=
Subject key identifier: C7:A5:93:3D:5E:63:D0:9F:73:E0:8D:69:46:51:E7:6D:5C:F8:CA:2C
Authority key identifier: 60:81:FC:F9:EB:70:AB:0E:1F:DC:AC:09:C7:F9:BB:5E:01:4C:9D:BD
Certificate issuer: /CN=6081fcf9eb70ab0e1fdcac09c7f9bb5e014c9dbd
Certificate serial: 0194BCA97CB52A897EE50717EB25C09BC2A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
Manifest number: 0985
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: SCQrnzyM4Bx20DPOMtssZk-Wu68.roa (hash: wtLko9TY7/20VtwY2KqfAs6WX/4oN6rpkwycX+Q3z5I=)
2: YIH8-etwqw4f3KwJx_m7XgFMnb0.crl (hash: rGIP+m7LPLp3W4L763hTuk+Gn/z79t/YVcD48q5shPQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7c:b5:2a:89:7e:e5:07:17:eb:25:c0:9b:c2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6081fcf9eb70ab0e1fdcac09c7f9bb5e014c9dbd
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=c7a5933d5e63d09f73e08d694651e76d5cf8ca2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:f5:1b:ec:9c:44:bd:98:69:94:ef:42:30:
5b:46:78:4f:ab:96:f2:2a:94:12:62:3a:96:fd:ad:
9c:90:d3:69:6e:54:56:a4:35:14:0c:8b:b2:09:29:
0e:2f:8c:f8:64:0d:b6:b0:49:e7:4c:f6:08:be:a2:
7e:c4:1d:77:ce:9e:c0:97:22:a3:ae:66:7d:54:fb:
4d:da:bd:9e:cf:ed:82:4e:c7:12:b0:1d:b8:50:23:
a5:36:f0:64:3a:a9:ab:21:0b:cc:91:8f:fb:b4:1c:
76:f1:47:b7:ec:32:91:5d:40:f0:1e:4f:56:6a:51:
2c:32:e6:0f:a7:7c:f7:18:0e:10:ae:1b:d1:b7:75:
99:f9:df:f6:80:e8:47:d4:1e:8c:fd:bc:ad:0b:2b:
ab:3e:61:ac:cb:70:d7:0d:ff:a2:aa:42:a5:6c:c7:
a8:77:a1:9a:83:5d:b1:1d:6f:a6:50:e7:f2:f3:d8:
c7:27:2f:ab:15:83:b4:f1:c1:86:fd:a6:4b:bf:76:
b9:cc:1b:4a:b7:db:31:a6:d1:f0:4c:fe:22:c6:3d:
62:47:d6:53:dc:26:27:5c:66:34:b8:45:00:ae:7b:
32:bb:ef:85:dc:67:c1:7a:a1:8b:64:fa:0e:49:b1:
43:68:91:04:1f:82:ab:df:b9:23:a6:67:de:85:87:
c2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A5:93:3D:5E:63:D0:9F:73:E0:8D:69:46:51:E7:6D:5C:F8:CA:2C
X509v3 Authority Key Identifier:
keyid:60:81:FC:F9:EB:70:AB:0E:1F:DC:AC:09:C7:F9:BB:5E:01:4C:9D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ac:13:98:51:6d:bc:68:6c:f2:49:bd:8f:e3:c9:8c:e8:2d:
d3:d1:90:ba:68:de:0a:76:85:ff:b7:91:a7:ff:31:cd:43:a7:
44:60:15:db:07:38:7a:c7:a2:26:0f:51:de:f3:08:4a:19:7f:
11:0f:c2:ee:3d:ad:c5:7a:a7:a6:29:4b:e8:81:33:e2:4a:61:
a3:82:21:74:64:35:e1:d2:29:6f:af:c9:95:07:75:f0:bd:e9:
71:01:c3:a4:82:98:d0:d3:cb:dc:30:d3:24:fe:04:3f:77:92:
f4:80:0f:a0:86:b6:ae:a3:6f:07:e6:0b:6c:5c:e2:eb:ac:f8:
2a:39:a6:43:ed:f6:e8:bc:e6:6b:2b:19:4c:97:98:1e:20:c1:
80:22:cf:fa:8d:fd:be:9d:91:8a:c3:7b:ad:0a:b6:d7:60:3f:
77:6a:5e:03:61:6d:82:f4:e8:5f:20:a4:b1:5a:a4:16:47:d9:
02:97:7f:5b:0a:45:10:9d:7e:e1:cb:00:66:bc:85:f5:c9:f9:
ef:2d:50:2f:07:82:01:8e:ca:74:3d:44:11:43:c6:8a:05:03:
43:94:b6:4f:07:b7:07:60:9d:3f:8b:74:f6:2c:4f:51:9f:c9:
15:79:ce:1d:cc:3b:e2:bb:49:1f:15:45:47:df:ee:ee:e6:27:
21:52:f8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:59:46 2025 by rpki-client