Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
File: yrk2s1-SzexekN8zvcUIZhwntFU.mft (raw, json)
Hash identifier: /5IT6PV+3o0lhWyeXXWDOwAY+KgdxznzxCCe4u+RlMs=
Subject key identifier: 58:16:5F:9C:2E:BD:D8:AE:3B:7B:9D:47:B1:3E:B9:B7:16:C7:08:12
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial: 0194BC3C23BEF57F32ECDE3D6870D3972A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
Manifest number: 0B5A
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: ll8ZgED3npZmiAI7cf-Df8HV56I.roa (hash: AHUqk/dsSjXcglDVbJdLIDGnowlic3CzdVdWucIE69k=)
2: yrk2s1-SzexekN8zvcUIZhwntFU.crl (hash: 9EoUzyUaBPNmHClnYhNPSReh5BqsteQ/HC1yCliUnWE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:23:be:f5:7f:32:ec:de:3d:68:70:d3:97:2a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=58165f9c2ebdd8ae3b7b9d47b13eb9b716c70812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:be:3a:59:e1:4d:ba:d6:20:a3:ee:25:ea:73:
d0:46:38:e6:fb:86:cd:a5:ec:f3:f9:8e:5d:a2:04:
f7:6d:25:97:50:94:03:9e:dc:ae:db:2c:b5:9c:fb:
ea:f8:aa:9e:aa:69:1c:ef:a8:61:a7:48:61:00:26:
8f:59:ab:aa:3f:08:19:fa:91:bf:63:81:24:e6:47:
5a:fd:4b:ed:7f:d6:62:df:ad:ee:5c:00:2a:61:f1:
50:76:20:7e:26:e9:be:05:88:e6:c6:23:90:81:fa:
10:52:b5:93:7e:eb:3d:c8:0b:ee:a4:1d:e9:aa:50:
52:f8:a1:c0:d4:87:63:bd:09:10:75:5e:a6:28:15:
4e:92:23:a0:9c:0a:62:02:65:77:05:88:d4:4a:ce:
81:cb:f4:98:b7:45:a0:e3:1e:5c:b3:d0:95:f6:ca:
61:e5:73:c9:c3:21:ea:61:b5:b2:27:5d:eb:78:09:
17:53:33:cc:c2:64:1f:aa:f2:62:8b:c4:9b:34:0a:
e6:af:a1:94:5c:99:c1:d6:40:33:b0:f7:12:89:42:
cd:f8:7d:a2:90:a0:ed:a0:ca:c2:89:df:2b:9c:7e:
65:c8:43:ed:41:37:a5:a6:53:d0:c1:11:27:69:b4:
03:a3:3f:6a:91:20:a8:5a:0a:a3:0e:e4:e0:55:21:
94:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:16:5F:9C:2E:BD:D8:AE:3B:7B:9D:47:B1:3E:B9:B7:16:C7:08:12
X509v3 Authority Key Identifier:
keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:34:a5:5e:65:c7:a3:91:a4:76:5f:98:8e:5a:e2:7d:f0:b5:
23:93:94:80:65:dd:72:81:23:be:74:fe:01:91:46:90:94:d8:
ab:1b:71:64:9b:f2:20:78:b5:25:3c:be:f6:39:e9:d6:6a:0e:
71:8b:5e:8a:8e:3a:d5:03:de:2e:11:e5:fd:8c:d5:91:db:7a:
5d:ce:28:66:10:ce:97:d5:5c:ea:a5:40:49:51:a5:4b:32:49:
4b:88:1b:2d:53:cd:f7:61:2b:1a:32:0c:af:5f:cb:a9:c5:c3:
e0:be:fd:f1:ea:d8:1c:2d:62:af:8e:7b:44:e0:c5:2d:3c:ae:
6a:ab:12:c1:51:39:e8:ab:0a:27:8c:cc:0c:61:e2:70:f2:81:
2b:29:8b:c5:eb:bd:f7:78:ee:fd:cd:62:02:c7:91:4e:72:7b:
97:14:9b:a9:2d:70:02:bd:4d:db:08:b9:ae:5c:44:8d:b1:b0:
fe:23:a5:36:02:0f:0c:6b:05:a8:ae:34:61:8d:b9:49:f5:f9:
f6:4a:72:46:1b:63:9e:87:ea:34:23:2d:11:f9:5a:f0:7e:55:
b2:f8:d6:6e:2d:12:9b:81:77:f9:d3:33:11:1d:8b:d9:70:14:
67:9f:b1:f4:49:39:d4:89:5d:44:f9:5e:f9:c8:86:7e:60:74:
ec:ba:c2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:20:06 2025 by rpki-client