Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/62641c-3444-4425-bf51-6d05c0d0da6f/1/YcaCaHQ-gj4OHIcAYMChQiPxUes.mft
File: YcaCaHQ-gj4OHIcAYMChQiPxUes.mft (raw, json)
Hash identifier: 3MYY3JbeJeoPLjClAFFk+SjUgtXnOskW7QsyIi/TxGE=
Subject key identifier: FA:13:11:C0:60:8A:E4:AB:5C:E1:4E:35:B8:02:70:CD:1E:33:DA:F9
Authority key identifier: 61:C6:82:68:74:3E:82:3E:0E:1C:87:00:60:C0:A1:42:23:F1:51:EB
Certificate issuer: /CN=61c68268743e823e0e1c870060c0a14223f151eb
Certificate serial: 0194BBCE8E7F273751550B91FF6D21AB04A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcaCaHQ-gj4OHIcAYMChQiPxUes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/62641c-3444-4425-bf51-6d05c0d0da6f/1/YcaCaHQ-gj4OHIcAYMChQiPxUes.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:01:03 +0000
Manifest this update: Fri 31 Jan 2025 10:01:03 +0000
Manifest next update: Sat 01 Feb 2025 10:01:03 +0000
Files and hashes: 1: KXik7lH7rXobKNDojQJvsYz5RkY.roa (hash: OmHOyyMTUBadMMSlHfFTN/cjiEKBhDbZve1q3aoF8Wg=)
2: YcaCaHQ-gj4OHIcAYMChQiPxUes.crl (hash: 4/WPt+c33tFAuSnebGYvkxJuROTwzUNmySLA70C0wNg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8e:7f:27:37:51:55:0b:91:ff:6d:21:ab:04:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61c68268743e823e0e1c870060c0a14223f151eb
Validity
Not Before: Jan 31 10:01:03 2025 GMT
Not After : Feb 1 10:01:03 2025 GMT
Subject: CN=fa1311c0608ae4ab5ce14e35b80270cd1e33daf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0c:79:9e:41:39:b1:9f:72:67:46:a5:50:24:
aa:00:17:e2:05:a9:ca:97:b1:ed:fe:ba:3f:d7:f3:
38:d8:ab:9c:6a:9d:a3:2f:09:25:9d:da:97:b4:c4:
20:44:fc:50:af:3c:8e:2b:48:97:57:78:a9:e6:2e:
f5:80:12:01:10:e8:24:8d:9e:a5:8b:4b:88:af:bf:
5a:44:a0:fb:73:e1:ec:2e:c0:61:29:9e:c2:89:a0:
69:4a:c5:7d:40:ed:86:e1:67:a3:a0:32:0f:71:8f:
99:21:78:f8:bb:d1:28:7f:6f:05:48:85:fc:32:6f:
fc:2e:86:ef:0c:92:96:c1:53:7e:5e:6c:c3:4b:f0:
d0:b0:86:aa:ad:73:07:e1:f2:b9:c2:f5:1f:03:b5:
94:a3:b2:cf:d1:d9:f4:11:e5:31:20:d6:2f:59:9b:
3c:44:25:20:e7:3e:70:20:95:bd:65:4a:df:24:ec:
3d:05:83:92:ed:97:58:3e:02:21:21:9e:a5:66:16:
b6:30:0b:50:99:ba:0a:4d:77:86:36:fd:9f:60:8e:
e5:21:24:5c:fa:a4:5b:3c:a3:a2:c9:e4:04:92:54:
21:93:78:4b:f7:be:5f:36:fb:c8:6f:c2:e1:c9:bd:
54:7d:73:97:b9:d9:51:86:e4:01:4b:38:1e:be:42:
e8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:13:11:C0:60:8A:E4:AB:5C:E1:4E:35:B8:02:70:CD:1E:33:DA:F9
X509v3 Authority Key Identifier:
keyid:61:C6:82:68:74:3E:82:3E:0E:1C:87:00:60:C0:A1:42:23:F1:51:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcaCaHQ-gj4OHIcAYMChQiPxUes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/62641c-3444-4425-bf51-6d05c0d0da6f/1/YcaCaHQ-gj4OHIcAYMChQiPxUes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/62641c-3444-4425-bf51-6d05c0d0da6f/1/YcaCaHQ-gj4OHIcAYMChQiPxUes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:74:d7:71:75:1d:80:82:6b:66:a4:f0:30:b5:12:69:07:e3:
ae:83:30:7b:0e:5e:00:17:ab:dc:5a:94:3c:35:a4:54:03:b2:
ce:6c:c4:c9:09:fd:0a:9a:98:9f:f0:cf:3d:1c:a0:e5:35:fd:
e1:58:7a:54:de:b8:44:7f:cb:3b:3a:ec:d7:10:ed:de:3c:46:
75:b7:a6:4f:29:49:aa:d6:c8:4c:98:df:10:6c:02:83:e8:67:
8a:61:76:ca:b6:e2:83:e2:05:20:c7:8a:3e:60:42:ba:8d:35:
f3:ae:fc:56:c2:ac:a7:c2:9c:c0:be:55:d1:05:83:ea:58:89:
a4:1e:c2:1e:23:74:e0:7e:4b:17:9d:04:c0:1f:28:be:41:3a:
e4:45:5a:3d:bb:88:25:52:79:e4:79:3d:73:9c:ff:22:2f:01:
d5:d1:2a:40:a9:d5:84:df:8b:1a:f5:fb:18:02:fe:1e:1c:14:
2c:3e:4e:ea:8b:7f:76:db:83:31:1a:2a:45:e5:ca:f5:f2:13:
ed:6b:ee:5e:5a:a3:80:f3:88:9c:69:20:43:5d:2d:4c:48:dd:
3c:e9:35:61:56:55:8e:d8:77:7d:30:0c:7c:f0:99:2d:90:60:
08:2c:3e:95:ce:a4:dd:a8:80:a0:7b:98:e2:02:02:46:c6:55:
5f:99:cc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:41 2025 by rpki-client