Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
File: YfvYiH2oRHExjYOISsAF8BtE_Uk.mft (raw, json)
Hash identifier: NuA0ECvuIJ9Z2JokSRy++lbhaYvsaHLClb9DhsMFhqg=
Subject key identifier: E3:3F:A4:8A:B6:F9:AF:90:7D:D0:CE:A1:5F:99:55:C5:C3:66:AF:C1
Authority key identifier: 61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
Certificate issuer: /CN=61fbd8887da84471318d83884ac005f01b44fd49
Certificate serial: 0194BD8558542D37D3331C6535699DFAB24B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
Manifest number: 0D4D
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: YfvYiH2oRHExjYOISsAF8BtE_Uk.crl (hash: 7gK7YTuSBfc8+NVavfGsnWqZDZED0ro0SBHoRgqzeao=)
2: rUnY51YPiwbRbm0um6mPTqnei4E.roa (hash: wFuBlsraqakBJqLWGUkRh8WpK6rLnJF7HWgWqq0rAM8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:58:54:2d:37:d3:33:1c:65:35:69:9d:fa:b2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fbd8887da84471318d83884ac005f01b44fd49
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=e33fa48ab6f9af907dd0cea15f9955c5c366afc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:52:96:ef:5a:44:ce:90:93:f6:e2:84:6d:37:
96:8d:5c:65:e4:54:a0:3c:19:03:1d:81:00:75:f4:
f6:18:38:6a:04:48:72:b2:bc:eb:16:24:d4:8e:fb:
c2:3c:18:e8:77:e4:9b:3e:05:4b:0d:43:9b:a7:bf:
b7:9f:d6:70:42:10:0a:fc:4c:1f:99:e0:b1:2a:80:
e4:95:dc:b9:a8:33:fe:0f:36:31:cc:06:ec:b6:9b:
d1:ee:b6:85:28:a1:98:d8:31:02:e5:0d:f6:34:0e:
bf:bd:74:ce:91:30:ec:ff:a4:1b:ac:eb:8c:26:df:
29:a2:b7:25:dc:23:05:89:15:2d:e0:8a:40:ff:1e:
fd:a4:50:77:cd:05:8e:ad:fe:be:16:b7:c8:ab:f1:
94:68:0d:50:9f:06:dc:17:fb:44:40:7d:89:d6:49:
5c:78:b9:2b:95:00:0f:ab:81:d0:3f:81:29:c5:54:
bb:78:98:f6:c4:de:f1:ef:04:e6:0f:31:87:e3:ec:
cb:6b:72:bb:b1:87:b4:0a:43:56:0a:d9:32:2d:64:
3c:7b:2b:64:3c:c8:6a:de:d9:63:52:92:22:84:6c:
04:a6:57:98:7c:14:a3:15:81:41:8a:a6:0d:3a:ef:
53:48:60:9e:3c:f7:ce:82:c5:5c:f8:82:10:ae:be:
5b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3F:A4:8A:B6:F9:AF:90:7D:D0:CE:A1:5F:99:55:C5:C3:66:AF:C1
X509v3 Authority Key Identifier:
keyid:61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:05:c1:1a:fe:f5:4b:9c:89:2c:01:92:72:06:06:db:43:10:
8f:1e:54:50:77:4f:eb:4d:7a:9b:18:01:c1:45:f8:f4:a6:73:
79:d0:73:d5:03:70:1e:ed:bf:4b:ed:72:e9:6d:87:5f:26:2e:
27:fe:97:45:4c:22:19:aa:6b:8b:42:f4:87:20:d7:8d:42:e4:
58:ac:36:37:94:84:da:f4:ba:3f:48:9d:e1:35:d2:92:d5:0f:
c4:8a:57:0d:e4:dd:86:ab:c2:44:95:cc:82:4b:64:23:23:62:
7d:73:be:d8:cf:20:36:70:81:5e:98:3c:87:21:03:ad:08:f3:
8a:2a:c8:15:e3:8d:63:11:0f:19:d6:94:b0:9f:02:07:26:65:
b2:be:5c:73:1c:db:7c:64:44:1b:70:91:98:c8:f6:d4:b3:93:
70:4d:48:a6:ed:18:ae:1e:ba:e3:fd:32:b9:0f:8f:d5:4f:3e:
92:53:fd:cb:bb:ef:b7:bb:d9:ef:20:7e:25:6c:19:72:eb:99:
36:0b:d8:fc:01:b5:44:4a:d4:54:9a:e7:d2:1e:6f:6d:f8:56:
b3:1c:15:f4:2c:3a:18:e9:ff:48:96:d0:69:1d:2c:a3:2e:c5:
4b:1f:cf:16:22:44:95:76:d0:85:28:57:a0:67:27:58:f4:d7:
0e:4d:45:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:42:37 2025 by rpki-client