Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
File: YKzX2WuVbeXbA2c80dHjo3uN2d0.mft (raw, json)
Hash identifier: DeMBt6VI/HNmRP5811ehYmj2ygV86fG7bGpwxBGuX5g=
Subject key identifier: DE:5A:48:DF:DB:3F:50:6C:4F:06:20:CE:DE:E4:49:F4:72:37:D1:96
Authority key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
Certificate issuer: /CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Certificate serial: 0194BD85AF128A3C85800FE4809345D4893B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
Manifest number: 037C
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: CPESOVR7NuUuiT1fk3xOj3g1BJ4.roa (hash: 94N98AuoHMwP3zuYxAtYTYC9OnoRJx4KYvMXL1js6yw=)
2: YKzX2WuVbeXbA2c80dHjo3uN2d0.crl (hash: Mg84UXgOdsHTTh4HN0HLhHL2Ne0O1EqI3ggyUx4c0kg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:af:12:8a:3c:85:80:0f:e4:80:93:45:d4:89:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=de5a48dfdb3f506c4f0620cedee449f47237d196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:35:a7:52:c1:b7:dd:fc:7d:03:15:a2:60:
1f:8c:8f:7f:95:fc:01:29:d2:5c:28:9c:c5:43:38:
aa:38:48:bd:a7:43:b4:a3:b8:37:3f:15:2b:aa:84:
66:b9:57:6d:1b:3f:6a:98:b2:37:2a:b0:47:3a:84:
f2:78:37:af:8e:29:0a:c3:f8:fd:72:c7:c0:d1:1d:
92:b7:99:13:8e:ae:33:18:3c:b7:cf:06:20:c0:92:
c3:ba:4d:4c:04:d4:ca:5e:a2:69:36:e1:f8:14:0b:
8a:79:05:df:a2:0a:8c:ad:15:29:08:55:58:44:95:
01:d6:29:a5:0d:04:d1:b9:5b:b5:a4:21:f1:61:df:
9d:ef:e3:a7:c0:22:8d:68:22:0e:65:c4:24:7e:e8:
eb:e8:8f:f8:4f:4f:b0:21:4d:56:4a:10:fa:67:0b:
61:36:77:be:bd:5b:ec:c3:66:43:4b:6d:9d:90:24:
ad:9e:7f:93:29:fd:b6:22:fd:53:48:4c:fc:84:14:
e3:f0:68:cf:55:b0:bd:70:f6:3a:37:bd:05:9b:35:
c0:7d:61:50:62:0e:52:ac:ed:36:6c:b1:27:21:dd:
70:e9:e8:24:7e:68:df:d1:2a:55:b2:9d:43:af:1c:
80:13:00:2b:81:fe:5b:63:c0:7c:cf:06:97:12:c6:
85:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5A:48:DF:DB:3F:50:6C:4F:06:20:CE:DE:E4:49:F4:72:37:D1:96
X509v3 Authority Key Identifier:
keyid:60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3c:67:12:91:bf:0d:75:d8:6f:55:54:10:1f:39:e4:d6:37:
13:09:1d:d1:70:ee:8e:3b:3f:33:9f:d0:b2:8a:16:24:4a:06:
29:dd:12:75:a3:b2:23:0b:f3:12:6f:3e:0e:4c:78:a3:b0:d2:
d3:34:d3:e3:2a:48:dc:af:d0:28:ba:e1:25:e4:09:f1:ad:b8:
2e:b9:19:a8:76:62:c4:0c:8a:88:cd:2b:74:ed:8b:09:d7:22:
77:f9:4e:f6:38:92:37:db:9e:1c:c6:0f:f7:f2:36:ca:01:ba:
4f:6a:09:2d:34:00:2d:42:e4:bc:cc:93:be:74:9d:a4:2c:a7:
d7:a4:ad:96:18:f1:77:9c:5c:6b:99:8a:5b:b5:98:da:01:f4:
77:d5:d6:97:49:19:f6:ff:3d:be:75:92:96:8e:dc:74:93:3a:
13:18:d6:b4:74:cf:46:46:96:dc:65:0b:5e:a1:bc:4f:2c:2f:
47:ce:f6:6c:7b:e6:4b:ff:6c:d9:de:0e:a6:1c:e2:08:90:aa:
56:c8:8e:72:06:81:1c:a6:00:16:b1:f0:b3:7d:56:15:a4:45:
6c:6d:a4:77:b4:e2:b2:a4:93:cf:f7:aa:62:4e:d4:23:48:75:
0e:dd:93:d9:3a:d4:9c:df:6f:b2:87:6c:15:56:30:24:0a:aa:
5e:68:11:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:01 2025 by rpki-client