Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
File: YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft (raw, json)
Hash identifier: Jml5fyYLLydiPtiV4PPsjthz+jYS1AVSi7UryUf0mDk=
Subject key identifier: 53:AC:D9:E5:5F:88:73:61:50:9F:94:F2:9C:74:5C:1F:F8:DC:C7:CE
Authority key identifier: 60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
Certificate issuer: /CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Certificate serial: 0194BCE0A88BDFE327B6ED0C76223A7D3F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
Manifest number: 0FED
Signing time: Fri 31 Jan 2025 15:00:27 +0000
Manifest this update: Fri 31 Jan 2025 15:00:27 +0000
Manifest next update: Sat 01 Feb 2025 15:00:27 +0000
Files and hashes: 1: YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl (hash: /K5Pu8PcHEvSLBh4HffQd0zzatbeHKpkiRLslaHXUpM=)
2: s00N6hW6L--i71YE3ZHEvxi0_Kc.roa (hash: XG+OrgRZcNPrP7V5QMdswK7GDBHHfoBcFSN/3uR8oa0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a8:8b:df:e3:27:b6:ed:0c:76:22:3a:7d:3f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Validity
Not Before: Jan 31 15:00:27 2025 GMT
Not After : Feb 1 15:00:27 2025 GMT
Subject: CN=53acd9e55f887361509f94f29c745c1ff8dcc7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:f3:67:bc:63:6f:7a:4f:40:85:2e:81:73:
dd:f1:91:d5:e5:be:38:e8:73:c3:b9:46:5d:a4:04:
d1:0a:f0:e2:83:22:8f:00:6d:46:20:86:ef:25:b7:
a9:5a:d0:af:4f:96:12:90:fd:40:db:72:3d:4d:47:
9f:69:66:8b:3e:7a:8f:c8:d7:bb:6a:d5:01:29:ae:
92:fa:8e:a0:30:12:98:d5:ca:3c:54:82:dd:d2:0e:
c8:db:90:47:0a:d1:8f:94:0d:6f:3e:13:66:43:f5:
7f:e7:1e:bd:df:58:88:30:00:f3:d8:37:b3:11:fe:
b0:f7:97:15:36:0a:0f:c0:52:bf:0c:86:4e:2e:df:
d6:f2:21:2c:63:56:bc:35:b5:3d:90:d3:cb:3a:e8:
63:54:18:e3:6b:85:d6:06:b2:05:88:68:70:2e:71:
56:cc:bb:db:50:3c:6b:54:82:8f:9c:8a:c5:ce:d5:
ec:67:aa:d6:23:e6:66:0d:e5:d2:8a:d0:a7:4f:8e:
06:5a:81:ff:c1:a4:93:1d:60:53:51:d2:43:d1:2b:
5d:5a:22:1f:10:e1:6f:51:97:46:2e:da:8a:98:de:
6f:e9:cf:3c:7d:32:5c:f5:6a:a3:55:b3:04:f1:94:
1b:3f:f3:6b:31:f4:4c:a1:0e:ba:f5:c1:e6:fa:37:
89:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AC:D9:E5:5F:88:73:61:50:9F:94:F2:9C:74:5C:1F:F8:DC:C7:CE
X509v3 Authority Key Identifier:
keyid:60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6c:47:76:bb:8c:0d:7c:7c:aa:d1:cd:d8:d0:32:e9:14:0e:
a6:99:21:e8:0e:49:b3:46:95:25:48:12:a0:ae:75:0a:0a:8d:
3b:db:56:46:28:b3:7e:3d:d5:fd:cf:5f:ec:32:c2:63:5d:6c:
0b:32:0a:f1:82:63:36:f9:85:72:c6:3e:72:81:05:18:7b:5c:
7e:10:dd:b3:7d:17:35:46:b2:9f:5a:7a:cc:c9:85:f7:e7:90:
a0:0d:af:52:2f:47:1c:fd:ed:ca:ca:a0:43:77:b9:89:a4:9c:
b4:a7:0b:6c:e8:d6:0f:d8:02:f9:a9:d0:f6:34:e5:8a:29:67:
e3:80:4e:e5:6e:a0:70:fa:f7:6d:c1:2b:e0:ef:72:f8:aa:84:
46:62:69:a4:3d:a6:69:2f:3b:90:0f:f4:76:a0:69:1c:dd:3f:
4a:59:c4:55:a5:9f:39:51:e0:45:36:f9:da:aa:8b:e5:84:76:
9b:70:07:3f:2e:9c:ed:2d:48:1a:81:92:91:ab:e6:34:62:3e:
73:2a:34:07:9b:4f:9c:21:cc:47:cc:60:48:d1:1c:6d:83:71:
e1:32:6d:1f:75:f1:d5:9d:4f:6e:6e:82:b0:67:59:50:2f:3d:
bc:3b:ad:c9:dc:2b:6b:33:1e:52:6c:1e:05:0a:d9:ef:2d:ac:
0b:91:d7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:37 2025 by rpki-client