Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
File: ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft (raw, json)
Hash identifier: JLQ83FuetNvWnUel3zKHy9ZiAq6ONKiM9w7EBkdinoI=
Subject key identifier: 8A:46:F1:EA:75:63:53:71:50:FB:17:62:18:E6:BD:BF:45:0C:AA:7C
Authority key identifier: CA:09:14:9F:34:78:4F:5B:20:2C:56:76:1B:01:D3:5D:D0:25:69:CD
Certificate issuer: /CN=ca09149f34784f5b202c56761b01d35dd02569cd
Certificate serial: 0194BCE09D88062EB3E9E5DCACFB58683A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
Manifest number: 01CD
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: 9hSS_TvQhCvC8fhsSyJYV-rq3kg.roa (hash: IKnNzHp7XVRMYKLUBlGGbOEdrSNJK7VVnYm2JR8nfXc=)
2: ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl (hash: ZKhHtiHfHdaqLNofKhni8FB7cYIPOH0T8DfmCnYy9OA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9d:88:06:2e:b3:e9:e5:dc:ac:fb:58:68:3a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca09149f34784f5b202c56761b01d35dd02569cd
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=8a46f1ea7563537150fb176218e6bdbf450caa7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:25:2b:a6:a6:00:cf:0e:3b:65:ac:70:26:
a2:85:30:37:1d:d6:10:1a:c4:67:ed:7b:0a:48:27:
ba:7c:32:f1:bb:dd:90:d1:7b:75:8b:e0:4b:26:89:
82:08:59:e0:81:cb:c4:9d:62:56:21:b2:44:39:d0:
ee:5d:0d:ab:87:39:a3:b4:ae:01:74:08:c3:f3:97:
39:15:fe:1d:e2:f8:3f:d8:e2:d8:60:56:b8:7f:db:
84:90:24:2f:14:25:f8:f4:b8:b7:19:a4:53:22:9d:
3c:0f:09:94:85:fd:cd:9e:be:c1:43:67:d6:28:51:
e5:14:76:88:fa:98:27:14:64:44:4c:27:7c:88:13:
6d:0f:c4:b8:d3:00:1b:84:8c:c2:1e:dd:79:5d:9a:
4f:df:35:6b:06:0f:bb:80:8c:a4:78:82:b5:92:9e:
74:51:c4:ae:b1:e3:69:c2:2e:cc:22:05:b5:5a:8a:
d7:30:80:a0:29:50:1d:06:a8:3d:5c:8e:4a:ae:43:
45:13:06:e2:ba:88:cc:b0:37:2a:a7:e4:e2:69:6b:
ea:f8:a2:a6:92:4b:c0:f0:2c:12:25:c7:14:1e:53:
f9:eb:0f:f4:7d:ef:b0:8e:ae:e0:f0:fc:4d:73:36:
77:3b:6e:6a:a3:40:8a:be:1b:d3:26:46:9f:8d:7c:
ee:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:46:F1:EA:75:63:53:71:50:FB:17:62:18:E6:BD:BF:45:0C:AA:7C
X509v3 Authority Key Identifier:
keyid:CA:09:14:9F:34:78:4F:5B:20:2C:56:76:1B:01:D3:5D:D0:25:69:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b6:08:4f:50:49:0d:1b:81:06:ae:32:c1:bf:94:ee:74:77:
a9:f7:86:68:94:e7:44:ff:24:6a:b1:c0:42:f7:85:9d:94:aa:
03:14:61:ad:d4:30:a4:45:92:6b:cd:86:66:90:20:1d:9a:eb:
c6:ba:30:de:80:74:a2:a0:a9:20:c8:15:04:23:a5:a2:0c:10:
4a:28:4e:69:de:10:cb:cc:0a:21:4c:e5:71:c8:69:1c:4b:55:
39:8d:d0:e6:d6:00:87:87:ef:7f:d9:28:a1:33:65:94:11:3f:
84:4b:ee:7c:9e:5d:33:ff:79:f1:99:52:89:4f:f6:00:c1:05:
1c:32:9f:25:67:fa:42:27:a1:de:9a:8f:86:31:a6:6f:a9:c7:
8c:3e:79:91:2e:d7:65:ac:4b:bc:9e:b5:2d:82:98:a1:6e:f9:
58:ee:fd:dd:32:4e:ed:de:a7:1d:cd:aa:4f:1c:8d:52:2c:93:
47:d9:3e:70:56:08:f6:7a:be:ae:42:a0:c0:7e:2d:38:54:55:
be:e3:44:bd:dc:7b:9a:97:67:df:31:f0:43:ec:50:1b:87:b9:
66:97:a5:ce:4a:46:41:ce:8b:19:6d:0a:f3:2b:e9:19:76:8e:
8a:f3:4e:3e:ab:5f:7d:e5:22:d7:ff:f6:ed:ff:93:d6:4b:72:
62:58:57:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:47 2025 by rpki-client