Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
File: Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft (raw, json)
Hash identifier: eL0e3V4DAlCSk7zCs9aWG9Ydy9/IodQMEDrY2IQ21bo=
Subject key identifier: 74:6C:7D:C2:80:58:CB:BA:01:59:80:22:1B:15:18:35:70:98:F8:1A
Authority key identifier: 63:3B:68:95:FE:49:93:39:7B:66:23:2B:B0:A2:D3:E3:C6:25:CC:1B
Certificate issuer: /CN=633b6895fe4993397b66232bb0a2d3e3c625cc1b
Certificate serial: 0194BD852BCB160943B06F65225101F33B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
Manifest number: 0E46
Signing time: Fri 31 Jan 2025 18:00:08 +0000
Manifest this update: Fri 31 Jan 2025 18:00:08 +0000
Manifest next update: Sat 01 Feb 2025 18:00:08 +0000
Files and hashes: 1: YFIa0scc_xVUT5FKi7LKvASoEWc.roa (hash: V1CwEQLm9iXZGzptcaHc4LFmcOryBT2Kfmx1HSv4RTc=)
2: Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl (hash: XSqA4Ujja1/jitDp5oUBczR/rBJEfHAQ1r2rJcOhjTE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2b:cb:16:09:43:b0:6f:65:22:51:01:f3:3b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633b6895fe4993397b66232bb0a2d3e3c625cc1b
Validity
Not Before: Jan 31 18:00:08 2025 GMT
Not After : Feb 1 18:00:08 2025 GMT
Subject: CN=746c7dc28058cbba015980221b1518357098f81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:b7:43:82:e7:d0:d1:3c:65:fe:5b:f5:e1:
3e:91:71:af:a7:ab:39:64:cf:68:80:c3:80:c8:d9:
c0:95:d7:55:da:d9:56:e4:54:9c:c2:13:c0:d3:33:
81:2f:f0:fb:36:67:ef:32:d8:61:c1:79:bf:87:72:
fc:1c:29:9c:55:94:f0:66:d0:a4:fc:62:18:08:10:
c2:ed:e3:c3:d5:90:c2:aa:70:bf:b1:08:1a:6f:e2:
49:87:e4:74:d4:26:48:30:37:82:bf:7a:c4:c4:82:
a5:48:c7:50:c2:48:57:4f:66:d3:4f:21:00:f1:6f:
ce:22:42:05:d6:7e:ea:37:5a:c3:83:30:52:e2:8b:
0d:09:02:0a:83:f3:85:19:48:a4:0e:c4:67:97:1d:
eb:32:bd:9b:43:1a:1c:58:68:ff:6f:f3:52:18:4d:
53:9f:3f:08:ff:ec:a0:0c:52:03:08:9a:8d:b3:78:
25:7b:b2:4d:50:5f:7a:fd:e1:60:d8:76:4e:7a:47:
ac:13:d3:b2:a5:c2:7e:50:27:d1:99:02:6d:43:f7:
c3:31:81:c6:64:bd:5a:13:33:a1:c0:79:db:c2:ca:
b6:48:ea:ba:53:74:99:08:4d:1d:69:68:99:b7:4d:
d2:6a:80:6a:db:38:6a:e2:6f:af:5e:71:7b:40:0c:
5c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6C:7D:C2:80:58:CB:BA:01:59:80:22:1B:15:18:35:70:98:F8:1A
X509v3 Authority Key Identifier:
keyid:63:3B:68:95:FE:49:93:39:7B:66:23:2B:B0:A2:D3:E3:C6:25:CC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fb:a4:39:27:77:fb:26:c4:ec:b2:eb:ba:b1:02:cb:b1:78:
bb:2d:d8:2e:66:9c:bc:ef:81:e1:82:be:3b:c7:56:54:ed:39:
7d:bb:e0:5c:d4:2d:fb:ba:98:f1:84:96:c7:9b:aa:76:8a:3c:
ef:06:d1:f4:36:b9:7a:4c:6a:55:76:ba:69:1f:92:75:ee:84:
59:39:4b:2e:ac:db:ea:4d:ee:a2:e8:48:e5:7a:81:9f:04:31:
e5:bd:31:43:81:cc:6f:5f:6e:5c:10:60:bb:3c:6e:28:b7:68:
04:84:88:56:46:56:cf:d1:e3:01:e4:6b:5a:56:c8:09:0e:c2:
06:b6:62:2a:89:20:f3:7e:95:51:68:cf:b1:04:14:06:b2:b6:
f5:5b:e3:91:58:7d:0e:c7:b7:1f:3f:c7:59:45:5c:d2:65:8d:
d3:1c:00:61:1d:5a:0b:da:ce:dc:a2:77:95:75:a6:cc:0d:31:
70:54:33:f5:b2:df:77:e9:44:5f:81:ec:81:08:b3:0e:58:9d:
b1:a6:bd:75:a7:70:3b:ee:f1:03:cb:f3:a0:e5:33:b5:c1:57:
c8:77:3a:e3:2f:13:39:0d:76:b1:74:8b:0f:ed:59:71:9e:82:
83:d8:49:b5:c2:a5:58:8c:c5:a1:ec:fe:da:25:cc:bc:86:15:
aa:12:78:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:30 2025 by rpki-client