Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.mft
File: YHZWuPfoG1FJtIYPgSex1OO0h9w.mft (raw, json)
Hash identifier: DZwtX/FcusBTBeMarXC6UA1fTvLzyz8oWxeqtsYbamo=
Subject key identifier: 4B:B4:AE:B4:46:7D:67:67:E8:87:06:21:7A:D2:25:50:40:E2:65:EA
Authority key identifier: 60:76:56:B8:F7:E8:1B:51:49:B4:86:0F:81:27:B1:D4:E3:B4:87:DC
Certificate issuer: /CN=607656b8f7e81b5149b4860f8127b1d4e3b487dc
Certificate serial: 0194BC3C58D4D7CF44E8B4F85AF3F5F3CE60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHZWuPfoG1FJtIYPgSex1OO0h9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.mft
Manifest number: 0A3B
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: 7-uxb2sVoc0kcAT2m9SP5qVnZ8E.roa (hash: acdZUKxa+ye22RHZ+hlpmz4eeOUGVIjJiD1cAB8HEbo=)
2: YHZWuPfoG1FJtIYPgSex1OO0h9w.crl (hash: E/z0EKqYWTIyvFlt1PSGJzqEb70LClIoRus2JzSHItI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:58:d4:d7:cf:44:e8:b4:f8:5a:f3:f5:f3:ce:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607656b8f7e81b5149b4860f8127b1d4e3b487dc
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=4bb4aeb4467d6767e88706217ad2255040e265ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:74:5d:b1:81:16:6d:1c:bb:50:2d:a2:d5:8e:
72:f6:4e:88:45:df:0e:05:16:70:f5:86:bc:e2:87:
56:d4:1f:d7:aa:f3:63:b3:a4:f6:27:49:75:6c:b2:
04:ea:ca:3a:e2:2f:5b:22:ce:a8:1e:7e:64:37:6f:
eb:f0:c5:ee:ec:87:c7:5a:03:57:2b:3f:16:04:00:
9d:c3:52:f9:8b:4b:60:6e:7a:92:b6:ad:df:00:ab:
d3:41:17:6f:fb:84:a0:d7:f6:5d:d9:c1:92:a4:ef:
4d:15:a2:c5:a1:30:76:c1:4d:45:af:cd:e2:75:5e:
94:45:8f:b0:bc:43:bf:bd:43:9f:91:14:1d:3f:c3:
d9:17:00:15:43:df:cd:2e:ff:98:d7:9b:f8:de:a3:
4a:1e:84:4f:bc:82:44:10:f5:fa:ea:ab:30:a1:c7:
aa:98:32:b4:f5:05:ba:0e:bb:3a:bb:4c:d8:4f:c1:
53:ec:88:64:2c:39:de:08:38:ae:75:d6:bc:16:92:
83:3a:1c:9c:a8:34:4f:ce:c7:5e:6e:d4:92:d6:2e:
61:f8:05:f0:6c:f9:1d:ae:48:c4:fb:e9:44:69:87:
f6:77:55:ae:0f:e5:ea:52:2e:63:f3:ea:23:f1:99:
ef:46:d4:d5:9e:86:e8:1a:d6:d3:d0:fc:26:f7:9d:
8a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B4:AE:B4:46:7D:67:67:E8:87:06:21:7A:D2:25:50:40:E2:65:EA
X509v3 Authority Key Identifier:
keyid:60:76:56:B8:F7:E8:1B:51:49:B4:86:0F:81:27:B1:D4:E3:B4:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHZWuPfoG1FJtIYPgSex1OO0h9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e4:2d:76:f4:99:f3:17:2d:b3:e2:04:b3:3c:5c:f4:3a:87:
95:8b:4e:91:9b:e8:a2:5d:9f:36:ab:b6:b6:28:6f:b8:4b:21:
15:77:fa:4d:79:4f:53:cc:51:b5:e9:25:f1:f3:fc:0c:c5:c1:
e2:ec:17:a8:de:0c:2d:6b:97:a5:97:5a:fe:c9:84:ea:5c:2a:
82:bb:70:c7:15:17:29:d3:93:bf:6f:61:93:e4:7c:82:79:7c:
de:e8:34:ef:6b:66:65:26:06:cf:74:09:83:65:ba:d2:63:ec:
3a:a6:ca:cc:5c:92:57:5c:0e:b7:35:d7:e6:40:5d:55:7c:0a:
94:bc:9e:e3:5f:14:6d:5a:16:2a:2a:68:d9:4d:10:89:f1:b7:
7c:e0:18:60:fb:1c:87:6a:f2:3e:fe:f1:fb:d4:42:50:c2:01:
88:50:41:08:9a:f5:4d:59:d0:a1:3e:19:e7:01:e3:73:19:62:
9c:91:12:68:14:11:59:bb:b3:6e:ab:f7:c8:b4:23:38:d4:22:
5c:0a:39:f7:a3:a3:46:73:94:a5:cf:19:a7:bb:0f:f3:8d:8d:
4a:74:7f:36:f6:39:95:e6:f3:e8:26:eb:5c:63:34:5f:f1:e1:
4b:3c:bc:6b:31:cc:10:0f:f7:2c:0f:21:de:36:9d:fa:76:77:
ff:c2:12:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:43:34 2025 by rpki-client