Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
File: Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft (raw, json)
Hash identifier: OV+CCOXlFt0Kgk5dDrLkCI87SLyP5u1Rcfp8Poce9gI=
Subject key identifier: F7:A4:2B:F6:1E:45:A2:A6:F1:AE:0F:D6:BB:5D:F7:96:99:CF:AA:4E
Authority key identifier: 62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
Certificate issuer: /CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Certificate serial: 0194BC3C9CEDC36F5E6D744BD80438552990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:16 +0000
Manifest this update: Fri 31 Jan 2025 12:01:16 +0000
Manifest next update: Sat 01 Feb 2025 12:01:16 +0000
Files and hashes: 1: Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl (hash: HIYgeRmHYZcVa5lRPRhxyCnTcnc8sUKwb4Wrzfj6VRE=)
2: riaXA0o3ztBtwF7sKqg1RflsJeI.roa (hash: PkRZUeqNmDsfT7G4mjGXrdMXe4M5/AEybH+EkbWMiv4=)
3: yYaisXyChRiN2DpvBoKyqem_xcE.roa (hash: 2YMiZxn9BzAJh7sY9ViGLpVIJNMsE1y+h4ErGfBrx8g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9c:ed:c3:6f:5e:6d:74:4b:d8:04:38:55:29:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Validity
Not Before: Jan 31 12:01:16 2025 GMT
Not After : Feb 1 12:01:16 2025 GMT
Subject: CN=f7a42bf61e45a2a6f1ae0fd6bb5df79699cfaa4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bb:6d:0a:a0:34:fb:78:1b:cd:fd:83:1a:06:
8e:e4:78:63:ba:03:3b:e9:c9:98:b1:de:f4:d5:82:
20:47:cd:2a:4d:2b:fb:ca:81:40:48:15:2f:d1:83:
bf:0d:ec:f5:b5:cc:ea:e7:4a:85:7f:93:a9:7d:e5:
e7:84:d4:32:7b:43:d3:53:86:50:a4:29:5c:1e:4c:
ef:fa:eb:ae:00:43:ed:38:50:c3:5b:c9:d1:a1:f5:
1a:5d:28:35:e1:e1:9b:13:df:e6:3e:31:63:ac:30:
e1:d9:e7:d8:fc:96:5b:22:61:75:e1:ab:ea:e0:8d:
34:89:7a:71:28:0d:08:a2:f0:fd:05:9f:c1:a5:78:
6f:d1:ed:3f:56:ba:fb:cc:83:89:a4:ec:87:e4:8f:
8e:ca:b7:a9:b6:4d:c6:54:c6:90:82:bc:71:b1:f3:
f0:ab:54:20:16:07:d7:14:f9:65:4b:24:0b:75:be:
32:cf:a4:23:0e:ab:81:ae:16:94:e5:17:3a:3a:d9:
c4:6c:f9:01:ac:8c:5c:65:f8:68:34:64:cd:6c:c9:
8c:ea:2e:26:74:23:63:08:62:39:53:3c:aa:b8:8d:
1e:df:13:91:64:35:dc:1c:ee:29:84:e9:2f:f3:80:
fc:fd:03:93:6a:f2:43:b3:e8:c4:e9:d1:86:a5:21:
54:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A4:2B:F6:1E:45:A2:A6:F1:AE:0F:D6:BB:5D:F7:96:99:CF:AA:4E
X509v3 Authority Key Identifier:
keyid:62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:cb:41:72:fa:34:59:49:65:58:53:2c:08:2c:bc:f6:32:0d:
43:03:4e:31:30:72:73:13:73:bf:41:b2:cc:ec:be:cd:22:4b:
8b:e3:10:d5:75:32:c0:da:3d:db:91:fd:62:fc:3a:4a:f1:b3:
be:a2:da:04:9e:94:da:ac:65:da:66:fb:80:f4:0d:8e:da:8b:
51:93:65:31:c0:71:8d:3c:34:bb:ae:3e:90:65:4e:de:d1:c4:
2c:1c:a7:cc:e7:f9:ea:d5:f9:e5:0c:7a:c6:57:78:82:34:56:
62:31:dc:77:bb:e5:9d:62:14:73:a9:a2:2d:33:0f:ef:47:72:
51:0e:1b:ac:77:1b:85:c5:9b:f5:61:8c:7d:cb:cb:f4:ef:57:
90:9e:83:62:cb:38:23:77:b4:40:ce:94:9b:33:09:74:2f:a8:
ac:41:93:b4:df:69:1b:5b:85:00:d1:d0:eb:e6:e4:54:65:2e:
e6:de:e8:6c:b7:23:2b:42:bf:a9:ee:b7:b4:41:59:63:8d:cf:
47:1e:db:52:3a:c7:56:da:45:79:73:ea:4a:70:36:6a:b9:1b:
27:5c:90:7e:33:01:42:07:85:2b:b7:cf:b0:4e:76:2a:43:90:
2c:99:26:80:91:86:ac:c8:a0:21:08:e7:5a:82:39:74:7e:89:
f8:b4:11:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:04 2025 by rpki-client