Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
File: YvYD86VaKeZhfwlrOmm_8KOSqSg.mft (raw, json)
Hash identifier: Fqh3v7yHry4imbsakz12bc/WZyxSXzX3z5fq6IwIwrs=
Subject key identifier: BA:EA:13:CD:37:66:1B:71:0C:FE:AA:96:D9:9E:05:70:C4:E9:E9:3D
Authority key identifier: 62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
Certificate issuer: /CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Certificate serial: 0194BD85B0F78B7B292C4F440216E669C949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: CdAs9uXPdWzwOsn5f3_VQNLvlMY.roa (hash: z23dSOm4EWMwCPY/rIYDaKhlW5ucCmgZPFZkayJaxA8=)
2: YvYD86VaKeZhfwlrOmm_8KOSqSg.crl (hash: cwC+JM/mmqu9727TS7ZWRJIWnY1QBU4/iOKP9LpyiT4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b0:f7:8b:7b:29:2c:4f:44:02:16:e6:69:c9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=baea13cd37661b710cfeaa96d99e0570c4e9e93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2d:19:ff:ce:b7:1e:ba:7a:52:1c:db:19:3f:
82:7c:f4:fe:46:26:3a:8b:8b:30:49:3e:31:0a:29:
12:27:c9:b9:fd:e9:e2:c8:64:91:a3:09:04:46:f9:
5c:e7:01:bc:df:e9:90:5e:44:a0:cd:e4:c5:73:2c:
a5:3b:a8:32:ef:e7:91:eb:d1:57:cc:ea:87:26:fd:
78:48:41:f6:b0:ba:d4:2c:97:6c:e3:b9:67:d2:8a:
e9:d8:be:9b:09:18:46:92:35:26:2f:a7:5b:af:23:
be:0b:bb:f5:32:9c:bf:e9:13:ba:e4:35:b1:1e:94:
36:af:d7:3e:4d:f6:3f:c2:5d:0a:d3:6d:f6:03:bc:
8e:0f:1b:3d:e0:b8:0d:a9:a9:42:a8:b3:04:2e:0c:
fe:68:d7:e3:4d:4b:71:fe:92:8d:87:16:0e:9e:b0:
d0:b6:06:12:27:f6:d0:96:50:c4:90:4d:4d:22:0f:
22:51:63:07:de:2b:8e:34:2e:00:78:8e:fd:c6:2c:
3b:25:23:34:e8:15:69:d8:c8:a7:8a:62:a7:3b:71:
31:55:9f:c5:10:cf:eb:47:e7:1b:72:e3:42:1b:68:
8c:59:89:04:f1:2d:f0:6a:04:87:4f:05:dd:d5:a7:
6c:11:6d:26:0e:8d:23:f0:2c:15:c9:cc:99:f1:a9:
ab:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EA:13:CD:37:66:1B:71:0C:FE:AA:96:D9:9E:05:70:C4:E9:E9:3D
X509v3 Authority Key Identifier:
keyid:62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:02:c7:d0:5f:cc:a0:25:b8:83:5a:2c:53:10:89:62:02:6c:
77:04:df:30:7a:17:5f:f2:77:91:4e:a3:88:6c:89:46:f4:8f:
bc:33:70:e4:35:47:92:51:13:3d:0a:4f:e4:7e:02:a6:7c:45:
f0:db:1f:f6:a7:b9:fe:6e:79:77:8b:de:7f:b5:f9:88:c0:d0:
ee:05:8b:22:d0:89:e2:fc:59:de:c0:16:0c:66:bc:18:dc:85:
fe:d4:ef:51:84:01:4f:77:40:86:0b:58:65:d8:b6:a2:07:13:
e8:16:d8:24:79:9f:92:f9:8a:f4:f5:0b:c6:d2:57:05:6e:be:
da:e4:ac:cf:1e:36:84:68:dd:e0:3e:2c:1b:2f:ac:52:33:b5:
a6:b3:ed:0e:31:5d:5a:32:fd:e9:76:59:39:01:b6:d7:c0:ef:
4c:82:98:52:4f:3f:03:ae:a7:f0:31:11:e1:fa:3b:75:d2:01:
a2:05:95:ec:bf:1a:0e:4c:8c:87:be:21:72:d6:cb:b1:46:44:
33:d4:ee:d0:98:48:bf:a2:d7:4c:bb:ca:c1:0a:ac:7b:be:da:
5c:63:c3:22:0f:c0:17:b6:6a:5f:20:13:03:3a:2e:eb:fe:72:
36:0d:2a:03:7c:89:a8:6e:96:4d:92:8f:70:df:53:73:2a:d2:
6a:c7:38:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:23 2025 by rpki-client