Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
File: YCGk2qfc9KTLCKxHRzdfaYquhkM.mft (raw, json)
Hash identifier: daDK8vbJEPhTn1qTEFRZr9bMTEItv08WDkF+8HpZrfw=
Subject key identifier: C5:66:D5:A3:54:11:FC:7E:3A:D8:08:E3:51:72:65:90:D8:76:80:60
Authority key identifier: 60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
Certificate issuer: /CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
Certificate serial: 0194BC04F5D0B0EA8685E5C70ED08166AB92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
Manifest number: 010B
Signing time: Fri 31 Jan 2025 11:00:29 +0000
Manifest this update: Fri 31 Jan 2025 11:00:29 +0000
Manifest next update: Sat 01 Feb 2025 11:00:29 +0000
Files and hashes: 1: YCGk2qfc9KTLCKxHRzdfaYquhkM.crl (hash: W8tc1Z0hAnN0gN1AQhI8Ihi+P7KQETp6ApAKFCyeU1o=)
2: nsWYD62GXvXwJfFUS4kAQcZmYTU.roa (hash: jHcDfB6LIATegfSEiVgq0NQFeMD0sWc8LqYc2Z+2oaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f5:d0:b0:ea:86:85:e5:c7:0e:d0:81:66:ab:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
Validity
Not Before: Jan 31 11:00:29 2025 GMT
Not After : Feb 1 11:00:29 2025 GMT
Subject: CN=c566d5a35411fc7e3ad808e351726590d8768060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:a1:61:50:6e:80:2d:f5:1e:7b:71:57:b3:
1b:f0:24:99:36:d2:d4:6d:5f:23:06:78:61:39:d1:
c6:e7:6b:3e:cd:77:da:7a:cc:77:30:81:38:20:ce:
f4:39:c4:8d:42:57:bb:53:dc:0f:5f:e8:cc:a0:e6:
59:6b:2a:f3:42:b1:50:5f:7a:60:d0:f0:d2:10:b2:
93:c9:73:16:05:04:11:c9:bd:d8:2d:7f:e7:92:32:
9e:ff:2b:46:57:86:ee:72:65:48:31:9e:e0:2d:a8:
5d:67:a0:81:a0:39:be:bc:06:99:3f:e6:7d:a6:79:
a6:df:b6:2d:fb:70:06:f8:3d:52:af:92:47:68:4d:
7a:e5:1d:26:07:90:bf:4a:cf:e8:b4:6a:e7:be:4b:
a2:6e:3e:5e:ee:30:d3:d6:43:52:15:3c:bd:9d:99:
4c:34:a2:3f:fc:ce:2a:8c:9c:7a:25:62:0a:4a:6d:
b6:69:54:5d:ce:83:41:e2:10:23:07:25:97:31:56:
25:ff:c8:55:c8:ba:cb:3d:f9:0b:a6:17:5f:4d:15:
c6:05:0b:e2:5b:ea:30:7a:46:03:80:6b:23:5a:4e:
e9:93:ad:fc:ec:86:cf:0d:e4:93:96:91:eb:59:34:
e4:18:36:74:f2:1b:17:f7:ff:ac:cd:53:ec:22:f7:
36:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:66:D5:A3:54:11:FC:7E:3A:D8:08:E3:51:72:65:90:D8:76:80:60
X509v3 Authority Key Identifier:
keyid:60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d2:32:dd:0b:52:b9:9d:04:d1:3d:44:d2:f1:d9:69:af:55:
85:d5:71:cc:ae:ec:4f:13:f4:a5:d6:e0:c7:a5:c5:0c:d1:cb:
76:49:d8:53:71:69:c2:21:96:4c:71:be:dc:e8:6a:06:18:90:
29:d1:2e:ee:ec:d5:74:13:6d:57:44:0e:1a:ef:55:fe:49:d8:
e8:a1:37:e2:94:0b:02:a4:c1:86:1d:27:af:47:11:dc:6e:4a:
ff:8d:cd:53:2e:c7:ef:a9:ce:a4:84:ac:11:c9:74:02:5d:26:
85:36:f8:4e:68:c7:f0:33:48:78:95:1c:71:3b:d4:f7:bb:04:
4f:09:91:cf:00:f5:58:aa:e5:a5:21:38:5a:a1:fa:65:5c:c9:
b4:51:49:ba:9a:a8:13:90:62:8b:6b:b8:5c:ac:36:f9:73:1b:
a1:15:8d:c1:9b:71:a9:22:19:e5:73:af:ec:08:e6:4f:ff:26:
90:eb:1e:cf:1f:19:73:35:32:f7:9b:36:52:37:c6:33:3e:f5:
2c:ad:00:11:0f:8a:39:ef:a9:a4:37:33:28:b7:9d:e3:31:33:
0f:29:d3:98:f0:4e:6e:c9:d6:e3:14:4c:69:da:b1:e7:f4:4f:
0b:a6:75:f7:e6:72:bf:9d:04:d5:23:66:ac:ca:fe:73:c3:e3:
c0:28:2d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:57 2025 by rpki-client