Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File: YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier: 9skMXdXBKa48GKZL/ytfbnnugOq8UTLVetctbMpqvNo=
Subject key identifier: BF:95:DA:6F:FA:44:20:D3:FC:60:19:94:2D:39:59:DB:DA:B9:67:D3
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial: 0194BC3C60CAE6AD5559640249D425C6F720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number: 12F3
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: 1VADO_17q_s1vi4sUX8qvyaTKS8.roa (hash: mWvBqtGQDs1pA/HxiZ8AHfsR4oNjr1Yi2fZMV/jNGTc=)
2: QXkpqlLeH0lSYY0nblkHSzaO1Ew.roa (hash: IjUEjsO2mbnzmz7vjeL8ZIzctqSaR82F+Efqt7aXfAU=)
3: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: MqokUZU9hFlDjzEdcIhzfZnYiHDdurJqQo6XcEXLg/w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:60:ca:e6:ad:55:59:64:02:49:d4:25:c6:f7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=bf95da6ffa4420d3fc6019942d3959dbdab967d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9f:b8:16:a1:17:c9:7f:05:bc:3a:cc:e6:f5:
20:94:f3:02:61:b8:1f:f5:92:27:a9:0f:1c:83:d0:
80:a2:40:8c:7d:ee:55:7e:17:5b:07:67:84:6c:60:
af:02:30:7a:90:bc:14:aa:e1:ce:cb:e1:cb:34:4e:
ab:c8:3c:63:96:50:2d:eb:0f:ed:c2:36:4f:3a:30:
b7:f9:a1:01:b7:dd:10:2e:37:ef:30:6e:ea:72:3e:
77:49:5a:86:a3:78:e9:95:19:e9:aa:dc:4f:47:67:
52:cd:ae:6d:49:b9:ca:27:7c:11:89:64:a4:36:37:
23:b9:5f:94:c8:cd:3b:7c:3d:1d:d9:5b:47:d0:1e:
11:61:ef:93:23:8d:b9:44:c3:de:94:3d:e4:2e:69:
20:37:55:68:d7:61:96:30:a5:18:37:dd:04:48:a6:
a7:87:58:68:01:89:bc:a3:0b:78:07:b4:83:9c:eb:
6d:a3:d5:d6:80:9a:d6:26:15:63:3d:4a:22:da:c4:
3e:91:5b:6a:89:25:82:5d:a8:b8:8e:3d:e7:03:36:
af:9d:d5:a8:4c:45:b3:50:59:ef:6b:17:66:d6:91:
27:79:a5:f5:1b:47:bc:8f:95:9d:08:92:db:e8:2e:
70:37:27:4f:6a:ac:9b:19:58:96:7f:b4:de:26:b9:
6b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:95:DA:6F:FA:44:20:D3:FC:60:19:94:2D:39:59:DB:DA:B9:67:D3
X509v3 Authority Key Identifier:
keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:56:43:97:eb:41:17:ba:9c:6b:c2:50:9a:69:32:0e:19:be:
b7:b6:78:db:6f:59:3d:66:cf:49:3f:95:0c:94:98:7a:52:84:
9f:d1:5d:ad:8c:0e:0a:31:b4:35:74:2a:17:d9:f1:8b:35:56:
73:f7:bc:75:ac:78:e3:07:c9:c0:bc:62:49:19:76:0a:65:bc:
4e:ae:3e:eb:4f:cf:ef:81:e6:8c:54:01:40:01:c1:21:e7:df:
bf:1d:98:86:5e:11:8f:32:f0:f0:60:e0:66:33:f3:c2:57:7c:
71:8a:fc:cf:9b:99:5f:a4:e6:f4:01:39:b7:48:8d:29:a9:71:
8f:2a:80:f6:4a:5d:33:1e:17:52:cb:e3:cb:e9:5d:2e:fa:c4:
76:dd:57:68:7b:58:9e:ae:b9:63:2e:ce:db:1f:c1:a8:23:bd:
c4:d2:1e:ca:f3:98:c6:fd:4c:bc:6c:7a:a0:80:a5:2c:b2:6f:
f9:51:b1:45:be:33:3a:da:26:f5:61:a4:9e:31:6b:59:d3:09:
d6:85:59:53:3a:13:a7:05:ef:69:48:03:a4:7e:80:16:f8:b9:
3a:52:75:a0:ed:a2:df:09:1c:19:cd:0d:7a:e8:96:ec:bb:ad:
5d:5e:69:03:c5:26:86:b6:c4:45:ad:d9:07:6c:87:60:89:61:
4a:e3:3d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:32:55 2025 by rpki-client