Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
File: YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft (raw, json)
Hash identifier: 6UIih4W/n4OFs1rDRdLxOL1HLSZZHxhH9wjsDWN9sKw=
Subject key identifier: 57:5B:A1:4C:BA:13:6A:44:6D:06:26:3C:31:B7:E6:C2:EA:66:D4:59
Authority key identifier: 60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
Certificate issuer: /CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Certificate serial: 0194BBCE7B935A292A7F562800486C857654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
Manifest number: 1088
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: Cr1GM2aFxsaZd-ImInN4uI7kXRc.roa (hash: PpfCM8zWq8dmU00l723EMPcIhVPj7pc1erECtwg1IFw=)
2: YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl (hash: HOIsk88QsS1wMukDpqoCdaZgTzN/2KUJrRUG5/WbV6c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7b:93:5a:29:2a:7f:56:28:00:48:6c:85:76:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=575ba14cba136a446d06263c31b7e6c2ea66d459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6b:7a:dd:92:ab:fb:39:bf:d1:86:46:ef:7b:
9f:d2:64:55:d4:79:92:12:c0:5e:c5:a5:c8:af:55:
68:9a:e2:3d:9b:95:38:fb:76:f6:de:2c:56:d2:d8:
11:93:d3:fc:d8:96:2c:d1:e7:93:96:fb:3a:f6:25:
ee:97:f6:df:48:14:90:29:51:f9:22:ab:2e:e4:01:
7c:cf:4c:75:cc:01:82:8d:5d:6c:66:12:98:f7:fb:
b2:f6:63:87:55:63:11:a6:93:c5:ca:93:d7:5d:d2:
c4:72:64:49:60:a0:51:52:12:3c:ca:0c:55:17:da:
fa:00:37:e2:1c:9e:dd:2c:5d:ae:8a:89:b7:42:5a:
df:fb:af:51:57:be:92:48:bd:99:23:ec:6f:1a:44:
8a:dd:3e:cf:63:39:df:78:bf:70:16:ea:cd:1c:d3:
cc:03:66:9b:aa:6c:29:66:c9:ce:d4:83:45:22:44:
99:fe:f3:ac:89:79:3a:15:f4:cf:07:ce:1e:6e:ec:
0c:f9:c6:dc:8d:17:09:66:ad:0f:0c:89:8f:f4:02:
3c:14:ab:0c:68:72:e7:70:8a:68:0a:0d:fb:07:88:
ac:99:a7:8e:1d:a8:33:fb:56:d4:b7:d9:90:c1:98:
c7:37:5a:3f:71:48:bb:cf:14:18:09:26:dc:b2:f7:
79:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5B:A1:4C:BA:13:6A:44:6D:06:26:3C:31:B7:E6:C2:EA:66:D4:59
X509v3 Authority Key Identifier:
keyid:60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2a:56:c6:e7:17:36:1b:d6:17:df:9b:d0:e2:14:01:8e:32:
77:94:ca:be:08:60:fa:3c:c8:79:b2:6b:34:a5:b8:ba:c7:e9:
29:d3:9e:9e:68:da:2b:82:03:19:c4:18:d9:e9:36:7b:4e:f4:
d9:a3:b4:f3:b7:f6:8a:ca:a1:8c:50:39:0c:43:27:c7:e2:e2:
1a:2c:52:3b:7b:13:22:ce:e7:f7:5c:1b:f0:68:f3:2f:8c:0a:
5d:53:be:c5:2b:b9:fe:75:92:5e:dc:88:60:9c:24:c2:bb:f0:
44:8f:94:03:48:c1:b1:68:ac:39:09:33:81:9c:a9:c9:4c:48:
8a:8f:e5:d8:71:9d:69:c0:ed:50:ad:e3:0a:7d:35:1f:b9:c9:
c6:46:b3:41:e9:01:38:b5:03:0c:eb:5e:4a:57:1b:b3:20:f8:
0c:6a:a3:4f:52:86:0c:9e:0b:55:38:e1:55:d2:d3:85:c5:5b:
e3:07:0c:e4:23:35:d8:87:7b:f9:6a:4f:22:d6:38:5a:67:8e:
bd:7c:42:b8:fa:66:c6:44:de:9b:93:b3:fe:03:e2:8f:47:53:
32:49:8c:bb:df:d1:1c:82:70:91:83:35:49:6d:b7:68:b9:21:
f6:76:b6:55:54:52:80:41:f2:99:99:fb:c7:3d:db:e2:5e:74:
83:1c:a0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:16:17 2025 by rpki-client