Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
File: YUtw_5wi_-C3f0P0HAgHTebzbhs.mft (raw, json)
Hash identifier: gWgkzG6B3w6CkSOSTHyNmsM8C3PBuxacPvcvMSAclX8=
Subject key identifier: CF:CA:D9:3A:72:CF:F0:2E:17:80:39:BE:07:0D:1A:5D:1F:DC:EE:EE
Authority key identifier: 61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B
Certificate issuer: /CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
Certificate serial: 0194BD4E4015C5D465E44FEE5D66E0EDB4D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:09 +0000
Manifest this update: Fri 31 Jan 2025 17:00:09 +0000
Manifest next update: Sat 01 Feb 2025 17:00:09 +0000
Files and hashes: 1: 28tlQOScTYbuODS8bt-3134oQ2Y.roa (hash: ApQAF8/smS+nlVeOZQ4fBnuRp2Hs4aD0ZCJCSWvoUVo=)
2: YUtw_5wi_-C3f0P0HAgHTebzbhs.crl (hash: 88ov5bZgxVbZ9SpXzQbwx/GlJnvGDfUgZDatZZei5cw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:40:15:c5:d4:65:e4:4f:ee:5d:66:e0:ed:b4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
Validity
Not Before: Jan 31 17:00:09 2025 GMT
Not After : Feb 1 17:00:09 2025 GMT
Subject: CN=cfcad93a72cff02e178039be070d1a5d1fdceeee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a4:99:22:2c:5a:7d:a2:b6:e4:d0:05:68:f7:
9e:74:cd:c7:46:08:d4:da:d4:7c:79:38:c7:cd:74:
20:5f:5f:b4:ac:09:30:95:8f:6a:9f:12:6f:0e:73:
f3:1e:e4:b3:88:df:2b:ba:88:09:f9:7b:a4:d8:81:
22:c4:05:e2:ed:7f:2b:55:e6:78:50:69:85:d2:d3:
e4:35:d2:c9:99:42:22:05:55:9e:df:49:ae:dd:9b:
04:bd:56:c1:f3:1a:4f:70:89:e6:d8:52:42:9f:60:
90:3d:61:42:58:38:7a:18:dc:66:7c:d8:ef:86:ba:
c3:e3:97:a4:ca:4f:88:ae:d6:5d:90:a5:24:1b:46:
a7:93:5b:89:ff:24:29:bd:19:0c:93:16:0d:23:0a:
e9:1b:b6:a8:af:a0:8b:12:df:04:80:63:69:d6:36:
5c:5d:88:15:68:a3:08:c4:c3:8f:30:3f:13:1a:24:
4c:8a:17:19:b5:2f:98:a4:9f:a0:40:05:60:de:00:
29:30:58:f3:53:31:04:ef:e6:07:48:61:7f:0b:3f:
f8:53:bb:39:76:32:68:73:da:c7:7d:2e:f2:55:98:
f6:77:94:9d:d4:c5:5f:98:be:ab:1b:4d:72:e8:19:
1b:6f:1e:2d:9c:97:70:8c:82:69:48:3a:9d:17:91:
e0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CA:D9:3A:72:CF:F0:2E:17:80:39:BE:07:0D:1A:5D:1F:DC:EE:EE
X509v3 Authority Key Identifier:
keyid:61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:71:5f:2f:41:b3:e6:ba:b0:1e:bf:4c:e9:0b:3c:a4:3f:ca:
e8:03:fc:1a:6a:47:75:9c:8a:03:d2:bb:7a:48:65:10:ca:44:
3b:a5:eb:c0:af:84:73:06:e4:59:43:71:83:67:ee:69:a9:cb:
7b:2b:7d:11:c2:97:0b:b7:6f:15:14:65:97:58:3a:2b:06:b0:
b3:da:fa:04:77:d0:67:a9:60:a4:a3:da:74:aa:2b:50:99:09:
3f:55:fd:05:d7:4b:4c:be:e3:c5:fd:8f:59:66:71:19:c8:3e:
5b:0a:5f:8f:0a:e8:1d:a0:60:af:5f:b3:c3:52:c5:d3:50:91:
56:e9:79:0c:5d:2e:49:05:0e:19:c3:fc:2b:00:42:40:8f:ef:
1e:9e:54:1e:96:5d:9b:db:b0:58:2b:cd:2f:66:fe:19:06:5b:
97:cc:0b:3b:09:86:a2:26:58:c1:a7:6a:ac:27:b7:2a:93:09:
b3:a9:50:48:8f:10:81:ac:0a:7e:6c:4a:a2:94:27:80:2f:28:
62:d9:65:3a:c1:b4:78:41:91:21:10:42:d1:94:43:93:9a:16:
a2:9a:fe:ce:df:12:4c:99:a8:5b:3b:e9:51:ba:c0:32:63:af:
2e:1c:63:48:a1:82:03:48:06:0d:88:c7:7a:68:4a:93:d9:36:
5d:4a:91:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:02 2025 by rpki-client