Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
File: YAc2XgzzDKj86YxiZg0YapebyVk.mft (raw, json)
Hash identifier: LvAKoCLfgThuCxJe/8XQJ9JgnMeZjccMKTxKmvDbZoQ=
Subject key identifier: 2E:12:49:F9:78:C3:BE:C8:BE:5E:C5:ED:C9:A6:1C:54:04:F1:2F:A1
Authority key identifier: 60:07:36:5E:0C:F3:0C:A8:FC:E9:8C:62:66:0D:18:6A:97:9B:C9:59
Certificate issuer: /CN=6007365e0cf30ca8fce98c62660d186a979bc959
Certificate serial: 0194BCAA3B4ED5D80EE09DA215CFAA3721EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
Manifest number: 0788
Signing time: Fri 31 Jan 2025 14:01:00 +0000
Manifest this update: Fri 31 Jan 2025 14:01:00 +0000
Manifest next update: Sat 01 Feb 2025 14:01:00 +0000
Files and hashes: 1: Oc_LJaADC2cknQ1kKmCdsTOaMZk.roa (hash: JMTbvNQOvHmoLJzyFa8UDUWlgTHr2CpWgpqDOMIvsck=)
2: YAc2XgzzDKj86YxiZg0YapebyVk.crl (hash: XtD1TKmaXVqVWZmwbi4pkJ3J6TQOF+EzAfreJYZGaUw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3b:4e:d5:d8:0e:e0:9d:a2:15:cf:aa:37:21:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6007365e0cf30ca8fce98c62660d186a979bc959
Validity
Not Before: Jan 31 14:01:00 2025 GMT
Not After : Feb 1 14:01:00 2025 GMT
Subject: CN=2e1249f978c3bec8be5ec5edc9a61c5404f12fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:00:1a:5e:69:84:86:70:40:4b:24:f5:07:aa:
d2:3c:a6:13:9b:fe:5d:d4:83:f6:ec:c9:d5:cf:09:
df:9e:09:21:e4:e4:43:c7:c4:9b:da:d8:fc:23:3e:
a0:d3:78:d1:6f:c2:bb:7c:ec:3d:f3:c8:4c:71:d0:
4e:af:db:0b:0c:25:e5:d5:af:ff:c1:85:fc:04:18:
fb:22:36:2f:ba:4e:b0:4d:d6:22:1c:f5:f9:09:d8:
7f:86:2c:14:01:44:43:a7:ab:16:0e:bd:2f:19:36:
12:d9:2a:c3:7c:91:67:8e:23:3b:34:72:32:00:b5:
0d:4a:6b:c2:bc:a5:5b:92:91:72:7c:45:4e:fb:82:
08:27:9a:3d:f6:3b:5d:cb:0a:7e:3b:90:09:95:3b:
5a:ac:2f:43:e2:96:3f:a1:ed:0b:58:33:d5:48:b1:
8f:27:65:11:58:f2:aa:66:24:58:06:0c:35:5a:4b:
7c:b1:57:68:17:d2:34:c6:90:d7:2c:56:ea:72:bc:
59:e6:59:89:5e:ab:a5:85:6f:d4:ba:c6:ec:40:2e:
7d:18:86:f6:43:b0:10:b5:ea:51:a0:41:64:28:f9:
ff:4c:15:de:de:fe:d3:53:aa:6d:c7:af:52:cf:42:
db:61:a4:38:51:6e:49:e1:b2:7b:cb:71:bb:07:06:
43:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:12:49:F9:78:C3:BE:C8:BE:5E:C5:ED:C9:A6:1C:54:04:F1:2F:A1
X509v3 Authority Key Identifier:
keyid:60:07:36:5E:0C:F3:0C:A8:FC:E9:8C:62:66:0D:18:6A:97:9B:C9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:08:e8:be:33:15:81:c5:d2:cb:98:73:eb:41:3a:e0:65:47:
76:73:13:7a:df:59:a8:f2:cc:04:30:6e:21:c0:93:98:fe:81:
d0:58:d6:2d:6f:04:05:0f:f9:1f:f2:00:43:2f:6e:e6:35:30:
10:39:0a:84:cb:73:41:49:45:da:4c:72:13:0d:66:b0:9f:a1:
15:7b:ee:f2:db:a2:c1:1b:90:d3:84:c6:aa:23:f0:e9:92:ea:
d7:8e:41:6b:e3:0e:83:4f:0d:be:aa:8b:e5:61:ca:3c:29:36:
61:a1:59:b6:36:fe:d5:2a:52:71:9d:2f:4d:6f:5c:e3:2d:a6:
8b:8a:ae:0c:fe:c5:10:1d:ec:d9:45:3c:29:db:33:32:7a:d0:
e5:d1:80:89:79:30:1c:77:da:fe:90:4b:2f:36:98:c8:f3:e9:
b1:1e:ca:0d:75:60:eb:9d:1a:f5:7e:aa:bf:95:14:ae:7d:fc:
8f:23:36:b1:7a:e3:67:5c:f3:a3:fe:bf:63:49:bb:97:d9:08:
6a:66:59:05:0d:5f:4e:95:7f:4d:ff:0d:1b:f4:a4:af:6c:43:
eb:9d:44:d0:fe:a2:99:0b:ba:65:6b:2e:19:13:07:b6:d4:23:
2e:a5:1b:80:65:fc:b6:ea:d8:10:b0:4d:b4:21:26:06:19:f3:
d1:7c:62:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:41:00 2025 by rpki-client