Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
File: YeENrB93PFWiRHUzRnGeiZ9NRDI.mft (raw, json)
Hash identifier: C0jrAnZJ4hB1WF+DwYtidktWyP5Z5AMmjDt+/+PJbVI=
Subject key identifier: 90:DC:D1:31:D5:52:BF:E1:C3:7A:3E:F7:05:D6:89:14:60:CE:2F:EF
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 0194BD1761278E06BFD9907B1A84A1B02FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: 2Pb_1CM0MkPudBUY3Q0_pYkoPc0.roa (hash: xADulynKw7d5uIvUb/iOH4gEDrZezt1Odl3vumrVJCo=)
2: YeENrB93PFWiRHUzRnGeiZ9NRDI.crl (hash: YMwrXh3yZJWmBAkKHNg1ujxA4eptnYwq2PKtJJUqPrU=)
3: mWcMZUbVESCreyIMM1F2DvYaJHs.roa (hash: DDyp9xxUdtbm3SG6nGLtJGXjnrbdaA8Ifcbc14VxZ9E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:61:27:8e:06:bf:d9:90:7b:1a:84:a1:b0:2f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=90dcd131d552bfe1c37a3ef705d6891460ce2fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:ef:72:7f:5c:58:df:88:6c:1a:17:70:84:
c9:55:05:e5:98:68:3e:b6:2d:17:5b:b9:2a:0e:0d:
e7:dd:56:ac:17:8f:e8:8a:9d:c3:51:88:2e:d5:fa:
46:48:cd:76:4d:28:98:8f:5e:ef:da:c5:79:32:21:
66:f1:8e:6f:4b:0d:8d:aa:59:49:7a:5e:ab:d4:cc:
a9:b5:9c:55:1d:0b:9f:ea:4b:7f:fe:c8:8a:55:5e:
2c:5e:38:6c:e2:35:5d:4a:98:52:b8:5f:ee:1e:14:
15:ec:63:60:b3:4b:4e:ce:3f:89:d8:05:74:c1:6a:
79:e0:b3:dd:38:df:a9:b2:1c:e9:30:93:39:d2:4e:
e3:6c:36:7b:e2:57:ab:7f:12:b9:df:70:3b:a1:80:
bb:e4:e2:f9:3c:3b:2c:72:2d:ba:d4:05:27:cd:b3:
02:26:f2:af:6d:17:67:6b:a2:82:e5:56:0d:33:39:
d2:4a:ba:45:05:60:72:08:31:f3:6b:8d:24:2a:de:
cb:4e:89:c6:19:2a:76:82:ff:1c:1f:06:2a:9a:e5:
69:fc:18:8d:85:e1:78:63:ba:ce:24:de:f3:8e:ca:
1b:67:14:d5:45:26:d4:fa:4d:6c:72:c0:17:13:8e:
80:e7:8f:0e:d2:60:ec:c9:4a:c2:97:21:06:87:60:
4b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DC:D1:31:D5:52:BF:E1:C3:7A:3E:F7:05:D6:89:14:60:CE:2F:EF
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f3:0d:c8:38:60:9c:3e:d2:c4:9a:90:10:69:13:de:6a:1d:
cb:2b:bf:90:38:35:bc:78:f1:23:ef:e4:fd:e2:39:73:c0:ca:
12:57:df:8d:b9:1c:d9:59:57:1e:73:8d:63:ef:c8:b5:85:51:
0c:b1:ac:a7:25:2a:67:cb:8e:40:04:84:5e:49:e7:7e:09:6c:
15:c4:1e:19:4f:ea:55:08:46:72:33:35:45:89:fc:aa:11:b9:
3d:a5:92:ad:3f:66:52:b6:a3:26:80:79:c8:72:e8:4e:d1:0a:
19:3a:a0:ee:d2:e8:4a:c0:9c:7b:40:32:7a:f8:f5:82:85:21:
3f:06:14:7c:56:28:4f:3e:6c:e9:60:a7:90:df:1d:61:b2:27:
1b:dd:ae:22:bd:2c:43:44:16:3c:fe:95:82:d2:43:15:82:75:
ae:d5:3a:bb:a3:1a:8e:1d:68:b2:13:49:fa:32:9c:92:bb:45:
dc:3d:72:82:42:30:d8:d9:8a:86:96:35:be:17:01:34:6e:f7:
45:3e:84:75:ce:02:5b:44:12:8c:c6:26:5a:14:8a:ac:1e:a6:
b3:46:9f:bc:0d:4a:1e:a0:1b:4e:c7:e5:eb:40:b6:92:76:7f:
75:d8:22:8f:5d:1c:ca:99:4a:49:6d:d5:17:c7:c0:a1:cb:83:
a2:41:fb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:16 2025 by rpki-client