Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
File: YpnP38Adrmf6buMXlIB3DEUrrCI.mft (raw, json)
Hash identifier: VALsZX5A5/sllABe1aCFBm76G+kOoF6TyNLfEprA4X0=
Subject key identifier: 0B:5B:7F:8C:9A:14:A1:30:0B:BF:44:43:2F:BE:0A:FE:4F:48:23:92
Authority key identifier: 62:99:CF:DF:C0:1D:AE:67:FA:6E:E3:17:94:80:77:0C:45:2B:AC:22
Certificate issuer: /CN=6299cfdfc01dae67fa6ee3179480770c452bac22
Certificate serial: 0194BCE0789B1E859A62928EB4784CD180C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: Mkph3bTd1xJZVg1WlaswgHrEuSg.roa (hash: l36JgOHpzZ+Jn9f8sIbdhy0YGZNW92MlOpmEM1lS6Ko=)
2: YpnP38Adrmf6buMXlIB3DEUrrCI.crl (hash: BRqxAcYwhNn49Lsps9t6R8Uj08FnZTQ0yu5C9B2ZceM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:78:9b:1e:85:9a:62:92:8e:b4:78:4c:d1:80:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6299cfdfc01dae67fa6ee3179480770c452bac22
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=0b5b7f8c9a14a1300bbf44432fbe0afe4f482392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:99:2b:21:10:67:f5:27:30:fd:8d:53:ae:58:
ff:7f:55:0f:88:68:12:d4:95:bc:86:3f:02:14:69:
a9:e2:c6:b6:29:38:d4:b6:02:f8:e7:e9:43:7f:04:
54:3c:f2:8b:12:59:6f:34:fd:32:96:f1:b1:21:10:
00:52:3a:c8:07:89:85:b6:88:de:46:b4:58:a2:2f:
3a:ca:db:a6:6b:cd:68:7f:52:91:eb:8c:fa:a3:5e:
25:38:57:43:ca:90:f3:d0:b2:cd:36:1a:bf:cc:6d:
97:11:5a:46:83:40:e4:43:b6:c9:b0:26:71:35:55:
33:ff:45:5e:98:69:c7:00:84:6e:c4:f7:ce:15:4f:
55:b5:e8:ac:14:b3:3c:55:05:73:7c:ca:4a:e3:0b:
23:69:83:7a:3a:f8:e3:a2:34:21:61:88:9d:56:d6:
ed:bc:88:b3:e3:42:1e:38:86:ae:01:8e:ef:18:be:
cd:f8:84:ce:01:eb:38:9a:81:8b:10:4d:58:51:31:
36:b8:b2:92:19:95:2c:74:4a:ed:71:bd:30:37:f5:
b4:c3:0a:2d:15:da:68:40:ba:ad:0a:a3:ca:ae:fc:
44:b6:a0:80:ad:a4:38:52:56:ad:70:79:5d:08:df:
63:3b:38:86:eb:61:5a:57:c3:46:af:36:75:78:44:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5B:7F:8C:9A:14:A1:30:0B:BF:44:43:2F:BE:0A:FE:4F:48:23:92
X509v3 Authority Key Identifier:
keyid:62:99:CF:DF:C0:1D:AE:67:FA:6E:E3:17:94:80:77:0C:45:2B:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:cd:c7:bc:5f:91:9a:21:e5:60:73:10:6a:b9:ca:97:c2:63:
a0:56:02:c1:c7:5b:a6:f5:5a:b0:f0:d1:ed:9e:75:af:ee:b1:
07:82:d2:7c:c6:54:63:8e:fe:bf:48:df:62:2d:dd:a9:03:66:
93:43:0a:e9:3e:b6:41:ac:0f:6d:3c:08:a1:9d:3a:70:cf:b9:
c2:7c:ac:8d:c9:f6:28:26:9b:17:20:65:92:95:73:40:1d:fd:
48:e8:1c:4a:3a:71:37:17:18:d5:7a:95:b0:47:f4:e0:ed:42:
a2:43:b2:b3:44:a4:9f:a7:1d:cc:1e:81:b1:36:bf:9b:b8:76:
b7:12:fc:fd:0a:4b:08:49:10:6a:d2:42:de:56:ad:78:72:ef:
97:31:ee:87:6a:9a:5c:83:02:92:7b:63:65:a6:33:c1:cd:a9:
32:4d:09:22:d4:52:bd:45:b4:15:6b:eb:44:e9:17:1d:a3:02:
e3:40:83:0f:df:e2:9b:ce:a1:79:cb:e5:8e:64:f2:b7:bc:5b:
1f:32:3c:4b:25:d3:a1:f5:db:49:07:4f:8a:66:cc:8b:2d:be:
49:e5:9d:5b:a2:7b:aa:e7:51:5e:2b:39:eb:82:82:2d:3f:f5:
07:af:1e:48:68:c7:7a:65:dc:42:6b:73:b8:fa:9d:35:09:bf:
94:22:68:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:20:53 2025 by rpki-client