Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
File: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft (raw, json)
Hash identifier: sWteGPnbgRW5JKf5Eq96SHwEVxzr2COVT4v6pKqT9G4=
Subject key identifier: D5:79:D7:01:9A:9A:5C:0D:12:D0:89:D1:63:DE:B1:83:CE:00:8F:74
Authority key identifier: 62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
Certificate issuer: /CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Certificate serial: 0194BD8563660A8D1893DCB14CFDDAF1170E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
Manifest number: 0CB2
Signing time: Fri 31 Jan 2025 18:00:23 +0000
Manifest this update: Fri 31 Jan 2025 18:00:23 +0000
Manifest next update: Sat 01 Feb 2025 18:00:23 +0000
Files and hashes: 1: NKs11rmttdxb4erj66XSi3ux60c.roa (hash: g/w9HbLFeSyX3EjhAjkTnAEYRLxJvbXYid4txxbFY6E=)
2: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl (hash: HBsWEL0RzbN0xVbOO7u9LraRYKfGtBqr6v9BzhnnHBM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:63:66:0a:8d:18:93:dc:b1:4c:fd:da:f1:17:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Validity
Not Before: Jan 31 18:00:23 2025 GMT
Not After : Feb 1 18:00:23 2025 GMT
Subject: CN=d579d7019a9a5c0d12d089d163deb183ce008f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8c:b0:87:80:23:28:e0:62:a4:b5:60:4c:b5:
36:e5:75:1a:c8:31:f1:a7:28:f1:ca:6f:76:28:fe:
dd:a9:f1:09:09:71:8a:dd:76:a7:99:9a:92:c9:e6:
d4:6d:c1:c9:db:68:c4:90:9b:20:36:66:44:e0:80:
78:c2:da:14:6a:a1:ad:db:69:c4:dc:36:d0:d1:45:
df:b0:2a:fe:22:75:34:37:ff:a4:3d:48:7e:b8:ef:
cf:5b:e1:fa:3e:85:86:3a:39:6c:0b:57:1d:ed:8f:
21:83:81:a2:1b:ab:92:1d:7b:c8:83:36:76:56:f1:
53:e2:41:51:4e:9c:44:5d:f1:21:da:5a:83:e3:bf:
ca:8a:55:c5:0d:c2:a6:b3:86:af:8f:ef:d1:7d:b7:
76:ad:fb:86:5c:bc:fd:11:28:16:1b:9b:59:e2:1e:
38:a8:be:7e:b2:6e:50:45:48:b1:7a:5c:e0:8e:c3:
25:79:33:a7:f4:f7:bf:3a:06:31:e1:48:db:fd:2a:
47:40:de:56:e9:2f:df:78:3d:8c:24:7a:77:fc:12:
4a:8e:67:c4:d1:80:74:d7:8d:1f:46:27:e6:00:df:
61:39:c8:c8:3d:bf:77:f5:71:86:1c:3b:79:b6:0d:
fe:16:fa:5d:f9:5a:3c:bf:24:0f:9b:ad:b4:26:00:
c3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:79:D7:01:9A:9A:5C:0D:12:D0:89:D1:63:DE:B1:83:CE:00:8F:74
X509v3 Authority Key Identifier:
keyid:62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ea:6d:4f:97:71:99:14:59:3b:5d:7e:c0:fb:07:08:1e:8a:
4d:21:6a:02:19:a9:12:bb:5b:76:76:1c:13:2e:18:60:57:b3:
30:6e:5b:b1:cc:99:df:3e:19:7b:5a:6e:8c:2e:72:04:1e:b0:
72:9a:e0:79:d9:66:ad:5c:f4:54:41:e6:bf:0c:6a:85:93:9e:
91:a8:8c:f5:e7:69:1a:55:71:7d:59:7f:99:b4:d3:37:3d:3f:
9e:53:9f:dd:0c:17:06:34:bb:25:d5:30:df:78:02:0c:b1:5b:
12:4a:a1:5a:eb:fa:5e:16:e0:5d:98:5b:3d:63:88:2e:f4:5b:
8f:b4:0a:39:ce:67:64:d2:1d:74:bf:47:02:81:8f:8e:98:3d:
66:c2:70:9a:da:ba:ee:e6:2e:fd:04:85:90:03:23:e4:02:77:
4a:9a:09:99:ab:e7:0a:34:c4:81:d5:d2:1e:ac:a3:7b:a6:8a:
da:8d:78:33:0c:e6:4d:f3:e7:35:02:5c:67:c3:15:de:e1:8b:
74:68:9f:be:b5:f3:65:a7:d9:29:27:89:ae:ff:33:b3:9b:c4:
1c:f0:9a:6b:30:35:df:ce:51:7b:e3:62:f5:fa:c9:00:c2:c2:
cb:02:50:0e:6e:db:db:e3:4e:e6:2f:b7:b8:3e:a6:fe:9f:66:
d3:cb:21:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:27 2025 by rpki-client