
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.mft
File: YJmNPJ2L3Jwd_44xlCRBK2zcHdM.mft (raw, json)
Hash identifier: NgkpEU5qisnoU2TIDEGSWf2bYVsxGKGqHylbzx+sMTo=
Subject key identifier: AE:16:77:D6:89:32:35:9A:D5:CE:E1:05:B5:06:B0:E6:0D:85:18:5C
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Certificate issuer: /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial: 0194BD4E46865A2E0B9E187FB9DA222A7355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.mft
Manifest number: 1450
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: 1ybthlfLgtLQgfxAknSZAs8RC5k.roa (hash: h6Du6hP9KxR9m+jaJrmI78AZh53iHUNDmxCbuZh73ag=)
2: A3E9_0So1p68noM0QrlWLwSLDPk.roa (hash: KQBTWnGwwV4bwGGk8PYYtdjAlC6Mu1JxzVvAgRxQl4g=)
3: YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl (hash: YnlsaZERQzZjvuMtmiu6VYg1sW8ltFViGZIjehDHcqQ=)
4: bnAPUFuvdJnnmwNhr7IXOo7sGhw.roa (hash: 0IawnZvl2KO6IBFWtgqQ5CQJq1k/KdlykID8F7AM6kQ=)
5: qqE_Ngb0aIs9tQpiJ_Nq_h7NWR0.roa (hash: WxGoQEuON6PfFsBakqCHNtSE8H3fTHChCkzgmpOGNbE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:46:86:5a:2e:0b:9e:18:7f:b9:da:22:2a:73:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=ae1677d68932359ad5cee105b506b0e60d85185c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:94:1c:4d:fc:05:e7:28:af:bc:e4:20:bd:
a7:41:72:ca:c6:c8:fc:12:38:2b:44:27:da:29:7b:
6e:b7:9c:39:4d:40:ee:b9:3b:57:44:a4:e0:3f:c3:
1c:b7:15:49:8b:0f:66:39:e7:97:ed:a9:3f:74:19:
14:fd:04:de:46:bf:4e:9d:ad:23:a3:86:81:26:81:
26:a8:4b:97:d6:00:0c:44:d7:54:7a:d1:86:d8:06:
ce:dc:11:76:11:82:fa:cc:71:1a:95:27:1b:02:b1:
0d:5f:a3:65:4e:ac:37:38:f1:80:30:1d:5c:de:a1:
23:d0:08:5b:15:51:e6:66:5d:82:49:54:94:7f:da:
11:ae:39:87:6e:cd:5e:cf:76:e6:0b:d7:aa:e4:24:
69:2f:78:f3:47:d8:cb:30:08:80:cb:78:ed:63:8d:
54:ef:aa:cd:2b:5b:fc:97:57:c9:07:b8:7c:be:ad:
4f:a9:0e:48:12:35:cc:39:e0:35:42:59:c8:67:6d:
20:87:ed:47:05:14:67:b1:e2:3f:9b:ce:49:51:e8:
cc:37:26:d7:6c:31:48:ff:4a:0f:e0:36:d2:df:e1:
69:e3:65:5d:cc:e6:9f:30:83:1d:3e:4c:ad:e7:78:
b2:6c:d3:58:33:ce:1b:5c:cb:52:39:f1:09:b7:0d:
e0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:16:77:D6:89:32:35:9A:D5:CE:E1:05:B5:06:B0:E6:0D:85:18:5C
X509v3 Authority Key Identifier:
keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:57:3c:a6:08:5f:aa:28:2a:4c:ff:43:18:0c:34:73:fd:30:
1e:f5:7d:16:2c:31:ca:3e:83:a8:38:30:86:79:fd:60:09:f4:
63:3b:36:e4:9b:3b:32:59:49:45:a8:75:3c:6e:2c:b3:f2:3b:
da:99:6c:ec:13:96:83:64:10:14:82:02:e3:6d:6b:05:55:48:
10:6f:6d:28:d8:91:28:7f:0c:44:67:2f:b6:a3:60:8f:c2:2e:
2d:8d:38:e7:94:e3:87:73:17:01:50:a6:64:62:69:d8:9a:6e:
8a:f4:22:8a:c8:4e:5b:de:c5:20:bd:f4:bd:8a:82:ef:23:37:
a6:ee:60:49:44:e4:9a:ea:75:2d:d3:25:11:f8:96:22:45:b0:
5f:c5:65:e5:f6:12:8a:ba:ca:ad:d7:0d:a3:01:5a:cf:43:f8:
89:dd:5f:d6:6a:b6:78:4d:13:4e:fb:2f:d6:c9:f4:8f:03:d4:
70:ef:80:34:f0:7f:a2:4a:9e:4c:39:e3:7d:43:a0:af:ba:f5:
12:02:b6:5e:18:65:0b:86:03:88:64:2c:f5:73:fa:4d:99:e0:
27:fb:8d:50:27:55:d9:d5:53:15:01:e8:0b:1b:d2:81:2f:35:
d3:14:49:88:8b:ca:f1:67:6b:8b:b6:d9:84:f0:8d:6c:92:3f:
23:f2:7f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:28:24 2025 by rpki-client