Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
File: YYd_TODTYWF3JNSyiaiRjFxtci0.mft (raw, json)
Hash identifier: C5YNmot3UrHdxqJJ7W3TheZiObEZrapAb0ybDLAweho=
Subject key identifier: 90:03:51:D0:50:78:86:1A:88:45:14:F9:6D:88:83:D9:46:F8:DF:66
Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Certificate serial: 0194BCE0894E9ECA4372C07AF8F4A258FEFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
Manifest number: 0912
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: 1pfflrWL-bwxSYtCoyCJ-yY9sDg.roa (hash: GQomu/TYWDDZCVUe6xLQFaU9+r7oU6WwcMu5JseyRnc=)
2: YYd_TODTYWF3JNSyiaiRjFxtci0.crl (hash: zxxFM8GlIucIDQJKWQF4PJqBX+KylHBDLWL8SdyAgjo=)
3: gGh1amzB-Jk0RfzueDLNl64yqE4.roa (hash: 38qHDRBSH9mSj8MHcmispF3MzSiDWYpbmwEncu1yUrc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:89:4e:9e:ca:43:72:c0:7a:f8:f4:a2:58:fe:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=900351d05078861a884514f96d8883d946f8df66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cb:c4:d8:d9:6f:6b:86:bc:a3:09:12:90:a8:
59:5a:86:b3:01:6f:3b:1d:14:92:d0:1e:01:0e:c6:
a1:32:e8:c2:6c:fe:9b:86:c1:06:09:e9:97:85:00:
53:30:d9:0e:9c:f1:a0:b9:74:a6:13:8d:36:c2:62:
24:34:35:97:11:b1:48:c6:29:a2:03:4d:1b:64:d0:
c4:f4:a9:e7:ea:ca:aa:3a:f5:24:fa:dd:79:11:66:
ce:6b:91:09:0c:13:59:93:c8:36:d4:10:84:7d:3a:
d1:79:e2:7b:b7:67:7b:cc:31:2e:38:97:ea:31:2c:
92:41:74:06:88:0c:db:c2:3e:58:5f:a1:3b:4a:10:
ab:92:84:6a:13:22:54:c3:3c:26:11:00:7a:77:3b:
9c:9b:ea:ea:1d:9b:04:c9:fa:00:80:e9:8d:14:f2:
44:3f:fb:99:49:63:69:a0:29:3a:59:76:48:48:6d:
f3:fe:9e:2b:3f:d5:7f:84:b3:52:83:34:db:78:c3:
38:96:9a:12:17:05:f3:2d:5a:b6:6c:2c:d7:35:d6:
71:50:2a:5a:c2:c5:62:47:b9:9c:a4:ec:ec:44:15:
21:23:50:c2:45:a7:89:f3:f1:75:14:cc:9f:b7:a6:
64:cf:55:8f:ae:c6:6b:fe:e2:83:a6:7d:a1:2e:84:
92:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:03:51:D0:50:78:86:1A:88:45:14:F9:6D:88:83:D9:46:F8:DF:66
X509v3 Authority Key Identifier:
keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e3:81:98:46:ab:f0:e5:4e:5e:64:d8:93:5b:2c:49:8c:18:
54:3b:a3:c1:01:c5:2e:03:13:73:d4:d3:bd:66:ec:73:d0:47:
2a:61:71:2e:4e:cc:09:bd:a9:bf:80:b0:70:90:d8:3e:7f:ea:
cc:94:93:ad:72:56:da:00:2a:00:5c:7f:cd:e9:7e:30:3c:70:
ca:79:13:0b:31:fe:c6:f5:d5:19:aa:20:8b:b5:47:b4:7e:e3:
e3:63:87:c2:45:57:e2:ff:df:7f:d7:0b:64:b4:6d:45:61:bb:
e3:fb:fa:3b:4c:4d:77:70:32:91:7e:08:5b:b6:f9:a6:f1:ba:
1f:51:4b:d3:ae:e9:16:62:19:37:2e:2c:74:9b:b7:7d:e5:67:
b3:1b:c1:ec:c8:95:1f:81:60:3b:b0:09:7d:1f:29:b5:6e:ba:
4c:b2:ba:80:4b:14:0b:ef:35:59:b3:20:d8:62:ad:36:f4:26:
d8:50:3d:6b:05:f8:5e:bf:b9:a8:b6:4f:e3:b9:6d:87:70:71:
b0:f8:a3:75:d5:9f:ed:24:db:69:c4:6b:33:cc:be:56:f7:c0:
34:08:48:01:f3:bd:d0:18:f2:a2:37:db:6f:62:c3:87:f8:1e:
7e:f5:c2:4a:bc:e2:60:d3:32:9f:2b:c4:85:5c:49:f4:08:0e:
5e:01:60:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:45 2025 by rpki-client