Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
File: ylmb3Bz8eujML7oV_NgMoRc3hGc.mft (raw, json)
Hash identifier: +08dk1PhACRfcs84g2fpOgj6tqwJLVv8FylWOxZ50pc=
Subject key identifier: E6:3F:3C:FC:28:13:49:7B:CC:7D:FE:02:9F:27:D6:CF:46:5C:9D:76
Authority key identifier: CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67
Certificate issuer: /CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
Certificate serial: 0194BD85384957E1C09CB7C7DAA6154DAF8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
Manifest number: 42
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: ylmb3Bz8eujML7oV_NgMoRc3hGc.crl (hash: Svtb7QcDFCBcIF1oGuX4Bn6TVTHsahWTlsB6PI7mJa0=)
2: zIZvUw6LEttnk9GqCkFL8S-ncbM.roa (hash: g5dRThI/Wu6nM24igsF8Y2hQEgVjjdxUN3aRLJWGc3E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:38:49:57:e1:c0:9c:b7:c7:da:a6:15:4d:af:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=e63f3cfc2813497bcc7dfe029f27d6cf465c9d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:99:35:0e:60:3b:96:b8:7e:07:cd:25:ea:
4d:4c:82:7b:b6:93:a2:67:94:b1:f8:3b:90:dd:19:
9a:70:45:81:8f:ab:0c:c6:8f:fe:92:01:50:2b:84:
9e:be:35:ab:8c:59:0c:e5:7b:02:b1:56:c5:c0:b3:
fe:63:22:76:ef:41:ce:06:ee:5f:8a:5a:75:0f:3f:
94:48:58:70:c9:9c:bb:7c:ef:63:11:a9:1e:b3:ee:
49:f4:6e:15:31:0c:42:db:75:af:22:17:cb:b3:49:
9e:8c:0d:6e:d8:59:c0:c3:05:80:12:a6:75:83:94:
ab:19:c8:e3:e5:84:c7:87:4a:d5:ee:41:4a:52:0b:
5e:d2:83:65:56:6d:ce:b6:40:0a:46:90:ad:f5:c2:
af:3e:5b:33:9f:18:38:9f:f4:60:c1:6c:81:99:7f:
45:8f:d5:78:76:db:78:c9:1a:10:e2:11:3c:60:c1:
06:6e:1e:8c:b4:6f:db:d6:5e:cf:77:a8:19:19:d9:
6d:22:c5:10:15:0c:3d:e6:f7:79:3d:4c:b2:72:b2:
ac:8b:f2:53:51:a0:21:7f:7b:46:cf:1a:44:cb:4d:
05:30:c7:29:88:fe:e8:36:81:f3:0d:60:68:64:25:
41:89:f4:44:77:f2:09:84:47:7b:d4:98:8d:15:7b:
08:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3F:3C:FC:28:13:49:7B:CC:7D:FE:02:9F:27:D6:CF:46:5C:9D:76
X509v3 Authority Key Identifier:
keyid:CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:29:48:26:bf:39:59:05:f9:39:05:5e:09:f8:0e:ef:c0:7d:
4f:12:b5:7b:6c:75:1b:a8:42:77:ed:b4:df:b2:8b:93:a0:86:
68:e8:f7:24:37:ed:52:9b:e8:43:64:48:23:ba:73:a4:29:94:
22:b8:d4:f9:f0:93:6b:13:5c:a6:95:fb:89:8a:95:52:59:ff:
0f:35:99:3c:50:f7:29:17:5f:bb:97:18:6d:fd:1e:0e:4f:e2:
fc:e2:21:7e:07:92:10:04:da:d1:ea:57:44:bc:5e:f7:0b:9b:
a8:2e:41:d3:62:a1:27:07:47:50:22:b1:e8:61:47:f4:fa:56:
4a:a7:e1:f6:4b:65:e5:ce:25:a0:a0:a4:8d:d1:07:06:e9:8e:
79:ef:c3:80:ee:0d:69:8f:04:0f:96:dd:3d:24:f5:40:33:9b:
19:02:df:50:4b:74:41:27:a7:40:e9:35:d6:b2:c0:00:6f:d0:
17:c2:ff:b6:50:5d:a2:cd:5b:c3:70:4c:3a:3a:ed:64:0a:39:
2f:d9:b4:61:b5:15:e8:f5:23:fd:9e:d7:6b:1f:c0:54:41:90:
45:d0:f3:46:c6:f7:bc:7d:7e:48:66:f1:16:89:3d:c9:ff:05:
17:3f:22:d9:46:4b:41:99:9e:18:40:7d:59:14:c3:35:40:c8:
50:4c:5c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:23 2025 by rpki-client