Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
File: YhoTCpDLA344A_6gv0ZaoIL-NJg.mft (raw, json)
Hash identifier: jexJTXO8Y203UtbFWiUalkVBXjDc2XiQOREadVUVHdg=
Subject key identifier: 43:1B:C7:5E:0E:3D:C0:19:34:75:F0:64:7A:79:8A:FB:6C:76:93:22
Authority key identifier: 62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
Certificate issuer: /CN=621a130a90cb037e3803fea0bf465aa082fe3498
Certificate serial: 0194BCA99D6CD1A89A3533A9866D4DEA1B27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
Manifest number: 0252
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: 8tq6vUxikXVafkdQNOumeQjFfpc.roa (hash: UpmsMokgr2OHdk8MVVsUZdaiVZYh5g21JKYfdCc4ZA8=)
2: YhoTCpDLA344A_6gv0ZaoIL-NJg.crl (hash: PzJk5hxkj+qnwlzlVqFcZTFo8hzf58+JHhCOySC8Kys=)
3: j89ASOslTb0sA8qPaNCnvdarbHI.roa (hash: pTH6+0WVaBMdNBqgh83yrPXmlHTEaPDbAotvSzt0CT4=)
4: vSrVfCiFhwuThaFge_HlQGTrHjk.roa (hash: Bc63krCzWLaf7LOD/k916HgQOiH2H7M6asbeefYBGos=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9d:6c:d1:a8:9a:35:33:a9:86:6d:4d:ea:1b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621a130a90cb037e3803fea0bf465aa082fe3498
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=431bc75e0e3dc0193475f0647a798afb6c769322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:05:f4:db:18:d9:de:4b:f1:d0:df:d5:c6:a8:
bc:05:f1:f3:b9:b3:0a:2b:e5:43:9b:1f:57:66:af:
c2:1f:95:6c:9b:34:e2:65:be:f3:61:73:46:df:aa:
7a:18:ca:d4:07:42:09:ae:c5:7d:50:0d:87:61:a1:
31:74:b3:87:20:95:2c:eb:d5:60:38:96:e4:b4:8e:
85:da:7a:a0:6b:dc:1c:ec:8f:cf:ad:7f:68:44:b3:
b0:84:be:80:be:de:34:f1:04:8c:c3:cd:c7:16:7b:
10:c8:96:6b:ef:38:c5:eb:d1:72:68:ad:d6:6c:c4:
8b:de:8c:1d:f7:45:73:aa:fc:5b:05:87:94:e9:29:
c8:8e:dd:dd:11:c1:1c:e0:0d:ac:fd:26:67:87:8a:
58:fb:7b:1c:e2:a9:78:a6:27:ca:fb:82:ee:51:3a:
ab:50:6a:d7:d3:c2:1b:8d:5c:5b:a0:7e:58:5c:9b:
cc:56:e4:39:98:a3:e5:98:7e:bb:b3:61:86:ce:70:
1c:27:67:79:cf:65:28:05:b8:5e:80:6c:57:5e:3a:
93:70:e1:0c:33:5e:d8:ea:f5:35:f5:79:65:31:47:
ea:84:f6:2b:de:21:ee:82:65:67:51:68:91:6d:1f:
a2:9f:f8:35:5f:a9:61:d7:c2:a6:bd:f9:02:2d:f0:
f3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1B:C7:5E:0E:3D:C0:19:34:75:F0:64:7A:79:8A:FB:6C:76:93:22
X509v3 Authority Key Identifier:
keyid:62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:03:4e:0d:3d:d0:e2:db:27:80:96:fd:a0:31:8a:f0:b2:3d:
71:fa:95:c3:9d:ea:5c:4d:8e:6a:06:d1:63:9b:be:83:c6:86:
f8:66:81:b0:a8:46:9b:0c:fb:cc:03:ae:08:27:73:38:1e:92:
aa:17:7e:58:42:cd:bc:d3:b8:82:6e:46:f4:d8:60:32:88:f9:
c5:46:8e:18:48:cc:be:d6:79:1e:95:61:40:a2:81:a0:bb:16:
5b:6a:33:3e:d6:e3:8a:44:a7:43:d0:b0:0a:a0:1b:02:aa:a4:
09:b4:b0:c8:ac:66:ac:0a:b3:41:46:ae:7a:1f:da:f9:10:e3:
ba:b8:56:39:a8:4b:cd:7d:09:4f:95:1e:28:5d:dd:fc:c1:77:
01:2c:80:9f:75:3a:e3:c7:92:26:42:89:83:4c:80:25:10:e8:
91:dc:5a:f0:b5:42:73:da:ce:da:bf:bd:90:c9:1d:6a:a1:dd:
78:ec:3f:72:2e:ae:af:ed:bb:32:74:2e:17:89:35:5b:d6:24:
e3:5e:8d:43:38:ff:95:0a:bc:7c:50:e0:6c:0c:91:d9:56:83:
1a:c2:cb:ea:40:95:fa:4d:99:2e:09:0a:7b:94:e0:ac:31:a3:
0a:3e:35:ae:d2:b6:90:34:16:72:63:93:85:d1:44:32:c3:a5:
d4:68:a1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 08:17:55 2025 by rpki-client