Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/49af8e-881c-4212-9336-a6e53026852d/1/pYD-R7QXyHMPhXtlNvDfGmNeqFI.mft
File: pYD-R7QXyHMPhXtlNvDfGmNeqFI.mft (raw, json)
Hash identifier: iVYqjqaXRDJGiVNKsTR/f0smIv+YHlQC1qw6FcTOEzQ=
Subject key identifier: 03:83:DE:38:FF:F9:64:8B:CE:AB:3F:60:5F:85:F1:19:9F:D5:93:5F
Authority key identifier: A5:80:FE:47:B4:17:C8:73:0F:85:7B:65:36:F0:DF:1A:63:5E:A8:52
Certificate issuer: /CN=a580fe47b417c8730f857b6536f0df1a635ea852
Certificate serial: 018ABBE80FA97C2BAFADDB78E59018144E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYD-R7QXyHMPhXtlNvDfGmNeqFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/49af8e-881c-4212-9336-a6e53026852d/1/pYD-R7QXyHMPhXtlNvDfGmNeqFI.mft
Manifest number: 07C7
Signing time: Fri 22 Sep 2023 08:01:02 +0000
Manifest this update: Fri 22 Sep 2023 08:01:02 +0000
Manifest next update: Sat 23 Sep 2023 08:01:02 +0000
Files and hashes: 1: 71A6KCNSMevlNkRCnXvLUFVEeOs.roa (hash: Y78DeiuvqXct1LqcmAwBfZbTzNZLN0cVqTtE7tTrKUU=)
2: CH95dES2IUlvUKi-_gEHBKJCfUw.roa (hash: Pm4VR48XtbQcqsNEgh4e26k30Kn8OHAIQip2FUQo3VA=)
3: pYD-R7QXyHMPhXtlNvDfGmNeqFI.crl (hash: jxWbxjKTKWcT4FhBcs0MEvzzfED8zD6eilijB/VVaXs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bb:e8:0f:a9:7c:2b:af:ad:db:78:e5:90:18:14:4e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a580fe47b417c8730f857b6536f0df1a635ea852
Validity
Not Before: Sep 22 08:01:02 2023 GMT
Not After : Sep 23 08:01:02 2023 GMT
Subject: CN=0383de38fff9648bceab3f605f85f1199fd5935f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3c:4c:ac:38:0f:04:8d:e3:90:60:1f:31:63:
7a:6c:43:eb:ce:47:ce:52:8e:a0:95:f3:90:71:9e:
df:5c:19:6c:32:7c:1d:2b:7b:85:bd:7e:02:72:ec:
8e:d2:99:17:88:37:dd:ba:dc:ab:5e:e5:d5:90:de:
ae:7b:85:dc:38:1e:ef:65:41:d4:16:a6:fb:a8:5f:
0c:b0:dc:d2:8a:e0:61:93:48:1a:ea:0f:a1:23:66:
79:46:31:dc:9b:56:79:e8:e2:66:a8:b3:e1:1d:14:
37:63:97:df:b6:35:6d:a8:f5:da:93:b8:f1:8f:92:
50:8d:98:66:27:61:55:6c:43:6b:04:a7:a5:55:c8:
3a:76:93:71:07:c0:d9:52:a7:66:7c:a1:61:87:ee:
1a:0e:2d:5c:14:f2:29:c1:8b:56:47:2e:c9:81:39:
76:46:c5:9b:88:4a:07:c7:34:7d:8c:79:b3:4e:16:
04:91:3f:b3:f5:ba:3e:cb:5a:e3:94:08:4c:31:f4:
75:23:9e:b8:d4:a6:27:bb:28:e4:e1:3c:32:0c:50:
79:ec:ab:ef:9f:88:06:ed:56:d2:43:0d:e2:6b:7a:
81:3a:f5:c3:11:e9:f6:93:b1:09:61:4c:7e:ef:0e:
b3:c4:7b:45:95:7e:b7:20:e8:fd:eb:63:76:e3:18:
f9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:83:DE:38:FF:F9:64:8B:CE:AB:3F:60:5F:85:F1:19:9F:D5:93:5F
X509v3 Authority Key Identifier:
keyid:A5:80:FE:47:B4:17:C8:73:0F:85:7B:65:36:F0:DF:1A:63:5E:A8:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYD-R7QXyHMPhXtlNvDfGmNeqFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/49af8e-881c-4212-9336-a6e53026852d/1/pYD-R7QXyHMPhXtlNvDfGmNeqFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/49af8e-881c-4212-9336-a6e53026852d/1/pYD-R7QXyHMPhXtlNvDfGmNeqFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:9b:f5:9b:50:01:fc:b0:e7:8c:dd:bd:49:43:ba:2f:7d:49:
63:49:ce:37:70:ff:eb:51:68:2b:a7:11:af:7e:7f:c6:73:6a:
1b:6e:a7:c6:38:90:a4:68:d2:65:2c:42:35:b1:d9:9e:69:cb:
6a:8f:6b:5a:b9:16:94:75:04:8a:65:cf:db:44:d5:51:a8:a1:
1e:35:a1:00:a1:ad:b9:ce:5c:ab:d5:a3:1e:08:8c:0e:cd:4f:
0e:2a:4c:c0:3d:ae:75:44:fd:a6:0f:77:e5:33:60:5e:68:f1:
a1:30:03:ae:f9:8d:8f:32:98:92:a5:bb:0f:51:ea:12:4b:42:
72:f5:50:2c:6d:61:e7:08:35:33:e5:2a:21:04:62:63:7e:f0:
53:1d:2b:95:ff:8f:9d:00:a9:da:bc:d4:d4:fc:83:78:49:d6:
96:be:5f:a6:8b:65:bb:24:3b:c5:5b:84:56:2d:c6:e6:d7:df:
bb:f4:8a:4f:88:44:58:a8:ac:e0:6e:49:8a:42:f8:fb:e9:a5:
61:af:7e:24:d1:ff:bb:a6:f7:dc:35:6a:a1:2e:e3:85:b9:d5:
61:52:01:70:29:c5:d2:7e:c0:ff:f5:7c:a0:65:5f:01:d8:ea:
ef:78:b1:0e:08:74:ca:2b:0e:06:90:1d:a4:8e:50:40:3f:f6:
81:45:dd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:24 2025 by rpki-client