Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
File: yKS714rzY_pb7uYy6L3Ei2KXNDw.mft (raw, json)
Hash identifier: n2OdmXJB+V/d3H3yAlLIIvplKz6tf0Kol34YNnkqFr4=
Subject key identifier: A6:6D:87:EA:C3:83:0B:55:24:F8:01:FC:9B:40:01:BF:06:EB:A7:02
Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
Certificate issuer: /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Certificate serial: 0195E190145CB01C631B8AD4AAF29A6D9732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
Manifest number: 0518
Signing time: Sat 29 Mar 2025 11:01:10 +0000
Manifest this update: Sat 29 Mar 2025 11:01:10 +0000
Manifest next update: Sun 30 Mar 2025 11:01:10 +0000
Files and hashes: 1: d6sgkQbNQYkqYXcedUvxxcDi_RY.roa (hash: qNUbQpwyqYmbMOUJJoCyiXY3LQNxqUvVSzT1Kq6z0rI=)
2: yKS714rzY_pb7uYy6L3Ei2KXNDw.crl (hash: KR8en/wVxyMovUUymI8XZOHolJIuX/3PDk0WFafDefw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:14:5c:b0:1c:63:1b:8a:d4:aa:f2:9a:6d:97:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Validity
Not Before: Mar 29 11:01:10 2025 GMT
Not After : Mar 30 11:01:10 2025 GMT
Subject: CN=a66d87eac3830b5524f801fc9b4001bf06eba702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:45:5f:80:dc:b5:e4:db:f4:af:b9:7c:f7:
04:91:6c:5d:21:91:22:ed:cc:a7:09:79:fe:43:96:
16:41:b1:08:33:6c:ac:39:01:a9:9f:3c:d5:0d:38:
05:b1:38:91:7c:9e:67:eb:fa:c3:8e:6d:05:d5:ae:
11:e9:25:d1:fe:ec:8c:d9:cc:28:fc:70:a4:b7:e4:
cf:04:4c:42:f0:19:7a:9b:12:94:3f:5c:30:6c:95:
f3:c5:06:e3:ec:b9:f7:b1:f0:9e:f8:04:8b:26:5a:
d6:ae:98:6b:1c:ae:4f:66:46:6e:00:e2:ae:28:f1:
ca:74:52:8e:b7:9c:fe:f6:86:37:fa:e5:0c:b0:e0:
e7:fe:9e:ef:37:7d:86:d2:b1:0d:44:12:73:ae:03:
1b:f5:cd:c3:3c:0b:24:f2:d0:b3:af:54:8d:f5:4e:
9a:49:de:06:de:9a:59:5f:d8:4a:78:b1:c0:2b:e3:
11:99:42:08:f1:64:cb:cc:0f:7f:de:a8:9d:d1:36:
c0:29:02:20:33:35:a4:87:6b:94:22:9e:09:31:f6:
38:cb:04:2a:f4:55:da:7b:60:22:61:bf:9f:28:9b:
07:12:3c:e5:97:f1:23:a4:79:a3:5c:57:46:ed:c7:
36:cf:b9:71:67:e4:0f:bf:3f:28:37:70:8e:23:1c:
d6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6D:87:EA:C3:83:0B:55:24:F8:01:FC:9B:40:01:BF:06:EB:A7:02
X509v3 Authority Key Identifier:
keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:01:dc:c7:d8:ce:41:af:60:61:97:12:43:57:18:8d:31:b7:
99:7f:c9:39:0f:b9:4d:68:37:ae:17:4f:a1:cc:79:0c:f9:9c:
68:be:a8:b1:39:f7:fe:bf:4a:82:69:12:07:a6:c0:e1:a3:12:
d7:df:52:d9:61:c6:b2:a6:8b:64:dd:fb:c9:05:96:aa:3e:05:
02:39:eb:81:65:e4:8e:72:e3:69:be:56:46:0f:be:7d:d4:63:
87:07:0d:fa:6d:ed:c5:2d:59:1f:7e:bf:3a:d6:52:2e:a8:94:
92:c1:20:dc:50:e7:f6:83:f2:e0:92:e5:6b:3f:4c:f5:fc:58:
f1:f4:03:a7:97:34:74:29:e3:fc:99:2c:6b:8c:7f:28:4c:a9:
11:f7:c9:2e:23:17:a1:f9:75:c6:fe:f4:ec:2a:03:ca:ae:27:
87:20:01:93:b8:d3:d9:09:39:f4:aa:a0:05:2e:aa:08:1a:f7:
b1:1b:fe:0e:75:1d:57:42:f4:f1:48:73:0c:c9:53:1f:b8:8d:
49:b4:d9:d4:95:e0:06:6e:84:22:44:73:a2:0a:04:5e:64:22:
75:e9:95:3f:2b:8f:44:7f:f6:23:38:b5:fc:02:7c:7c:92:a9:
b8:12:7f:98:a6:7b:e6:c0:70:f3:8f:e5:0a:db:f7:7d:52:5e:
1f:85:c0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:25:36 2025 by rpki-client