Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.mft
File: YJEWCYTLyZHrycoKhXAH0fLBGi0.mft (raw, json)
Hash identifier: MxcTzxPjq6eRzUzSFGjmEJ1sBELgIZ6GDUK5AvpcebM=
Subject key identifier: 9B:ED:2D:C4:EE:FB:45:4D:24:B4:9F:E3:96:A9:D6:BB:1B:12:28:32
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Certificate issuer: /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial: 019600B7D66B03F4A997ED01D9714BDD2AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.mft
Manifest number: 032D
Signing time: Fri 04 Apr 2025 12:12:49 +0000
Manifest this update: Fri 04 Apr 2025 12:12:49 +0000
Manifest next update: Sat 05 Apr 2025 12:12:49 +0000
Files and hashes: 1: 1-4IqqdG84zYjDbYxh1iKTtW9Smo.roa (hash: yzep1IYTlzVdv12x75YchPaG1AAtBtQK+RThV8Hbfhk=)
2: QSi-Kx2JbO-OjQtiFOkVmp0_fhk.roa (hash: YT86ayCkJpdHKqr/FXeJHI0T7+jnwOUJlWcGkvUNd7s=)
3: YJEWCYTLyZHrycoKhXAH0fLBGi0.crl (hash: MqcprOXeLDqlFfBxRF2uCLHUkkTtVwTVUtSw5TTATC0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:00:b7:d6:6b:03:f4:a9:97:ed:01:d9:71:4b:dd:2a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Validity
Not Before: Apr 4 12:12:49 2025 GMT
Not After : Apr 5 12:12:49 2025 GMT
Subject: CN=9bed2dc4eefb454d24b49fe396a9d6bb1b122832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3d:2f:75:35:ab:75:5b:03:9c:94:04:e0:2c:
13:37:6e:1d:10:38:2b:74:45:35:85:c1:51:6a:ca:
ae:7a:e7:25:fc:53:5f:16:35:da:04:75:66:96:f9:
39:91:06:a8:23:e0:3d:58:66:9b:ea:ad:ee:13:5e:
ed:06:8d:a4:0e:30:0e:5a:27:3d:43:0a:32:41:20:
72:6b:1a:84:6b:b4:53:06:c7:86:44:c5:86:57:bd:
78:b0:b9:85:80:07:3e:7c:19:bc:6e:65:42:7f:c7:
5e:3d:e6:2f:f9:1a:40:d8:ac:4e:7b:e8:6a:0a:c4:
a2:77:1b:90:13:2a:01:dd:63:11:fe:da:4a:16:e4:
f2:88:76:a6:d9:ac:93:d0:9b:c6:96:4b:8c:81:a8:
3d:e9:d1:fd:c1:f7:ca:b1:70:3c:8c:e5:85:16:c3:
93:3a:24:04:c5:25:bd:12:d7:ae:5c:f7:11:e2:bc:
82:89:d0:e8:bf:88:ee:14:44:7c:e4:25:c0:c8:35:
f1:1a:a5:3d:69:22:2c:db:67:e2:e1:83:40:b5:ef:
e1:ec:38:1f:b3:3e:d0:cf:b8:62:6c:02:09:01:94:
5f:8d:42:87:2f:49:67:cd:85:78:e4:9f:ff:a8:8b:
6d:e2:44:f3:44:7b:55:c3:e9:53:60:65:68:f3:40:
cd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:ED:2D:C4:EE:FB:45:4D:24:B4:9F:E3:96:A9:D6:BB:1B:12:28:32
X509v3 Authority Key Identifier:
keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:5d:f5:ad:dc:f5:22:1b:09:e6:20:92:d4:dd:3f:25:11:5f:
6d:bc:4c:24:5c:00:eb:2c:e9:a4:ec:ce:e0:3b:2b:05:56:a8:
11:6c:34:f5:75:71:44:34:cd:f1:b4:da:af:cf:1b:f5:69:db:
c1:e3:70:eb:8e:3c:97:3a:4a:e0:a2:35:a5:86:09:ae:d3:8e:
9a:5d:87:ba:96:11:d2:28:f9:a5:6c:d3:93:c7:d7:5f:ae:fb:
2d:e0:c7:a2:0e:02:6b:df:2c:84:54:8b:db:9b:b3:2b:ad:9e:
69:fd:f1:42:b3:4f:c9:8b:f8:8e:85:90:66:d3:5e:c0:8c:c2:
bc:77:67:55:07:05:3b:42:1f:cf:86:47:f7:b0:96:06:e8:a9:
b5:cd:f0:c8:97:dd:dc:0c:2d:b9:bd:6c:f3:21:d3:74:fa:44:
28:40:58:8d:c8:13:05:dc:f0:77:d1:b9:7d:6d:6e:22:d0:c8:
b4:4d:3a:17:bb:d6:f7:98:bd:04:d4:2b:cb:81:3c:16:5f:cb:
12:41:cf:11:6f:75:11:6e:d4:df:6a:13:6b:f5:8f:26:96:66:
fd:99:08:28:bb:f6:44:9d:9c:59:fd:39:ae:28:8b:eb:97:82:
39:a2:8d:35:4d:f9:ac:e9:39:9a:ae:77:51:86:45:d2:65:ae:
22:55:cf:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:23:15 2025 by rpki-client