Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
File: YKhR1ZNWypXUrnj6aTa6G4orHHo.mft (raw, json)
Hash identifier: sG0Y0wvJdhk027eql9KF4nk1WiP8cBpuwkNj5auLhYg=
Subject key identifier: F7:94:4D:57:32:91:58:48:5D:69:DA:6F:9A:55:04:A9:EA:5C:35:1E
Authority key identifier: 60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
Certificate issuer: /CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Certificate serial: 0195DFD90ED16CCA420B5A57E17FC9F7287D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
Manifest number: 14C1
Signing time: Sat 29 Mar 2025 03:01:38 +0000
Manifest this update: Sat 29 Mar 2025 03:01:38 +0000
Manifest next update: Sun 30 Mar 2025 03:01:38 +0000
Files and hashes: 1: IbhrSRL4bnUd7cnSOKRsJzgkJxM.roa (hash: b/cViJlJxKUPbwFvpzqTCCVlNXv5JOZkWmVOeYB/zSc=)
2: YKhR1ZNWypXUrnj6aTa6G4orHHo.crl (hash: NPRUz+7dxgRDVFvACFdzPE96KubON6rdNwgAEup/jkM=)
3: t987O0pDHzvcsP9c7cARqX9qeU4.roa (hash: hXKjhjrksvE7FwT6RC0bILWOybHNXPXiwbfxF18ramw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:0e:d1:6c:ca:42:0b:5a:57:e1:7f:c9:f7:28:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Validity
Not Before: Mar 29 03:01:38 2025 GMT
Not After : Mar 30 03:01:38 2025 GMT
Subject: CN=f7944d57329158485d69da6f9a5504a9ea5c351e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:6d:80:e5:bb:2f:b7:ba:69:e2:ab:2b:41:
c4:e5:73:25:ec:76:c6:14:79:b6:45:38:92:2b:c6:
12:5d:4e:6e:51:31:b1:12:15:3a:d5:df:91:92:f4:
f3:f7:1e:9b:bc:7b:c2:b2:d2:42:6b:87:2f:6a:31:
c1:db:60:63:14:35:e0:96:1d:be:d9:aa:0e:be:2e:
b5:94:12:ac:8c:c2:2d:2d:70:01:64:51:3f:cc:67:
db:49:b1:42:f5:fa:a5:c7:1e:bc:20:84:f9:d8:a5:
f4:d8:62:02:64:3e:00:08:9f:2d:cc:45:6d:a6:da:
77:4c:50:a4:46:98:c8:2d:2b:5a:7d:b3:16:8c:0b:
ca:8d:4f:2c:52:14:7a:98:ee:14:3e:f5:9d:a5:1f:
c3:fd:c6:63:51:30:c5:c8:8b:d4:a3:34:2c:ed:d2:
32:69:61:92:16:38:bd:b7:18:b3:97:b7:56:0d:76:
04:34:7f:32:b9:a3:73:bb:cf:14:2f:a3:4e:8c:88:
5a:69:61:aa:9a:09:1c:0c:65:1c:7a:bb:d8:31:01:
ac:be:94:25:04:98:5d:3f:c2:e1:9a:14:6e:22:f0:
7d:ea:cb:b3:83:81:2b:8f:b9:2e:14:8d:dc:26:d7:
d1:c7:97:98:f6:2e:ec:e7:b8:ad:a6:29:bf:38:f7:
95:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:94:4D:57:32:91:58:48:5D:69:DA:6F:9A:55:04:A9:EA:5C:35:1E
X509v3 Authority Key Identifier:
keyid:60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ed:a5:c1:eb:05:f3:c1:8a:e1:ec:af:4f:b7:32:ba:aa:08:
f2:40:35:ee:47:9d:33:5e:8c:5f:99:a0:6b:7b:1d:04:85:f1:
d2:84:a3:2c:cb:76:02:c7:25:cf:2c:58:ee:4f:9a:98:39:6c:
a2:1b:83:75:79:45:f7:b7:33:1d:23:15:4b:00:c4:f4:46:02:
9d:ce:4c:65:d5:d7:60:15:38:2d:46:0f:4d:1f:b7:b1:6d:3a:
dd:97:a2:c6:75:71:98:9a:b8:90:43:9b:cc:f5:ee:6b:ef:29:
ae:ed:bf:b8:97:d5:12:e9:5a:6d:b9:df:41:3e:a3:8c:4d:89:
51:39:16:0e:0e:0a:28:05:0e:2e:68:aa:a6:d8:fc:eb:76:50:
87:e2:68:f5:9a:46:af:39:0a:e2:62:0c:a0:e8:dd:f2:f3:d5:
6d:35:23:1b:eb:5d:d2:11:a1:98:31:7c:51:8d:a4:97:ce:57:
f2:c4:ba:5e:ac:b6:c5:0f:9d:c4:0c:ce:d3:b1:6d:c2:02:6b:
ab:85:3a:01:46:54:a3:c5:54:5a:b7:fa:98:3b:a8:e3:d6:41:
df:12:65:dd:98:95:c5:59:9c:de:29:02:5c:1c:ac:6c:8f:cc:
c3:9f:16:83:db:0d:af:28:cd:f9:15:34:84:62:ae:9d:c5:58:
2e:be:5a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:01:19 2025 by rpki-client