Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6727ca-2c59-4366-b7bc-97e386216535/1/ygH-gvH8Sre_gTruyR4KScFyiIw.mft
File: ygH-gvH8Sre_gTruyR4KScFyiIw.mft (raw, json)
Hash identifier: YzFgjkmez+ciIGB/u7csvykvUdkXGK2Qyzc8DDUiBK8=
Subject key identifier: 1F:89:D6:84:D8:94:68:6A:7D:43:C7:06:F8:10:F2:32:A4:14:12:4C
Authority key identifier: CA:01:FE:82:F1:FC:4A:B7:BF:81:3A:EE:C9:1E:0A:49:C1:72:88:8C
Certificate issuer: /CN=ca01fe82f1fc4ab7bf813aeec91e0a49c172888c
Certificate serial: 018CC854EFFB6E3353BB861DB59E69FEC615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygH-gvH8Sre_gTruyR4KScFyiIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6727ca-2c59-4366-b7bc-97e386216535/1/ygH-gvH8Sre_gTruyR4KScFyiIw.mft
Manifest number: 08B0
Signing time: Tue 02 Jan 2024 04:00:58 +0000
Manifest this update: Tue 02 Jan 2024 04:00:58 +0000
Manifest next update: Wed 03 Jan 2024 04:00:58 +0000
Files and hashes: 1: c8C4M88yIWdnhCuWAALMVYQaxlU.roa (hash: Awvd+u2u+kOn5qmIEKdsCmcc4WNqeEVyuUuqiJuhQBQ=)
2: ygH-gvH8Sre_gTruyR4KScFyiIw.crl (hash: W2wZBgDltMuej4HuvM97LkXy6w4CCP5EztqBWDDDFPg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:54:ef:fb:6e:33:53:bb:86:1d:b5:9e:69:fe:c6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca01fe82f1fc4ab7bf813aeec91e0a49c172888c
Validity
Not Before: Jan 2 04:00:58 2024 GMT
Not After : Jan 3 04:00:58 2024 GMT
Subject: CN=1f89d684d894686a7d43c706f810f232a414124c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:b0:d1:17:f5:d2:0f:ee:0f:63:28:c3:19:
c5:6e:f8:02:01:60:c7:4f:25:ed:66:4a:b9:5f:b6:
b2:76:22:a3:e6:00:5e:5f:5c:a0:d1:78:18:f9:54:
8b:87:0c:25:c0:8e:ac:70:3b:e2:22:a6:5a:0a:2c:
4d:ce:04:fc:00:d6:28:02:90:2b:5f:e4:ac:9e:32:
9b:ff:d4:ef:f5:24:8d:d2:62:2f:f7:a6:d3:77:26:
5d:c4:a3:cc:3c:0b:5f:63:d2:bf:70:80:50:81:b5:
14:09:c9:66:00:4b:63:53:d0:24:46:8f:3c:38:b7:
6c:a8:37:3e:29:77:06:91:37:31:96:50:8b:c0:e1:
6d:cd:35:59:6c:1f:51:2f:d4:5f:31:56:1d:cc:3e:
29:d2:95:67:f1:76:40:34:ac:09:fc:90:c7:c2:62:
47:83:2a:a4:39:b0:ac:10:52:18:a6:d1:ec:3b:97:
98:2a:f7:98:72:a9:61:6f:b1:1c:70:8b:83:cc:34:
fd:83:26:3f:91:49:b9:6f:a8:b9:01:62:f2:8e:52:
96:a3:93:db:7c:6e:51:ed:e2:07:ae:dd:3a:e4:4e:
e1:8a:5c:cc:0f:d5:3f:dd:ea:98:36:b4:4d:c6:bd:
87:fe:1f:48:00:e8:70:5d:4b:82:53:2e:3c:b7:bb:
22:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:89:D6:84:D8:94:68:6A:7D:43:C7:06:F8:10:F2:32:A4:14:12:4C
X509v3 Authority Key Identifier:
keyid:CA:01:FE:82:F1:FC:4A:B7:BF:81:3A:EE:C9:1E:0A:49:C1:72:88:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygH-gvH8Sre_gTruyR4KScFyiIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6727ca-2c59-4366-b7bc-97e386216535/1/ygH-gvH8Sre_gTruyR4KScFyiIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6727ca-2c59-4366-b7bc-97e386216535/1/ygH-gvH8Sre_gTruyR4KScFyiIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ce:22:e7:99:ea:bd:3d:12:55:4d:29:db:a3:dd:fa:48:63:
a1:80:f6:b6:b7:0c:60:3d:d1:7b:d2:ac:3e:2b:2b:26:a1:bf:
55:03:8d:0a:17:62:e0:bb:c1:f2:63:e0:ce:de:59:a1:52:37:
d1:3b:f9:66:3b:a5:1b:8d:bf:c1:19:d4:9e:8c:6c:a1:58:61:
46:d3:c5:bf:6c:f6:ed:be:13:fe:68:f5:1a:c9:b8:a0:38:3f:
d7:5b:c2:46:b8:18:56:c4:8a:96:9c:23:2c:9d:af:e4:c2:56:
a6:88:33:52:fc:e1:f8:b1:86:ae:74:48:72:45:0d:42:a7:bd:
fc:99:4d:53:83:69:09:75:85:cb:a3:3c:60:96:82:be:d6:2b:
e6:61:91:7a:23:e4:b6:10:d1:e3:2f:dd:d5:5c:a0:d7:a6:89:
60:25:97:81:45:ea:c4:5d:d7:d9:3e:b2:ac:f0:bf:e2:21:97:
59:24:db:14:73:63:10:b8:88:30:90:c7:1a:2c:a0:92:f0:93:
5b:bf:08:16:20:91:02:7c:f1:40:15:5b:57:f4:4e:80:78:3d:
94:40:43:c2:f4:22:b4:86:50:db:b1:15:da:8d:1b:29:27:81:
a4:a4:52:24:81:c5:f7:28:ae:d8:74:c3:dc:28:3a:f1:20:ed:
48:75:4e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 09:58:48 2025 by rpki-client