Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
File: YFUi433iaw1WiVrBirB9fHhKuTw.mft (raw, json)
Hash identifier: VtwjP/xpEqdjxP2nKNbAJ6RiQopK5kLtc+UsbvNuGs8=
Subject key identifier: 41:0E:8F:1D:FB:3E:8F:CB:E4:9F:8E:4C:8B:70:5A:07:F2:87:DE:CF
Authority key identifier: 60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
Certificate issuer: /CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Certificate serial: 0195E0B43996D40D0B7D3F7296DC3C5F3B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
Manifest number: 0D72
Signing time: Sat 29 Mar 2025 07:01:02 +0000
Manifest this update: Sat 29 Mar 2025 07:01:02 +0000
Manifest next update: Sun 30 Mar 2025 07:01:02 +0000
Files and hashes: 1: YFUi433iaw1WiVrBirB9fHhKuTw.crl (hash: Mi6/PDK/1lh3BU02LkDYPDeF58GcA7DHm7EUcdT4I+o=)
2: v4bbx4Tyrv4mjtMYql77jSIvfEA.roa (hash: A4gl29evMU8HAtsdqZFfkRY14UgWdfJ98W4DA9n97zk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:39:96:d4:0d:0b:7d:3f:72:96:dc:3c:5f:3b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Validity
Not Before: Mar 29 07:01:02 2025 GMT
Not After : Mar 30 07:01:02 2025 GMT
Subject: CN=410e8f1dfb3e8fcbe49f8e4c8b705a07f287decf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:07:82:63:70:28:74:a1:c6:ca:ec:8c:72:cc:
2d:10:ae:97:55:87:9c:13:10:f0:e0:2d:f3:60:22:
2c:90:f2:9f:37:58:c5:3e:fb:75:cc:34:69:45:dd:
b5:d9:51:af:21:32:00:b4:fb:b8:0c:7d:95:d2:73:
be:12:8a:9d:6c:d1:63:44:a5:ba:88:92:f0:11:4d:
d1:b7:d4:27:93:b9:7c:6c:7d:69:19:54:57:6d:74:
dd:d3:a7:3e:75:77:4a:01:3c:59:25:07:88:4c:9f:
17:3e:14:12:78:36:5a:ee:be:96:32:92:a2:1b:c0:
23:ca:9f:4c:39:f1:4a:f7:80:9a:4f:93:4e:5a:33:
03:9c:0c:03:17:b5:8f:dc:3b:1d:93:0d:d6:21:8d:
0c:10:03:8f:79:f7:d7:f9:46:da:5b:40:b0:49:68:
86:e2:f9:a2:f8:a0:1b:13:5f:38:27:38:e4:f5:1c:
98:03:c6:45:db:d7:f2:af:ea:4d:f9:81:bd:85:7b:
ce:45:bd:7d:a3:56:35:ad:29:b8:1f:fa:e5:4a:28:
94:15:ca:e4:91:c7:5c:4b:c5:4e:39:7e:ef:e1:be:
c5:39:8e:08:e3:4b:a5:58:2e:03:59:14:a9:ad:a6:
f3:f3:5e:8f:20:37:ef:37:00:39:a7:e0:77:91:20:
35:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0E:8F:1D:FB:3E:8F:CB:E4:9F:8E:4C:8B:70:5A:07:F2:87:DE:CF
X509v3 Authority Key Identifier:
keyid:60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d3:68:4b:e6:49:40:ac:41:cb:46:a3:45:4c:48:36:16:00:
ba:d2:aa:75:27:42:c6:d2:43:65:f8:35:61:97:c3:a2:84:17:
0e:96:7f:df:12:0c:0d:b0:e7:79:1d:63:c3:10:b8:94:82:47:
69:b0:b3:20:c4:7c:d0:6c:7f:5a:77:df:21:8d:a8:c7:c2:01:
3e:49:68:3d:31:ba:1d:3e:d1:24:87:3a:1c:95:a0:ad:70:03:
06:d2:b3:48:66:fd:7d:9d:5c:98:4b:da:7b:cd:e5:81:a7:d7:
27:ea:8e:61:a7:0d:17:7a:5a:13:43:8a:51:d2:d4:fa:fb:88:
e2:f6:7a:83:84:3b:17:8c:d2:6a:46:c6:cd:f7:c6:59:15:d9:
9a:86:73:aa:e6:b6:2e:19:00:af:0d:40:0f:b2:f3:fb:c4:3d:
6f:99:ce:e6:c6:a1:22:7d:b1:68:e8:45:21:d9:de:08:b4:81:
83:d1:60:ed:fd:1e:8f:d3:d3:03:1f:e4:13:f4:36:22:07:a9:
f7:63:46:65:db:ea:3b:2d:48:f4:ca:88:c2:e1:1f:18:84:2a:
b2:ec:c2:35:2f:36:20:c4:b2:74:b9:8e:d0:f0:25:18:ac:e1:
d9:15:12:c4:ed:a2:d5:1c:e3:6a:bd:94:fb:ef:9a:c9:4e:88:
38:db:a3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:26 2025 by rpki-client