Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.mft
File: YTe126q6KK4oyOmpeA-3DCT8kZA.mft (raw, json)
Hash identifier: ZXjLt5a3iuvglTem4LiUnc4thSWqvqJOV4SbLMrY/q0=
Subject key identifier: 44:BD:C1:43:F4:C6:81:AF:BF:0F:58:B7:19:90:D0:13:FF:9B:5C:E0
Authority key identifier: 61:37:B5:DB:AA:BA:28:AE:28:C8:E9:A9:78:0F:B7:0C:24:FC:91:90
Certificate issuer: /CN=6137b5dbaaba28ae28c8e9a9780fb70c24fc9190
Certificate serial: 0195E0B42A1473BC24F17A52758484386E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTe126q6KK4oyOmpeA-3DCT8kZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.mft
Manifest number: 0AF2
Signing time: Sat 29 Mar 2025 07:00:58 +0000
Manifest this update: Sat 29 Mar 2025 07:00:58 +0000
Manifest next update: Sun 30 Mar 2025 07:00:58 +0000
Files and hashes: 1: YTe126q6KK4oyOmpeA-3DCT8kZA.crl (hash: /yyHLHP1zqTD4hBzycvuwqo4D+USBn5ZZ/FmDdFenqo=)
2: y77UWpMS4DRW9Z6BffFmy0sfx48.roa (hash: KSiUNsa6U/vvFkusIhQZvpAT5eNjje7RZN6spA/c4iI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:2a:14:73:bc:24:f1:7a:52:75:84:84:38:6e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6137b5dbaaba28ae28c8e9a9780fb70c24fc9190
Validity
Not Before: Mar 29 07:00:58 2025 GMT
Not After : Mar 30 07:00:58 2025 GMT
Subject: CN=44bdc143f4c681afbf0f58b71990d013ff9b5ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:31:2a:9d:a5:f7:06:4f:79:52:82:c0:c5:8a:
41:51:1f:e3:f3:46:6d:8b:a1:1a:f6:f4:14:ef:b0:
88:63:a8:45:b6:2d:19:9b:34:dc:46:99:98:d3:5f:
ed:96:9e:da:94:c0:e3:54:3c:1c:5a:6c:bf:01:ac:
84:55:53:42:11:28:5f:73:d6:1c:55:6f:da:9d:2a:
0d:71:12:08:83:b5:33:74:77:c9:2c:10:a7:46:a1:
0a:cc:95:72:75:d7:e7:e2:8b:d1:8f:10:bf:aa:54:
2b:61:2b:ac:2a:19:7f:56:bc:ff:46:1d:d8:51:64:
85:43:b7:69:fa:47:bc:71:21:b8:26:1e:39:f2:9d:
d8:90:04:61:75:e6:8e:05:a4:61:2c:fd:c5:3e:ba:
1e:67:04:d7:d9:b4:05:58:69:15:21:84:39:35:5c:
2a:40:24:31:fd:fc:9c:00:89:8b:2c:83:b7:3f:53:
ec:e5:1d:8e:c7:82:ba:db:6c:26:3c:db:88:c0:e0:
e1:1e:40:51:55:07:2b:6d:44:41:85:8f:eb:0b:6f:
2f:14:ca:ec:54:80:96:47:bf:45:ca:a7:dd:3d:4c:
de:95:75:22:f5:c0:d0:d7:51:94:68:08:5a:b6:8e:
ae:e3:77:50:b0:9f:fd:70:3b:17:22:a5:b3:16:2f:
76:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BD:C1:43:F4:C6:81:AF:BF:0F:58:B7:19:90:D0:13:FF:9B:5C:E0
X509v3 Authority Key Identifier:
keyid:61:37:B5:DB:AA:BA:28:AE:28:C8:E9:A9:78:0F:B7:0C:24:FC:91:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTe126q6KK4oyOmpeA-3DCT8kZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b0:71:f0:16:c7:7a:57:67:f7:65:73:22:7a:8e:65:0b:1f:
a6:4d:07:4d:22:49:5f:e6:e5:b6:cd:6e:7c:cf:d7:10:cf:52:
c0:26:ab:23:91:9d:ff:e1:53:fd:a7:d1:91:de:ef:4a:e2:e4:
76:33:56:93:47:b4:6f:c1:51:90:26:96:5b:9b:a8:9d:24:2d:
97:b8:b9:28:09:00:68:43:d2:8a:9b:cb:07:18:b7:c5:75:04:
56:8a:88:35:ad:87:12:28:89:76:80:db:25:8d:86:9e:42:95:
f0:d6:c5:c0:e0:d2:8b:1e:c2:36:04:cc:c4:13:db:cb:0d:2d:
38:15:ab:3c:e7:a6:ca:74:28:7c:e8:3b:98:67:64:a7:48:7d:
71:07:cf:6d:a5:c1:af:47:c8:9c:d8:ec:d7:92:52:b9:29:b1:
24:4a:dc:4d:8e:62:74:17:c3:6f:ce:e3:ce:4c:c0:f7:c4:bc:
2d:b9:ba:fd:98:61:9a:1c:ef:bd:69:cb:cc:b7:df:2c:f5:47:
14:64:ae:86:27:1c:84:b6:f1:fd:ff:42:d9:7d:66:09:e6:b7:
2b:47:ec:97:c6:80:3a:2e:f7:af:bf:35:3f:6b:d8:9d:1b:1e:
9f:92:a6:a0:ee:d7:29:bc:ec:5d:ba:bd:ba:2b:20:90:e0:9e:
c7:9e:fb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:10:32 2025 by rpki-client