Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
File: YepnO-KLST26RBhw-1Dlmg0cF8U.mft (raw, json)
Hash identifier: tPNErhKjgkAkTi8z+sE2bhNlcs2kAGwd0FYDDfGDSHk=
Subject key identifier: 85:86:A3:6B:4A:A7:37:5A:F9:39:6C:F9:B0:BD:30:A2:2A:24:46:CB
Authority key identifier: 61:EA:67:3B:E2:8B:49:3D:BA:44:18:70:FB:50:E5:9A:0D:1C:17:C5
Certificate issuer: /CN=61ea673be28b493dba441870fb50e59a0d1c17c5
Certificate serial: 0195E07DA4F4D467D31E97A4A0E7523D1280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
Manifest number: 14C1
Signing time: Sat 29 Mar 2025 06:01:25 +0000
Manifest this update: Sat 29 Mar 2025 06:01:25 +0000
Manifest next update: Sun 30 Mar 2025 06:01:25 +0000
Files and hashes: 1: YepnO-KLST26RBhw-1Dlmg0cF8U.crl (hash: A8k5FbOZMSPBzWYNQL/yrNQCgLoVphdLe3S/O91JtmU=)
2: syKB6zisduN4C3cAJozjgCCO0PY.roa (hash: 0Vdx4RjEX6ZtXLCLRmfeUBESEOKss3f6Va2BIWn7LcE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:a4:f4:d4:67:d3:1e:97:a4:a0:e7:52:3d:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ea673be28b493dba441870fb50e59a0d1c17c5
Validity
Not Before: Mar 29 06:01:25 2025 GMT
Not After : Mar 30 06:01:25 2025 GMT
Subject: CN=8586a36b4aa7375af9396cf9b0bd30a22a2446cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:53:27:e8:f6:07:04:ed:2b:88:6a:18:47:
9f:e4:73:f5:cf:94:15:63:45:d7:06:bf:91:1a:d9:
e4:82:38:bf:8d:9d:55:00:09:cc:14:6f:a6:da:de:
e0:d9:77:e4:b6:c2:f9:61:2a:6c:f5:f7:2a:ff:6b:
4c:f0:68:c5:83:5b:f4:af:f0:11:ee:60:b8:a9:08:
60:81:03:60:ff:fc:45:3d:ad:9f:42:c5:ff:30:90:
12:c4:14:09:ae:2c:d7:17:49:43:4e:fc:ac:ce:47:
68:68:5f:8f:2c:93:e5:d7:cd:a6:1e:f3:73:23:6e:
ca:94:b9:e7:d5:1e:62:79:6b:60:af:3d:95:bf:c1:
2a:17:49:4e:b0:ad:f8:2d:7f:ba:da:24:d9:32:a9:
92:fc:13:98:22:9f:1e:06:af:9a:3a:25:24:e2:86:
f0:59:a2:c9:da:90:d9:1d:7b:26:e9:72:0d:c3:d0:
20:e6:67:81:df:e2:03:b5:7c:fb:32:43:48:d3:fe:
48:16:5c:b6:59:74:08:d5:6f:62:eb:e4:d4:ba:46:
6f:fd:82:9c:de:61:f1:93:46:24:71:08:c4:e0:77:
aa:34:27:08:57:28:6c:21:56:b5:4e:5e:e3:e0:17:
61:31:a4:ee:14:3d:57:69:af:26:10:df:a3:6c:3a:
29:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:86:A3:6B:4A:A7:37:5A:F9:39:6C:F9:B0:BD:30:A2:2A:24:46:CB
X509v3 Authority Key Identifier:
keyid:61:EA:67:3B:E2:8B:49:3D:BA:44:18:70:FB:50:E5:9A:0D:1C:17:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b0:0b:2c:ef:bd:77:91:38:f6:c1:ab:a6:2d:bf:e1:40:c0:
89:0a:37:e3:e9:d3:d7:5d:55:ea:de:93:28:79:2a:22:b5:e7:
15:08:65:40:39:ab:90:93:f9:17:d7:71:0a:49:06:01:14:20:
0e:a1:f7:75:cf:c2:06:9f:3c:fa:04:27:4a:38:b3:0d:60:6e:
74:0b:f7:10:3d:1e:49:43:3a:e8:1e:1c:ae:38:96:9f:13:e6:
3e:ac:60:5e:ed:e0:2e:1d:19:d4:6f:cd:af:2b:88:59:e3:6a:
71:bc:77:7f:9a:8b:f3:b8:35:46:a3:f0:1b:41:5f:fc:69:64:
93:19:90:d2:e0:ac:30:f3:39:24:51:db:6a:9f:ec:c8:9c:5c:
cf:a3:a1:b1:ac:41:2e:65:88:41:b1:86:79:f3:d1:5f:5a:4e:
b2:92:28:e9:09:ec:b8:e3:b5:d2:16:cb:84:62:03:28:a0:f9:
ba:54:b0:f1:97:9e:ee:1f:9a:65:79:12:52:37:81:96:50:f9:
bc:b9:31:12:97:09:52:0d:26:2e:ff:c9:35:be:37:5f:80:6c:
5b:93:11:1b:65:d8:f1:c9:cc:e5:ae:a3:b9:35:0c:80:e3:17:
e1:91:25:80:4c:1a:59:94:8b:41:a4:4e:3f:e5:6b:a5:0f:86:
a7:df:a2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:28:41 2025 by rpki-client