Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/72ee7b-6018-49e8-85a7-258ecb4ee605/1/YAB38hSPbYdXlJmVEU_fUQBUoKY.mft
File: YAB38hSPbYdXlJmVEU_fUQBUoKY.mft (raw, json)
Hash identifier: oGU6mTBQtn3l4QDOvkC5EuwhLQPJMa9/cbw6POvXlvA=
Subject key identifier: 5A:05:D7:5E:9D:27:4A:85:83:6E:6A:91:7B:B9:D9:E1:80:D3:E4:C2
Authority key identifier: 60:00:77:F2:14:8F:6D:87:57:94:99:95:11:4F:DF:51:00:54:A0:A6
Certificate issuer: /CN=600077f2148f6d8757949995114fdf510054a0a6
Certificate serial: 01837DE9B9BF01CF23CA04B7F7E87B02D957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAB38hSPbYdXlJmVEU_fUQBUoKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/72ee7b-6018-49e8-85a7-258ecb4ee605/1/YAB38hSPbYdXlJmVEU_fUQBUoKY.mft
Manifest number: 0ADE
Signing time: Tue 27 Sep 2022 07:46:52 +0000
Manifest this update: Tue 27 Sep 2022 07:46:52 +0000
Manifest next update: Wed 28 Sep 2022 07:46:52 +0000
Files and hashes: 1: YAB38hSPbYdXlJmVEU_fUQBUoKY.crl (hash: WAp0/DGZwwyDwmOJmbb8XZEVwBlVyI1leDHoZC+BgZM=)
2: w9h2szYOQrX4psSGkbmDEKMgDts.roa (hash: Y9Z0oncCij0O0ZFfR5Asa3unGSao/FVd51BY8U5M9wQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7d:e9:b9:bf:01:cf:23:ca:04:b7:f7:e8:7b:02:d9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600077f2148f6d8757949995114fdf510054a0a6
Validity
Not Before: Sep 27 07:46:52 2022 GMT
Not After : Sep 28 07:46:52 2022 GMT
Subject: CN=5a05d75e9d274a85836e6a917bb9d9e180d3e4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a2:7a:e0:d0:33:49:64:3c:d4:77:38:4d:48:
21:fc:2c:71:c4:a7:0e:ce:80:bc:50:f2:eb:b0:ee:
36:f2:bf:9a:bf:dc:4a:14:d5:fe:fa:0d:2d:5f:34:
41:e8:72:06:47:98:e6:7b:06:f3:00:38:9a:80:6e:
21:36:8e:06:02:eb:f7:ec:4b:e9:fd:b3:fb:57:ea:
96:49:46:35:ea:d1:97:20:cc:e4:00:e0:76:c6:4d:
79:61:59:2f:ae:02:1d:c7:56:e8:02:ec:00:4c:92:
dd:0b:ff:17:6d:08:3b:58:2e:e6:7c:06:e6:5e:f6:
4c:d8:77:5e:2b:5a:f9:9c:31:ea:d1:e5:0c:2b:4f:
8a:7b:55:46:9d:62:cd:b4:0e:af:af:d2:53:49:c6:
98:13:c8:48:7d:9e:79:a3:b2:9e:5a:e6:37:fc:76:
0a:34:8d:ac:2e:87:db:6e:fd:e5:06:ab:b1:dd:4a:
38:17:be:b6:9e:2e:d7:6e:92:c9:17:29:00:0f:29:
ad:bf:ee:1b:7b:73:29:dd:a6:a5:8e:24:82:a6:a4:
01:ee:62:86:7b:07:d3:46:aa:b9:2e:16:50:80:75:
b2:30:a5:80:4a:cd:65:75:4d:4d:57:49:c8:1d:da:
85:0e:52:72:c0:3b:1c:18:1d:cf:71:72:a4:ea:1f:
b9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:05:D7:5E:9D:27:4A:85:83:6E:6A:91:7B:B9:D9:E1:80:D3:E4:C2
X509v3 Authority Key Identifier:
keyid:60:00:77:F2:14:8F:6D:87:57:94:99:95:11:4F:DF:51:00:54:A0:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAB38hSPbYdXlJmVEU_fUQBUoKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/72ee7b-6018-49e8-85a7-258ecb4ee605/1/YAB38hSPbYdXlJmVEU_fUQBUoKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/72ee7b-6018-49e8-85a7-258ecb4ee605/1/YAB38hSPbYdXlJmVEU_fUQBUoKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d2:af:c2:11:39:d2:b1:d6:b5:d5:a1:18:a2:c4:ed:92:3a:
c0:ad:12:77:b6:f0:2d:ec:49:cd:9b:8f:42:59:12:4b:74:57:
8f:27:99:04:24:14:06:81:21:56:75:97:d0:b2:9b:80:9d:22:
6e:41:36:3c:29:39:00:fb:1b:b8:8c:22:09:4e:e5:10:f9:1e:
45:eb:77:2a:09:da:c2:0f:4d:db:8d:af:bf:ec:cf:a1:3b:fe:
6e:50:24:ef:54:9c:4e:5e:24:fb:14:c0:ed:5c:71:3d:7b:54:
ea:cb:44:3b:d2:09:52:f4:7f:d6:3f:6c:d0:bb:33:8c:8f:81:
e9:bc:87:a0:2e:c5:86:43:fd:44:bc:3c:85:cc:ec:4c:7e:03:
a6:92:49:30:81:29:2f:a5:12:cd:55:b6:00:86:b2:db:94:50:
f8:b8:b5:43:2d:46:c5:27:57:a8:d8:1f:0f:44:e1:87:b5:86:
77:9a:23:7f:17:1c:d4:99:8f:1e:67:54:59:2a:64:1b:b1:7f:
62:fe:7b:ad:80:0d:60:a5:f7:9d:9d:79:0b:4b:74:b3:51:0d:
c7:2a:59:14:4e:e3:a4:00:88:59:32:92:76:83:13:92:d2:2d:
b5:a0:d2:05:26:01:fd:d5:89:1c:d1:80:fa:3e:cd:72:a8:78:
7c:ba:c3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:17:19 2025 by rpki-client