Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b61dd9-4c8e-4608-b1cb-74e5b2f46079/1/YAoy6AP7K_T0exeHeoElmaP78K0.mft
File: YAoy6AP7K_T0exeHeoElmaP78K0.mft (raw, json)
Hash identifier: ZsgbldeTLt80Z4vLK2QkBYywJCP7jg3ZU7loeY9nFgs=
Subject key identifier: 9A:0E:84:5D:43:0C:AE:5B:18:18:7B:5A:68:79:44:58:68:DF:DE:EE
Authority key identifier: 60:0A:32:E8:03:FB:2B:F4:F4:7B:17:87:7A:81:25:99:A3:FB:F0:AD
Certificate issuer: /CN=600a32e803fb2bf4f47b17877a812599a3fbf0ad
Certificate serial: 018A4F1D8814476480BBC4E8261581305531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAoy6AP7K_T0exeHeoElmaP78K0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b61dd9-4c8e-4608-b1cb-74e5b2f46079/1/YAoy6AP7K_T0exeHeoElmaP78K0.mft
Manifest number: 0C3C
Signing time: Fri 01 Sep 2023 05:00:49 +0000
Manifest this update: Fri 01 Sep 2023 05:00:49 +0000
Manifest next update: Sat 02 Sep 2023 05:00:49 +0000
Files and hashes: 1: Al-2Nc0oHg48_XreDk93KNvefSg.roa (hash: Vd1xfJ0bKJI98ZwHfSoRbsWNtAIIalvpbES1IqWGAss=)
2: YAoy6AP7K_T0exeHeoElmaP78K0.crl (hash: J9pVEM7KeUh+vVgzB562r8M+k0gzbbEizat/YUf+3FE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4f:1d:88:14:47:64:80:bb:c4:e8:26:15:81:30:55:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600a32e803fb2bf4f47b17877a812599a3fbf0ad
Validity
Not Before: Sep 1 05:00:49 2023 GMT
Not After : Sep 2 05:00:49 2023 GMT
Subject: CN=9a0e845d430cae5b18187b5a6879445868dfdeee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:ad:a8:d7:ab:c4:3c:1b:ec:af:09:3b:eb:
f1:fa:ef:14:89:e9:87:8d:61:ca:89:a8:25:53:1c:
cf:ee:aa:ae:54:55:a0:31:23:22:48:88:df:c8:6e:
d7:9f:6b:42:03:ba:42:aa:94:a8:20:a3:6f:d1:53:
60:9a:3c:5f:b0:d5:c2:66:d2:6d:af:f9:82:e5:7b:
66:39:79:5e:aa:60:a8:ca:9f:50:d0:11:ef:d2:7d:
c3:ab:8f:e4:04:8b:65:4a:0b:51:84:e8:1a:1b:4c:
c2:2e:d3:eb:de:3d:86:5c:65:af:af:d6:e8:7a:2c:
01:61:86:f7:f1:5b:1b:99:d7:65:aa:84:7a:22:44:
c9:73:74:72:38:ba:95:b0:63:ce:86:db:c2:8a:49:
28:5c:c4:4a:ed:72:a9:bb:30:b6:43:92:37:f9:ba:
d8:58:f5:1e:6f:19:43:27:1b:7f:48:17:08:dc:55:
b8:4c:82:5d:9e:ea:a8:c9:17:2b:40:18:06:5e:c9:
a0:25:c1:af:7e:21:b2:5a:fb:74:ca:60:54:99:30:
74:f9:ee:26:49:24:b1:ef:46:16:39:41:75:1b:02:
31:87:e3:58:23:d4:fc:ec:82:f9:5f:49:ec:bf:d2:
dd:51:e4:8b:d2:57:46:dd:53:e3:35:f3:7d:a2:4e:
17:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0E:84:5D:43:0C:AE:5B:18:18:7B:5A:68:79:44:58:68:DF:DE:EE
X509v3 Authority Key Identifier:
keyid:60:0A:32:E8:03:FB:2B:F4:F4:7B:17:87:7A:81:25:99:A3:FB:F0:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAoy6AP7K_T0exeHeoElmaP78K0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b61dd9-4c8e-4608-b1cb-74e5b2f46079/1/YAoy6AP7K_T0exeHeoElmaP78K0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b61dd9-4c8e-4608-b1cb-74e5b2f46079/1/YAoy6AP7K_T0exeHeoElmaP78K0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:63:6a:57:1a:f6:a6:a6:b8:63:8a:f2:d7:fa:63:fc:98:da:
58:42:d3:27:9e:72:03:0f:2e:04:d9:b6:ce:9d:4f:0a:88:0e:
f3:60:29:3f:b6:aa:75:34:3e:37:23:b6:f7:a4:f5:49:5f:75:
5d:d9:0f:d9:ba:54:2f:de:30:47:5f:3b:b4:de:45:3e:79:d3:
2b:84:d2:2b:63:e0:4e:db:22:ff:5a:2e:fe:d2:c0:6c:85:ca:
6a:6e:ca:27:0f:44:e4:bb:af:83:ad:7c:53:04:c0:b2:f7:f7:
cc:77:ef:3b:5b:61:53:0c:89:15:fd:6c:45:8d:17:52:4a:4b:
2d:67:e1:47:01:d9:3f:10:6a:c3:9c:df:c0:30:b2:c2:aa:77:
96:2f:78:e4:ea:b3:77:67:53:9b:b6:05:ee:4d:e7:20:e4:f7:
d3:91:6e:d3:f4:de:bf:c3:96:49:9b:94:a4:9e:c1:4e:ad:f2:
1e:8e:78:0c:ff:b3:ef:c3:8b:f9:77:43:7e:9a:98:84:58:a8:
fe:29:39:74:45:23:6b:3b:73:9b:90:e1:66:c4:f3:00:40:92:
98:03:c8:e9:d6:11:19:92:5a:2c:11:cc:0b:71:97:07:c7:b8:
f4:75:c6:ae:97:56:a1:59:3f:6d:7a:bc:53:4b:92:f4:61:f4:
2c:9f:ab:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:11:58 2025 by rpki-client