
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/YkHuLESs6KczhMJVrXfGwfBFJIY.mft
File: YkHuLESs6KczhMJVrXfGwfBFJIY.mft (raw, json)
Hash identifier: gr+Ygq8JScKAEX8Xwj3UbZL/BcEob59zz8OnvzdIUgc=
Subject key identifier: E4:59:B3:69:28:A4:01:DE:B4:88:28:2E:9F:3B:09:6D:E6:77:FC:DB
Authority key identifier: 62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86
Certificate issuer: /CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
Certificate serial: 018C5BC17156B2F7C4F677CF2DC0A00D219A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/YkHuLESs6KczhMJVrXfGwfBFJIY.mft
Manifest number: 05AF
Signing time: Tue 12 Dec 2023 02:00:53 +0000
Manifest this update: Tue 12 Dec 2023 02:00:53 +0000
Manifest next update: Wed 13 Dec 2023 02:00:53 +0000
Files and hashes: 1: 6qU6lKP0IjN7mshlfyzm7Sc4wn4.roa (hash: ++jaHchRw7S5+/M/Y4WLIGbo4nVBKjhxyeIRR20j/Ks=)
2: 8CV_4ygnLIHarraBhz3oGUMWMOk.roa (hash: L6jHG9A6f7B6PJSq79KhFuddAKgB7h0BRkRypkd+Otw=)
3: YkHuLESs6KczhMJVrXfGwfBFJIY.crl (hash: oOgu9wz8hbfH9m5ZjUgFSzPCedvd5ZRetBPtfOGf7sE=)
4: mT-oHuL0v79KccCyu48NsarCeOc.roa (hash: AXV2/21YI2Wbg6utxDV0PptYaVwUUwyMR9Suj5x0ces=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5b:c1:71:56:b2:f7:c4:f6:77:cf:2d:c0:a0:0d:21:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
Validity
Not Before: Dec 12 02:00:53 2023 GMT
Not After : Dec 13 02:00:53 2023 GMT
Subject: CN=e459b36928a401deb488282e9f3b096de677fcdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:25:c7:ce:06:27:2f:06:c7:5a:13:6a:6f:ee:
ea:fa:34:94:08:73:97:b8:f9:a1:7d:74:c6:90:82:
a0:4a:0c:30:e7:73:f9:bb:c7:26:3a:99:68:b7:f9:
bf:4a:53:66:89:b8:e4:2d:3c:13:63:95:5b:44:3f:
b5:7f:90:6c:aa:d8:59:eb:bc:e6:d3:14:29:40:99:
1f:a7:a4:5f:17:37:7f:24:78:0b:69:cd:c5:a2:a2:
b5:88:be:9d:f7:75:15:5c:24:5f:33:03:e6:a5:50:
f7:24:ea:1a:0b:fe:b3:e5:29:06:6f:5c:bd:20:f9:
5d:21:39:54:fa:d0:f2:e8:2c:f4:6d:75:34:4f:c8:
f8:21:fd:4f:9d:92:61:60:11:fe:82:40:81:c3:84:
21:91:8c:a2:4d:c3:ce:16:ff:86:17:b4:d0:80:4d:
86:e7:a2:a3:79:83:20:11:66:38:64:a5:56:22:87:
66:f8:15:04:ff:7b:2a:6f:1c:09:32:07:8d:d3:65:
c6:e1:56:24:37:c3:eb:66:1c:3b:4f:c3:01:a9:76:
57:af:67:67:52:1d:18:bb:38:b2:0c:a8:7d:b6:68:
0f:80:2a:b1:b5:e1:ba:fb:7a:24:8c:92:84:0f:87:
44:a6:ea:9e:9c:f3:d2:76:71:37:22:3e:81:a6:63:
bc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:59:B3:69:28:A4:01:DE:B4:88:28:2E:9F:3B:09:6D:E6:77:FC:DB
X509v3 Authority Key Identifier:
keyid:62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/YkHuLESs6KczhMJVrXfGwfBFJIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/YkHuLESs6KczhMJVrXfGwfBFJIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f0:41:a5:8f:a0:03:1a:0a:f5:1a:e2:d3:e1:f6:48:c4:3c:
be:82:21:f6:65:b4:d2:ef:3c:3a:35:da:fc:6d:62:b5:d4:67:
07:f7:f8:fb:40:8d:18:62:fd:03:6c:cf:3f:be:a0:6d:38:5d:
d9:2e:8d:4a:76:8c:8c:d3:9e:d8:a4:51:98:67:d8:bb:08:25:
59:6d:1d:63:b4:f9:58:6f:1f:6c:85:2e:cf:d2:16:b5:97:62:
85:e6:13:1c:59:12:d3:d0:4b:98:b2:f9:a7:b8:8c:81:a2:aa:
0b:cf:45:7d:57:a7:b1:57:a3:af:a2:af:f5:b9:b2:4c:20:f2:
6a:95:31:a5:40:8c:75:48:8a:2d:c8:bf:5c:01:33:ef:77:1f:
fe:2d:03:db:eb:38:e8:44:e6:11:8b:20:7c:c6:47:14:08:c1:
2a:40:20:b6:d4:f7:d1:b5:c5:02:c0:98:c9:bd:bb:6c:63:af:
aa:45:a7:8c:88:49:19:cf:ee:c7:bb:bf:da:20:0d:18:b8:2d:
c5:7b:7b:25:c1:bb:f3:a7:d8:f9:42:31:6c:f8:ee:ce:fa:a6:
20:c1:84:ce:7c:0e:41:b0:81:3d:72:98:ec:cf:52:5d:df:84:
90:8c:1a:9c:ad:1f:35:f9:a9:cb:5d:df:14:e8:5c:6b:bd:8c:
4b:39:44:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:52:35 2025 by rpki-client