Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c0ec5b-fce5-49fa-80b5-5561c5a62d4c/1/YZuYctzEkvyXB_nsfBYRL0W4U18.mft
File: YZuYctzEkvyXB_nsfBYRL0W4U18.mft (raw, json)
Hash identifier: btUUCnoEaMbQ0pzuZDJa1I3y2/Plt+vhjPS0wrVkFZM=
Subject key identifier: C2:CB:4A:CE:35:04:3C:9B:03:B7:41:B4:3E:2F:2E:67:EF:B8:CC:B2
Authority key identifier: 61:9B:98:72:DC:C4:92:FC:97:07:F9:EC:7C:16:11:2F:45:B8:53:5F
Certificate issuer: /CN=619b9872dcc492fc9707f9ec7c16112f45b8535f
Certificate serial: 019386D1F764D6D644A71CBCCE9BBE78250C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZuYctzEkvyXB_nsfBYRL0W4U18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c0ec5b-fce5-49fa-80b5-5561c5a62d4c/1/YZuYctzEkvyXB_nsfBYRL0W4U18.mft
Manifest number: 0422
Signing time: Mon 02 Dec 2024 10:02:07 +0000
Manifest this update: Mon 02 Dec 2024 10:02:07 +0000
Manifest next update: Tue 03 Dec 2024 10:02:07 +0000
Files and hashes: 1: YZuYctzEkvyXB_nsfBYRL0W4U18.crl (hash: UGY5YpvzD+rQUEvFvC1oyXxZnQklcFaxlvDDcfIq1TM=)
2: rOCrrjaWzqaeh5UoZU0eiYBArxM.roa (hash: 2vAuU1yxBlR9ZU9D1ADHnb95gjt0C7DSErNWYGjxYCU=)
3: vexXV1wR4zNqnAbXry46LPBda94.roa (hash: YCwFzA9CcKB54ur/gGz+48sFo09E0XDtHHazUYBQeeE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:86:d1:f7:64:d6:d6:44:a7:1c:bc:ce:9b:be:78:25:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619b9872dcc492fc9707f9ec7c16112f45b8535f
Validity
Not Before: Dec 2 10:02:07 2024 GMT
Not After : Dec 3 10:02:07 2024 GMT
Subject: CN=c2cb4ace35043c9b03b741b43e2f2e67efb8ccb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3d:26:4d:fd:16:3f:0a:a7:1c:88:42:67:91:
e5:91:e3:e9:76:9f:2d:b6:63:f0:2f:76:ad:54:8d:
87:a5:0b:e2:05:f3:ee:ac:a6:71:c1:00:8a:ad:aa:
e1:6d:82:d7:ba:38:c8:29:6c:aa:0a:69:ca:9c:18:
9a:5c:27:92:c1:1f:e8:a4:1a:6e:39:47:0c:57:15:
a9:50:e1:3f:ab:99:08:dc:a3:ae:e2:4d:0d:7d:3e:
71:e9:71:95:15:78:f2:69:d0:96:f2:82:91:b7:1c:
a9:f4:cd:e3:7c:cb:d6:7f:a5:ac:ef:2f:c9:b1:69:
e5:32:2b:c7:88:1e:7b:30:d7:6d:13:56:64:82:30:
6d:21:1f:de:b3:88:5b:f3:34:fe:5a:97:b3:18:89:
8e:25:df:1c:c7:52:b4:af:ce:93:4a:3a:4b:dd:4b:
c8:9a:bd:c9:a4:94:03:20:7d:e2:f5:d0:b1:a1:15:
79:b6:ed:32:e7:ce:56:3a:5b:fe:55:c7:68:e1:fe:
1c:6b:b6:e5:2c:7c:7a:d1:44:8f:56:4a:b1:e7:55:
7c:d7:c0:27:e7:c1:09:5b:66:9a:47:00:ee:c4:f8:
41:0b:c7:43:a1:41:cb:7c:01:19:00:1b:44:33:46:
8d:b3:9d:e2:9d:b6:1a:fa:48:68:69:a6:2a:9a:76:
2d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CB:4A:CE:35:04:3C:9B:03:B7:41:B4:3E:2F:2E:67:EF:B8:CC:B2
X509v3 Authority Key Identifier:
keyid:61:9B:98:72:DC:C4:92:FC:97:07:F9:EC:7C:16:11:2F:45:B8:53:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZuYctzEkvyXB_nsfBYRL0W4U18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c0ec5b-fce5-49fa-80b5-5561c5a62d4c/1/YZuYctzEkvyXB_nsfBYRL0W4U18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c0ec5b-fce5-49fa-80b5-5561c5a62d4c/1/YZuYctzEkvyXB_nsfBYRL0W4U18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:e8:a0:7a:5b:f1:e2:5f:c0:31:c9:d2:e7:a5:d7:07:1c:f4:
73:02:4a:c2:d5:55:e9:d0:af:46:85:00:49:31:bb:ad:4b:57:
73:27:c2:62:75:e2:55:65:c0:94:6b:e2:f1:19:27:0e:c3:5c:
7f:a7:da:c3:03:53:19:91:fa:8e:d7:96:5a:fe:a6:f4:79:7c:
e0:a8:ce:e5:27:28:42:ee:81:f2:04:d6:26:78:1d:0c:98:74:
0b:d7:a0:b9:33:fc:76:af:c5:5f:6b:cf:5d:32:7a:8a:67:36:
a8:89:50:c9:1b:d9:f2:97:23:82:62:c2:4c:5b:eb:fa:89:39:
73:e0:dd:40:0d:44:39:ce:2b:9c:82:4c:b1:a7:ae:6b:de:ac:
fa:ac:93:bf:e9:c0:ca:cb:f4:30:10:32:f8:a9:d4:9a:aa:d2:
89:52:3a:5f:52:ac:aa:8e:be:2e:48:a3:7c:ad:7e:18:ff:1a:
60:68:7b:97:5f:7a:09:a5:72:c3:27:1a:60:74:18:4e:7d:4e:
3a:14:5a:7f:5c:a9:d5:e7:d6:a2:2e:8f:69:a8:96:03:84:7e:
af:35:d3:54:26:57:88:07:0d:ca:ff:7f:41:f5:70:57:b3:ef:
cb:75:af:c0:07:bf:c8:49:da:3b:82:b7:d4:4e:52:68:99:63:
1c:a1:30:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:39 2025 by rpki-client