Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
File: YfvYiH2oRHExjYOISsAF8BtE_Uk.mft (raw, json)
Hash identifier: PEBCvzetDulsx777KfOMgKnlcFySWh+wsByySHWn9cI=
Subject key identifier: 55:0B:09:AB:BF:24:60:57:C0:02:FC:BA:7E:1D:71:2B:55:2E:5E:2B
Authority key identifier: 61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
Certificate issuer: /CN=61fbd8887da84471318d83884ac005f01b44fd49
Certificate serial: 0195E12231E0F939616070055CEA28222B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
Manifest number: 0DE4
Signing time: Sat 29 Mar 2025 09:01:09 +0000
Manifest this update: Sat 29 Mar 2025 09:01:09 +0000
Manifest next update: Sun 30 Mar 2025 09:01:09 +0000
Files and hashes: 1: YfvYiH2oRHExjYOISsAF8BtE_Uk.crl (hash: Zi+G2XOgEtzqRNjb7I4ZHhA32/SsbL9Jyzz05J6b+Cw=)
2: rUnY51YPiwbRbm0um6mPTqnei4E.roa (hash: wFuBlsraqakBJqLWGUkRh8WpK6rLnJF7HWgWqq0rAM8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:31:e0:f9:39:61:60:70:05:5c:ea:28:22:2b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fbd8887da84471318d83884ac005f01b44fd49
Validity
Not Before: Mar 29 09:01:09 2025 GMT
Not After : Mar 30 09:01:09 2025 GMT
Subject: CN=550b09abbf246057c002fcba7e1d712b552e5e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:df:9c:fb:7c:6b:b2:1e:9e:14:02:e6:e8:84:
c6:b0:45:ad:05:76:b5:4b:f9:bf:89:04:03:80:5d:
71:5f:54:3c:2a:3b:f2:51:ee:ed:b3:f9:b6:6c:20:
f2:c6:a9:de:05:ea:3b:40:fc:20:91:a0:e6:f9:ef:
b6:13:c7:a9:f7:26:c8:44:f5:b0:25:dc:b5:65:d5:
a4:f3:a9:20:a8:32:2d:39:ee:a6:fc:9b:29:36:e9:
af:44:3c:ff:ba:5c:c3:f7:8f:5f:af:ea:d8:13:fb:
38:98:da:ba:f2:13:07:64:f1:96:c7:f9:3c:71:83:
15:22:31:f7:1d:66:17:5d:77:06:16:0a:8e:41:43:
7a:56:09:f4:be:80:cd:03:0b:35:7c:73:3c:88:e8:
f7:f0:0a:40:0d:e9:5c:52:7b:ce:43:ca:92:f1:3b:
ee:c8:e8:f2:3f:d2:59:af:da:2a:b6:65:20:cb:fd:
fb:6a:e7:aa:ae:af:48:7e:82:be:98:13:5c:b8:d2:
73:2b:85:ad:7d:df:4d:b6:6e:c8:28:1c:c8:e9:e2:
e4:8b:5e:bb:d1:52:0a:e6:ee:f5:47:c0:05:a2:b8:
06:cf:eb:25:2e:5f:3b:9f:84:ba:c9:61:c7:da:87:
a4:e0:19:63:49:30:c8:4a:63:df:e1:0f:68:6f:20:
1e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0B:09:AB:BF:24:60:57:C0:02:FC:BA:7E:1D:71:2B:55:2E:5E:2B
X509v3 Authority Key Identifier:
keyid:61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b1:d1:42:66:ac:40:dc:84:73:9a:63:12:eb:57:5c:11:2a:
31:aa:b0:71:e9:70:d0:36:70:70:2f:70:99:90:f4:93:dd:47:
09:c7:4c:81:53:54:2d:b7:4a:9f:61:cf:a1:1f:4d:7a:51:8c:
1e:8c:c8:d9:59:13:00:f8:44:86:c4:4c:05:73:c4:8e:1a:74:
72:75:28:53:ce:ac:74:6e:a9:12:62:36:8c:5d:b5:7f:8e:c6:
f1:a0:eb:a4:53:9e:9b:0c:d0:02:4b:c6:d9:26:6b:7d:14:96:
fe:e6:bb:51:55:66:6b:c3:2e:d3:79:ce:e8:c7:36:de:32:38:
dc:10:73:fe:4a:ce:7c:79:5f:35:f7:79:78:87:02:d4:54:89:
40:38:86:3f:7a:51:1c:47:70:2a:65:75:50:89:01:c2:1e:87:
01:7d:fb:8f:fe:2d:2f:29:a9:07:27:b7:3c:78:ef:d5:16:03:
6d:f3:e3:fa:f2:6b:58:ac:da:b3:a8:96:e3:c5:3d:ca:60:2b:
74:78:68:16:48:f6:3f:e1:95:4b:a0:c3:fc:dc:ef:3d:c6:dd:
ad:3e:fb:32:39:67:f3:67:2e:1e:4b:78:46:d8:f3:93:b5:36:
8a:35:a3:cb:df:16:c3:cf:60:21:b9:e0:13:24:e4:9b:a3:d0:
5a:68:89:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:17 2025 by rpki-client