Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
File: Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft (raw, json)
Hash identifier: 7S1tUy5IzS2N0pTA/IbdJ6lEcQ9Hj/UAwxj8SSyRXJw=
Subject key identifier: CF:BF:1A:31:EE:66:0A:51:DF:6F:35:5F:8B:39:EA:02:B7:DC:C3:69
Authority key identifier: 63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7
Certificate issuer: /CN=6359a649b036103e80a3ce8f3d1b0138a60581d7
Certificate serial: 0194BC3C067083468DA03DA4D9F1B36811F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
Manifest number: 083A
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: X6ZYSC-zk_X-vkVmhmsDz5ImQYg.roa (hash: ejdwRSw1lilKiCxqAuj8PMfvm39/1GCNMitYFT+EINw=)
2: Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl (hash: +b+YQAx0eqB7Dk4eO6Bj1IDLoaAJp21azo8k/aDftFM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:06:70:83:46:8d:a0:3d:a4:d9:f1:b3:68:11:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6359a649b036103e80a3ce8f3d1b0138a60581d7
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=cfbf1a31ee660a51df6f355f8b39ea02b7dcc369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:82:b2:00:6e:ae:3e:53:3d:77:ea:d0:95:
16:03:fb:7d:ad:67:71:fa:e2:b7:32:20:93:70:ae:
7f:f8:74:4e:99:63:29:0c:0a:25:a8:07:70:2c:98:
76:89:cf:af:47:ee:1b:8e:d1:5e:0f:00:ce:61:c9:
03:e9:1a:a1:58:f2:c4:ef:8a:a5:09:0e:7a:d8:e7:
05:2b:31:7f:5e:39:6f:c6:3a:83:64:c3:8f:2a:f9:
b0:b1:ce:99:23:bf:47:5c:cb:c6:ba:da:db:91:1b:
6a:b2:d4:09:f1:68:76:ca:19:66:3b:c0:4d:0c:f3:
f8:0f:e7:9f:65:0f:e3:11:aa:e0:d9:7d:d8:14:58:
2a:e4:e0:dc:54:87:ff:95:86:f4:a4:19:7e:e1:fc:
e2:5e:5e:61:53:b4:78:32:bd:ee:5a:26:83:a1:d8:
4a:c1:0b:9d:11:2e:ef:c7:e4:1e:c4:db:70:ef:87:
63:1b:c6:bf:cf:e5:1f:f9:30:2d:09:41:77:da:8f:
ff:60:12:bb:a7:2b:01:28:47:83:a5:9d:9f:2b:83:
06:53:db:73:0c:06:40:aa:f3:0d:51:40:6d:e8:bb:
ac:d6:14:2e:37:5f:7c:f9:31:fd:1c:66:a3:61:b6:
9d:e3:0e:e4:e5:f7:e0:d1:23:c7:b4:69:81:cf:1d:
c0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BF:1A:31:EE:66:0A:51:DF:6F:35:5F:8B:39:EA:02:B7:DC:C3:69
X509v3 Authority Key Identifier:
keyid:63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:93:f8:fb:f1:5e:b8:63:53:61:06:99:64:5e:a7:83:5d:c8:
5e:01:78:5a:70:d8:4c:04:dd:14:a4:20:76:c2:3e:c6:d1:95:
de:fa:96:e8:e7:44:46:f9:e0:21:9f:80:76:d0:e3:0e:cf:6d:
ff:b5:06:68:ce:97:b2:eb:e6:2d:c0:18:f6:15:a7:ef:f6:cc:
66:51:79:d3:58:4e:25:8b:e6:24:c1:5e:b3:7f:7f:e0:35:fc:
be:76:0b:df:dd:2f:75:a8:92:56:5e:78:23:e7:20:26:e7:86:
d8:68:d4:2a:02:22:c4:b4:56:ab:12:39:31:21:9c:fc:c9:f5:
78:99:5a:e0:c2:02:0c:96:1c:a1:1f:91:b0:e2:77:52:98:39:
21:d0:fa:89:44:bf:32:e6:e9:52:55:4b:9a:b5:17:41:09:80:
f5:57:f6:be:8a:1f:14:7f:1c:cf:07:80:96:24:cd:05:83:38:
b4:79:80:ad:9e:f5:2d:8d:cb:c7:8f:75:77:ee:32:46:0d:ec:
34:4e:d6:72:1f:60:2b:3a:a6:1f:67:77:5c:aa:5d:6c:ba:6a:
89:4c:43:ae:56:96:e2:a0:61:5e:2c:ed:22:84:9c:e9:20:fe:
cd:d6:72:97:43:37:b3:69:a8:18:6a:d8:a9:ef:67:f4:18:53:
15:8b:bc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:31 2025 by rpki-client