Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
File: ySi2NBei54heM4gakkqsnUCqymA.mft (raw, json)
Hash identifier: AzhJ32L3hUsLBlNf7bw7osnlJ0fED/JN3ZHaLXoDbAA=
Subject key identifier: B4:8D:E2:55:08:62:8A:AE:9C:AA:43:B4:0D:B5:36:F7:19:18:70:C1
Authority key identifier: C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
Certificate issuer: /CN=c928b63417a2e7885e33881a924aac9d40aaca60
Certificate serial: 0194BD177B41C4B83C7057FDBB80B7789EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
Manifest number: 0288
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: 6MMtZ0p0S3UErh0fFksqehnDVrk.roa (hash: aSANX+R++VciglglpvxzYCwuVSwi4gwoCdbTa6Ro3gg=)
2: ySi2NBei54heM4gakkqsnUCqymA.crl (hash: CR7P3NdzLjA/iMS3Q/MLKg13wVDYZfw3zMtmnLg70x8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7b:41:c4:b8:3c:70:57:fd:bb:80:b7:78:9e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c928b63417a2e7885e33881a924aac9d40aaca60
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=b48de25508628aae9caa43b40db536f7191870c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fd:f3:f6:54:36:85:29:f7:4e:fd:44:f0:68:
b7:00:68:8c:20:fd:18:7b:fb:34:fd:0c:e2:d9:b2:
25:1a:97:b9:1f:7c:09:92:42:eb:7c:e9:e3:94:d1:
ad:da:f2:d5:f2:7e:77:b1:d4:0a:05:5f:3f:83:d9:
2a:07:89:ae:cc:09:b7:9c:84:52:c2:5b:d7:c6:78:
47:c3:4f:60:29:2d:b5:a7:28:13:f0:2a:d9:34:8c:
c9:12:37:98:06:32:66:7a:a2:e5:00:b2:d0:16:30:
03:5d:97:22:bb:62:99:bf:84:ad:9b:4d:39:ae:f6:
42:ba:72:0c:c5:6d:2d:d0:29:a4:f6:c8:96:0d:48:
8a:ec:84:7f:d1:87:b6:19:aa:aa:22:90:31:99:f8:
bf:19:c0:24:c0:42:15:51:c5:10:32:13:03:84:90:
95:09:43:c6:68:f5:9f:67:70:19:62:a4:b4:2f:ed:
7f:d0:3a:15:0c:d3:4b:b4:51:51:ea:d9:08:7d:5c:
23:4b:a3:1c:b5:3c:0d:42:fc:e6:27:45:d1:4c:b9:
7a:23:ee:77:f7:26:6b:34:29:a8:87:02:e1:7b:f2:
04:dd:9a:e6:16:4d:08:ae:b8:5e:ef:90:a6:64:09:
39:ec:2a:a3:b7:a3:cf:8a:d6:8a:d6:bd:8e:b0:84:
fc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8D:E2:55:08:62:8A:AE:9C:AA:43:B4:0D:B5:36:F7:19:18:70:C1
X509v3 Authority Key Identifier:
keyid:C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1e:5f:6c:69:94:ba:8e:44:35:25:a7:7a:0b:ca:c5:cc:fa:
d9:c3:65:fc:81:fe:bf:0a:a0:1b:a2:97:2a:da:67:8d:f0:71:
89:ca:2a:f9:67:47:61:6e:ab:93:15:91:ea:fb:5b:84:ae:62:
b6:71:65:4b:88:80:5a:e2:1d:5d:99:d3:65:6b:d8:1a:75:0c:
b3:55:26:61:63:ec:91:fe:f0:49:25:ab:eb:1c:71:3e:8e:58:
69:80:6e:f6:14:d4:32:45:a7:da:7c:8d:63:44:63:95:f0:18:
b0:32:74:47:57:68:52:2b:b1:29:01:29:c7:0e:63:db:09:88:
77:b9:de:d0:55:68:a9:2d:f1:a4:c6:0a:e5:55:14:b6:2a:b6:
6d:28:af:26:e5:f5:16:86:22:b1:8e:90:bf:cb:cf:29:d3:48:
f3:d1:76:3d:03:3d:e9:5f:7c:23:47:0e:d2:b3:68:f2:24:6a:
ba:f0:22:15:cb:be:9c:59:78:6d:ac:21:b3:02:f5:4b:f6:fd:
fa:94:41:96:ee:ae:36:c8:4c:e1:07:95:4e:f5:90:dd:62:67:
9f:ae:48:0e:a3:8f:94:20:cf:d1:b8:ee:e4:d9:f4:96:72:8b:
50:12:66:ff:a3:61:e9:6e:28:1d:96:31:de:12:3f:7d:7e:af:
c4:af:62:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:50 2025 by rpki-client