Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
File: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft (raw, json)
Hash identifier: GpjCVcT2iGb9KMBqewdvyiRYCUdTqoPfGl/d39vyr1U=
Subject key identifier: EC:1D:13:B9:8E:79:EB:D1:63:7B:A8:7C:3C:7C:CA:D9:4C:C7:46:BB
Authority key identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
Certificate issuer: /CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Certificate serial: 0194BD85B821BE586FE2972DCD8AAFD21308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
Manifest number: 0760
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: RiW5W8SWQ6-vverb8NRdVDj6CjU.roa (hash: 4IAwVod5pwysrRco/iSy8Lzx8KDdHZ/Q8/hyLLW5E4w=)
2: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl (hash: qg+Da53PUClxSI1ZIwKYxa2vqT4TZETy3rqc3gXE6Hk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b8:21:be:58:6f:e2:97:2d:cd:8a:af:d2:13:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=ec1d13b98e79ebd1637ba87c3c7ccad94cc746bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3e:ca:a9:73:b5:72:8b:5b:2b:e0:f8:ab:7e:
95:3e:4d:2a:f5:81:2c:ae:37:96:65:15:3c:d8:00:
74:27:3c:63:f6:d6:7b:11:01:5e:86:97:44:f0:6a:
f6:3f:6c:67:03:65:bd:b7:c3:48:a7:11:4e:00:e0:
b1:b5:65:3d:16:7a:00:ec:ae:c5:37:02:14:90:d1:
e7:0b:45:92:74:fa:2c:13:8f:1d:14:d3:fb:38:77:
80:f0:98:cb:36:f8:eb:b1:b5:c3:33:15:8e:f3:a5:
b9:5e:44:e2:e7:1e:6b:e0:80:c2:97:d5:7f:e2:b5:
12:f1:b8:11:0a:4c:26:a8:b3:02:57:7e:c1:aa:9b:
bc:3c:2d:b3:c3:6c:56:0c:76:69:fc:3d:cc:57:20:
1f:f7:a5:29:bf:57:1a:64:42:c0:d7:5b:4c:7c:9a:
eb:fe:0e:49:6f:d0:9c:28:7f:af:b2:02:0d:11:a8:
55:11:d3:01:31:18:78:fd:20:bb:a6:f8:81:29:d1:
a1:76:9e:46:07:cb:5d:90:fa:16:57:01:e6:71:40:
09:43:ea:fa:96:e7:13:fb:c3:ab:e3:af:0e:fd:9e:
85:48:ca:d5:b3:5b:18:2d:af:67:12:8d:3d:16:98:
65:e1:20:81:b8:0a:9e:f0:e4:6e:c1:89:37:4f:49:
84:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1D:13:B9:8E:79:EB:D1:63:7B:A8:7C:3C:7C:CA:D9:4C:C7:46:BB
X509v3 Authority Key Identifier:
keyid:63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:4b:01:71:18:fc:de:64:cd:a4:4e:28:79:70:29:09:f8:51:
05:8b:c0:13:d6:14:e2:5a:cb:cf:7e:d9:94:5a:2d:62:89:12:
08:38:6b:f9:d4:2f:5c:d7:db:f2:88:94:45:f9:bb:4e:78:9a:
3a:6e:09:da:31:07:ae:b8:bf:36:f3:4d:ab:b0:e5:f4:03:1d:
72:07:7a:93:b2:d7:92:78:e6:6d:e1:43:ec:51:ce:2d:83:9d:
01:b4:4b:2f:2f:f8:29:a2:ca:be:fb:19:20:8d:1f:bd:e5:7d:
36:34:c0:21:32:0a:d5:40:4e:a8:f1:56:52:87:df:72:b1:cd:
84:e3:c1:9b:62:0c:73:14:e4:99:81:af:98:ec:b4:61:9c:42:
51:d4:27:0a:76:a6:82:b2:8e:27:8f:06:03:50:87:2a:8b:0c:
22:74:96:82:2b:72:57:09:ea:7f:f8:c2:4c:4a:0c:b5:a3:81:
ef:1f:c9:ab:81:10:b7:63:f1:ed:6a:59:5e:79:57:9f:80:2f:
89:f5:cf:e9:1d:18:f3:1b:2e:e9:48:17:98:3c:27:57:c8:ee:
c4:5d:1b:dc:5a:92:19:da:92:ce:fd:c0:75:2c:14:df:33:02:
56:51:de:d1:a6:cc:a6:26:29:58:4a:fd:b0:d6:d7:06:c6:34:
e3:32:b9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:14 2025 by rpki-client