Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
File: YTIzl9blKd_wbHzxTRdg1ucGqm8.mft (raw, json)
Hash identifier: 78OxjjTlZS8LMN3bM9hOyD8XjWJd1Q/lsxmkezpeQ1Y=
Subject key identifier: E3:02:1E:AE:5C:78:96:4B:2B:8D:17:D8:E7:93:F4:19:72:CA:EC:A6
Authority key identifier: 61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
Certificate issuer: /CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Certificate serial: 0194BC051E8073F72F98BAE3F5CF060608B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
Manifest number: E8
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: YTIzl9blKd_wbHzxTRdg1ucGqm8.crl (hash: oqDIpTeUsE/Ybm/8ZL1FtkgUdTe+QKkF/twnUi7eFbU=)
2: kGTMJp8YWdhCRnyfOKgxhKChBJQ.roa (hash: ZVU5RQX8MRgj32JsdxWQo2xXu6d3VcvuzIOlJ8aVzuA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1e:80:73:f7:2f:98:ba:e3:f5:cf:06:06:08:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=e3021eae5c78964b2b8d17d8e793f41972caeca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f3:c7:8f:eb:09:8d:d0:b6:e2:0c:d1:11:71:
36:21:15:f1:33:8a:ad:92:88:0c:00:db:cb:7e:f7:
d9:35:7b:a8:6b:72:91:ef:a2:fb:f2:36:fa:5c:f5:
d5:64:ce:8e:d4:2d:27:eb:51:d2:e6:29:95:f2:20:
9f:da:cd:c7:4d:eb:ef:ee:27:99:bf:87:e1:66:21:
0a:ef:7d:bd:f4:e9:71:b7:25:7c:de:7e:88:0f:e7:
8f:04:9f:07:b5:1d:ff:a9:c0:3e:a7:a1:41:4e:e1:
0a:83:3c:7e:5e:07:45:2a:95:75:d8:34:34:7c:b3:
81:47:2c:13:17:bd:a3:d0:c0:0a:30:9d:bf:4c:66:
99:2d:5a:06:83:a3:6a:06:6d:25:fe:9c:63:db:06:
75:d4:db:ef:0c:c3:52:ac:26:3a:74:10:96:4b:69:
57:62:4d:dd:8a:ec:f7:31:af:e7:61:25:39:c0:96:
a3:ca:66:9e:6b:95:50:2d:d5:96:6c:69:15:c0:57:
fb:d6:1f:b3:03:da:f0:70:9c:08:d0:b4:3d:e2:c3:
25:a7:f0:c8:6d:24:fc:25:97:4a:c3:60:5a:3c:58:
06:70:a0:ab:e5:66:06:56:67:f4:7e:83:1a:55:27:
05:ec:8b:71:23:7d:06:a2:a1:95:47:05:90:7a:ae:
88:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:02:1E:AE:5C:78:96:4B:2B:8D:17:D8:E7:93:F4:19:72:CA:EC:A6
X509v3 Authority Key Identifier:
keyid:61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:bb:0a:0c:be:6e:ea:6d:c2:a2:09:bb:20:17:6f:3c:94:e4:
b9:6c:94:60:66:2f:5f:fd:5a:60:71:42:27:26:a5:ba:dd:5e:
10:f7:42:be:8d:4d:04:05:fe:61:fe:35:4e:8d:b5:77:85:3e:
f7:3b:1c:b8:3e:db:af:5d:5b:63:2d:37:f6:50:e0:43:18:ab:
c4:95:8d:f5:79:d7:15:33:3b:ad:c3:c8:73:12:d4:46:e5:2b:
7d:14:85:12:fc:de:33:e3:fe:d8:8f:a3:58:2a:59:ee:f5:d7:
51:ed:96:a7:fe:a9:bd:ab:1b:9e:31:71:0e:4e:f5:42:92:6e:
cd:e6:e5:03:41:f6:49:0f:e6:00:86:a0:96:27:2c:2f:89:f2:
08:38:3c:52:d0:80:c5:9b:9f:a5:bf:70:00:00:84:72:81:0b:
d1:a1:64:ff:92:e7:f3:c2:a1:35:0d:3b:f2:d0:0c:0e:4e:d7:
ca:ec:65:f1:1d:cf:12:78:aa:07:32:c7:33:fe:d9:ae:6f:bf:
ce:57:62:db:15:95:e7:4e:59:4e:1a:62:a8:c9:3c:04:9c:a1:
f3:14:e7:1d:d3:8a:cc:60:95:4b:f2:7c:aa:b4:7d:6b:a2:c0:
e0:ca:a6:50:a4:8a:e5:e8:8b:52:52:a2:9f:c7:ef:4c:c1:b3:
45:71:56:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:26:41 2025 by rpki-client