Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json)
Hash identifier: z7ZS0okHq/X21OldaZjy35bXGHT+RKBOMbVH/rHQN6c=
Subject key identifier: 3D:C3:00:54:97:E4:CB:DF:9F:B7:01:CF:02:4E:14:D6:26:7E:C2:D9
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 0194BC04BBE8575367FF57B4349BEC407E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: PPdmXUd6h6Gu02gE3yHsYWcFAtE.roa (hash: EHG3aVLscM/89/8uYl8i9vTpEj6hPmRskxw2S3UAzw0=)
2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: OoHU/8nVmzfDIZVR2OhOCvuTClrHEc+FUHzaXTqbCuw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bb:e8:57:53:67:ff:57:b4:34:9b:ec:40:7e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=3dc3005497e4cbdf9fb701cf024e14d6267ec2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:a9:13:e6:83:5e:f6:02:37:a9:02:75:17:
b4:91:c1:a6:6e:a7:bf:4f:bb:d1:ef:42:d6:23:62:
5f:15:1e:02:cd:c8:ba:9b:ff:2e:4b:2d:70:17:10:
f8:7e:29:01:f4:76:64:62:a0:cd:35:e1:b0:b7:f0:
3e:8d:0e:82:e9:9f:25:4f:7d:32:75:de:c0:3e:83:
7c:7d:32:51:7b:13:d9:e2:30:ea:5f:21:b2:86:b4:
e4:8e:f7:01:b3:3b:2d:da:2e:60:83:54:1d:63:89:
1c:4c:9b:7d:57:66:ce:6e:3d:eb:eb:13:45:a8:fa:
ef:57:fe:8b:37:fe:17:e2:e9:f5:93:a5:5f:31:3c:
1c:e4:ff:97:8f:2f:9f:14:6d:5c:fb:d1:93:60:d6:
07:bc:71:89:77:05:11:3c:b5:1f:6e:8e:80:f9:96:
e3:36:52:75:71:de:8d:98:c0:9c:e1:38:dd:d4:ee:
b3:a2:e8:2f:31:57:36:5f:e0:c6:b9:d7:61:3a:94:
5d:6d:c8:4d:10:26:b3:e0:9f:53:5f:3a:e0:5c:d8:
1c:9d:89:9c:03:dc:bf:a9:94:c5:42:e2:4a:cc:5a:
71:c0:c3:c7:9e:ba:47:1c:0c:00:89:8e:ec:d3:70:
d7:8e:04:35:d0:2f:82:07:7b:ae:78:d2:25:70:2a:
0f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C3:00:54:97:E4:CB:DF:9F:B7:01:CF:02:4E:14:D6:26:7E:C2:D9
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5f:e6:58:a0:29:d7:9a:6a:ac:c8:15:3e:22:b3:75:bf:20:
ef:78:a1:16:13:4e:9c:dd:1e:44:08:55:ca:87:ae:da:90:eb:
80:cb:78:12:92:96:8e:45:06:f7:b1:7c:88:12:b1:42:85:7f:
02:bd:0f:ad:5d:fa:8b:7f:11:02:ca:30:c3:01:6d:bd:85:d5:
0b:40:e3:e1:f7:c9:bd:d6:35:31:92:28:dd:ad:ae:6c:eb:54:
a1:7f:6e:26:0d:44:2e:77:87:1f:54:d0:ac:e9:b1:08:57:0b:
87:66:81:e1:44:5a:c9:22:c9:f8:ff:ef:51:eb:00:4f:29:e3:
a7:1e:a4:ba:76:32:c4:ef:25:1f:3a:0a:6b:2c:e0:47:12:8b:
59:bd:bb:c3:b2:c5:1c:12:5c:8b:fb:ab:29:3e:7a:ef:9f:85:
2b:2c:9b:f7:90:e2:55:6a:8b:66:db:ff:b5:c3:65:08:15:e0:
a0:49:d6:ff:46:ec:02:e9:a4:f3:e9:d1:46:39:e0:80:da:77:
e3:ba:29:93:ed:f4:5d:08:30:c8:4c:23:4f:80:b5:dd:76:d1:
0f:a7:44:bf:81:c9:e7:26:4e:03:d9:2b:20:a8:3a:11:0a:19:
de:60:5d:27:f7:86:f5:7c:02:14:38:1c:ad:81:da:91:79:93:
c5:4b:0d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:28 2025 by rpki-client