Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
File: Y42aUATFktCTzImw2QdS4nnVGFQ.mft (raw, json)
Hash identifier: 51t3rlE9v1ghVr73dLcnJsM1vUB5IXYvn1hs9mMmFC4=
Subject key identifier: 28:DF:55:6F:39:C3:A0:C3:61:EF:2F:4A:D8:2A:A2:56:13:76:58:10
Authority key identifier: 63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54
Certificate issuer: /CN=638d9a5004c592d093cc89b0d90752e279d51854
Certificate serial: 0194BC3BE2CD5F476A4B410D9C8CBB8F133A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: 5t5Dcx5tNkWQ_sy57yYX9uF0BSc.roa (hash: PzSrKv8Rw8leyPQ1z/odwxbCskApuD1oeaEEXKXPsNc=)
2: Y42aUATFktCTzImw2QdS4nnVGFQ.crl (hash: GTnp/9L5pDauI+VYaMv6pYvZOxS4j4LsWeTj87zXwVY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e2:cd:5f:47:6a:4b:41:0d:9c:8c:bb:8f:13:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638d9a5004c592d093cc89b0d90752e279d51854
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=28df556f39c3a0c361ef2f4ad82aa25613765810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:5c:7e:62:58:3a:54:39:1e:0c:e3:21:73:
f7:01:4d:f5:b2:b5:73:e4:cc:6c:41:71:4b:b6:e2:
98:00:39:b4:1c:33:dd:c2:b4:d9:c2:85:71:ac:05:
8f:64:f7:e2:b9:69:19:8f:2b:f5:d6:20:81:e0:94:
e7:b2:f0:5a:a2:2f:b9:3e:6c:f3:b9:31:d8:47:f0:
26:1c:ad:2f:0c:2c:15:fc:76:4d:48:76:c6:1e:90:
5b:cd:d0:9d:39:66:4a:e0:4b:6e:e1:76:ad:1e:53:
38:33:c3:f1:16:6f:dd:22:d8:16:ad:ac:02:32:19:
ef:7b:3d:7b:27:0e:7c:96:13:d2:4a:de:f3:b1:30:
fc:56:42:2c:ee:21:5f:fd:da:50:2f:a1:23:fb:91:
18:7a:72:2e:fe:12:b2:0c:cd:3e:72:c4:7e:c9:4b:
92:cd:92:ce:79:8a:97:dd:97:d8:e5:af:96:ba:17:
6c:5d:20:a2:69:e6:9b:91:5d:7e:db:1f:da:84:8d:
07:0e:9c:a4:fc:f1:d4:4c:17:91:83:e3:9a:3f:2a:
a6:01:b1:aa:56:03:6f:4c:d8:96:56:74:22:e1:48:
4a:99:c0:07:a6:16:64:76:bc:53:ad:53:48:0f:aa:
af:3d:06:6b:e1:a9:ed:e8:15:58:14:e8:6c:38:7b:
05:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DF:55:6F:39:C3:A0:C3:61:EF:2F:4A:D8:2A:A2:56:13:76:58:10
X509v3 Authority Key Identifier:
keyid:63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c7:0f:84:dd:6b:d2:d7:29:d0:93:c6:7d:99:cf:6d:1c:e8:
0c:36:47:11:e9:b7:3f:ab:61:38:64:b2:dc:03:fa:fc:94:96:
52:55:3b:51:ca:f4:8f:4c:87:75:cb:7f:f9:f7:b5:e5:b9:c1:
40:e9:59:58:4d:43:0e:3c:a6:11:45:3d:aa:f9:48:d8:9c:d5:
04:89:61:36:4c:35:1b:2c:a4:58:b5:8c:06:3c:75:45:27:a1:
2c:b5:ae:48:30:73:2e:84:4e:f5:f7:59:f5:44:e1:09:fb:87:
ee:a3:29:b2:7c:b2:96:76:ca:0e:a7:8c:e0:d1:16:4a:a7:b5:
cf:a4:d8:60:2a:7c:b9:e6:ae:70:f3:62:85:59:6b:f3:f5:dc:
9f:17:2d:b5:46:a8:a7:dd:52:ad:b5:7b:96:b4:4c:a4:92:3b:
07:02:b6:3a:e8:18:0e:44:cd:c3:bf:ac:08:19:48:09:8a:ad:
40:48:cd:c1:79:50:2f:14:4a:2d:27:ce:10:b8:2c:4d:27:c4:
78:5e:c1:53:b6:4f:05:12:70:da:22:e9:05:be:dc:57:a3:2e:
1a:84:ec:34:bf:45:df:59:6a:6b:9f:ba:e3:ee:5d:a2:f1:47:
56:d3:3b:3c:52:9b:a9:e1:0d:0b:68:aa:54:ed:fa:55:d7:41:
89:4c:0b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:02 2025 by rpki-client