Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
File: yKS714rzY_pb7uYy6L3Ei2KXNDw.mft (raw, json)
Hash identifier: giyrUQbfLHyUWltoaHMpBJRQ/uF6NaqsQi75PXrD0Vc=
Subject key identifier: 1A:2F:3D:8E:47:8A:7D:AE:0D:5F:10:AF:EC:E8:5E:E4:77:F4:7B:62
Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
Certificate issuer: /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Certificate serial: 0194BC052AC54FB1C26AE42CBD96293A0D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
Manifest number: 0480
Signing time: Fri 31 Jan 2025 11:00:42 +0000
Manifest this update: Fri 31 Jan 2025 11:00:42 +0000
Manifest next update: Sat 01 Feb 2025 11:00:42 +0000
Files and hashes: 1: d6sgkQbNQYkqYXcedUvxxcDi_RY.roa (hash: qNUbQpwyqYmbMOUJJoCyiXY3LQNxqUvVSzT1Kq6z0rI=)
2: yKS714rzY_pb7uYy6L3Ei2KXNDw.crl (hash: LOx2CA+G8j/tfNZGhQDtm1/FHYuCvKWLkb3GZOt5p2M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:2a:c5:4f:b1:c2:6a:e4:2c:bd:96:29:3a:0d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Validity
Not Before: Jan 31 11:00:42 2025 GMT
Not After : Feb 1 11:00:42 2025 GMT
Subject: CN=1a2f3d8e478a7dae0d5f10afece85ee477f47b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:74:be:51:7c:06:99:50:94:ee:34:11:51:8c:
71:25:77:c6:da:26:78:a1:1d:cb:53:d3:eb:7f:b0:
86:04:39:6c:a4:64:d5:07:4e:c9:81:a5:c8:ab:15:
24:3a:4e:ef:b8:03:15:65:9c:47:0f:8a:1c:44:b3:
f4:d2:38:b6:d2:ce:d3:fa:16:3a:75:c3:99:8d:4a:
f2:60:33:1b:bf:38:5e:ce:b9:8e:e1:05:e9:17:bb:
e3:e6:56:ec:d1:e5:7c:72:f2:5c:a5:3a:a0:46:4a:
24:6f:b8:8d:0b:66:63:ba:c5:74:25:15:6e:3d:1e:
e7:67:22:1d:80:ed:82:a0:0b:28:2e:e2:a0:6b:fc:
86:a3:1c:5c:17:77:3d:ff:bc:49:a6:50:02:5c:f9:
ff:03:f3:c3:a9:a6:3d:b9:c4:1a:5b:a7:14:5a:e8:
00:82:ad:a0:bc:b1:36:a9:94:66:9e:57:36:28:18:
25:68:b4:6f:ba:48:8d:84:7b:74:06:6f:1c:28:7f:
19:36:87:26:ad:c6:21:b9:a4:1a:a7:3c:15:5d:63:
45:12:9a:32:fe:4d:38:ae:8c:87:bb:74:db:e3:e5:
53:72:7e:55:06:7d:05:a7:ca:b0:d2:d5:84:ad:1d:
d3:e1:79:01:be:f8:a5:29:13:a6:a5:23:d1:9a:46:
1e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2F:3D:8E:47:8A:7D:AE:0D:5F:10:AF:EC:E8:5E:E4:77:F4:7B:62
X509v3 Authority Key Identifier:
keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:c9:07:cb:0f:dc:75:02:ad:3e:15:93:97:9e:c6:40:23:a7:
b0:b2:95:87:78:6d:7e:9c:95:ae:04:c1:2d:31:f9:a6:03:2b:
86:aa:9e:48:93:8b:44:be:18:ce:04:08:a2:1b:58:28:00:90:
43:66:70:7a:41:f7:e3:67:ac:ec:1d:01:43:6d:e3:99:a7:22:
46:19:3a:bf:49:3b:9c:27:f6:63:24:26:56:31:47:52:f8:3b:
20:e0:56:46:21:33:c1:32:d2:9a:78:3f:37:f6:4c:a8:b1:32:
2a:60:b4:b4:40:e4:5e:40:f1:90:91:f2:b3:d2:19:c9:c6:04:
af:cb:d4:0b:bc:a4:15:70:91:84:68:9f:41:b4:ec:99:75:cb:
50:41:8c:c7:9d:8b:4f:a1:57:d3:ba:92:d0:a2:6d:85:40:56:
3c:d4:6f:e8:a9:ac:05:00:8f:c4:a1:13:50:b8:cb:17:d9:39:
5c:45:1b:a6:a8:80:f8:a0:6f:27:04:bc:2d:2a:d3:63:8c:7e:
e3:4c:ed:94:68:35:af:73:15:8d:82:22:7a:00:b0:de:34:8f:
aa:42:ad:12:18:c7:ff:b3:74:2a:39:11:7f:58:e2:0e:f9:09:
89:0d:61:ce:67:1b:e2:6c:26:39:33:3e:62:b9:bd:eb:43:c8:
db:88:8b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:34 2025 by rpki-client