Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
File: cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft (raw, json)
Hash identifier: rP+76/8dX2gdANDRZ3PMSlXLChmYSxxW6tXSqo5ae+0=
Subject key identifier: 9F:5D:9E:F8:1C:6F:5D:BC:73:C8:30:64:DF:7D:43:55:EE:8D:FC:4A
Authority key identifier: 71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD
Certificate issuer: /CN=718b138ba935234f11ca1025d667f133f07d55fd
Certificate serial: 0194BC3C9ECC7E69EB13E613AD3F2D192B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:16 +0000
Manifest this update: Fri 31 Jan 2025 12:01:16 +0000
Manifest next update: Sat 01 Feb 2025 12:01:16 +0000
Files and hashes: 1: X75BC-oQSIZ_Eow4PmOQdnEFFSA.roa (hash: 9fCRye0I7SNN/gpC5nOojc7Nk1BoVgXxf8JAD5uwXBE=)
2: cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl (hash: 0suDvwQxF/gAO891eHbEvpfJ8pr1iQMstrsOEfr6qAU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9e:cc:7e:69:eb:13:e6:13:ad:3f:2d:19:2b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718b138ba935234f11ca1025d667f133f07d55fd
Validity
Not Before: Jan 31 12:01:16 2025 GMT
Not After : Feb 1 12:01:16 2025 GMT
Subject: CN=9f5d9ef81c6f5dbc73c83064df7d4355ee8dfc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:39:8d:16:00:96:3e:06:d6:0c:4f:3b:f7:
22:54:cf:15:80:ee:fe:af:9a:37:b6:47:63:bd:de:
d8:3c:27:32:50:26:85:f3:2a:9e:d9:11:c0:f9:38:
10:6c:4c:1c:a4:1a:fe:b3:22:5d:eb:d5:9a:8c:ff:
04:d9:21:3b:f2:f2:0d:c9:17:07:50:d6:59:98:0b:
25:b7:c0:30:a2:27:46:02:81:3a:a7:21:45:2c:06:
17:fb:ac:9d:f9:fb:63:a9:59:f4:52:d1:00:97:5e:
0f:63:47:30:dc:e5:f3:d5:e3:9a:85:ae:9a:ff:63:
43:de:20:19:82:bb:68:36:ca:f6:84:72:f4:d6:2e:
6d:47:b8:08:6c:47:8d:37:50:cf:f4:cf:88:f7:08:
2f:c6:86:54:65:47:a4:11:22:33:e7:48:ab:fc:67:
7b:1f:da:f8:b7:e8:7c:32:2a:dd:7f:90:5d:a2:3f:
da:a2:1f:9a:f7:c7:11:5c:d5:f3:e0:e1:b7:71:69:
51:f5:21:4b:85:f5:ef:82:c1:f8:57:09:45:30:73:
c6:d0:75:c0:a9:0a:77:cc:24:c3:1f:ba:05:25:81:
94:7e:74:fe:aa:24:44:26:91:6b:7d:70:cf:32:bd:
24:af:f1:aa:cf:38:1f:2b:39:17:af:84:d1:c5:1b:
49:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5D:9E:F8:1C:6F:5D:BC:73:C8:30:64:DF:7D:43:55:EE:8D:FC:4A
X509v3 Authority Key Identifier:
keyid:71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:00:37:f9:b1:52:9a:35:9e:8a:6b:e7:51:f5:c4:4e:99:c4:
9f:26:8a:e3:fd:50:c6:30:60:24:d8:8a:88:2f:98:f6:28:80:
f2:42:cd:b4:0e:fd:b8:3f:82:53:fa:01:b6:7c:ac:d2:4d:20:
84:78:7d:45:c1:bb:9c:5a:ac:5a:52:c9:b9:ae:44:bd:4f:0e:
62:2c:40:f6:e6:71:60:cb:23:55:da:8a:8e:9d:8d:9f:86:3f:
22:33:d6:8c:c1:6e:58:5b:be:7d:f1:36:28:97:2a:4a:05:60:
fd:d5:73:64:9e:5c:ff:e8:06:9d:97:ae:11:9f:d4:6d:ae:37:
08:18:e1:00:61:a7:06:84:3d:1e:d1:44:b6:61:e5:57:c4:32:
2b:d1:c9:31:53:fe:39:95:1c:72:9d:5f:89:65:8a:60:37:5c:
f4:93:51:0e:cc:54:e8:c0:d6:3c:6a:1a:dc:a6:92:9b:91:73:
b8:ed:d1:45:07:d0:1e:cf:cd:79:c8:16:8a:aa:56:fb:41:f3:
b3:11:9c:00:d2:a3:58:0e:35:07:a4:4c:c5:c0:ec:c7:f6:0e:
18:4e:80:ce:07:81:09:0a:e0:0c:83:33:a0:43:26:cd:55:ca:
3c:b9:1f:c1:8a:98:af:d4:a5:1b:8f:94:c0:c2:01:3a:d9:fd:
9c:7a:e5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:22:42 2025 by rpki-client