Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
File: Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft (raw, json)
Hash identifier: K0odYPTDcTlNTvrPM7tnyFHJuftwAuF9dqk3yAyi4UM=
Subject key identifier: A5:0F:6B:B7:A1:E8:22:E6:67:C3:F9:47:AB:4F:1D:A1:9B:3A:69:AA
Authority key identifier: 63:78:14:0D:BD:4E:6E:F1:70:20:D8:9B:0D:42:50:DF:FB:04:81:1C
Certificate issuer: /CN=6378140dbd4e6ef17020d89b0d4250dffb04811c
Certificate serial: 0194BD17560193A4DA6B8C06FBA1666EBD73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:10 +0000
Manifest this update: Fri 31 Jan 2025 16:00:10 +0000
Manifest next update: Sat 01 Feb 2025 16:00:10 +0000
Files and hashes: 1: VLWbnm4HFdzuXT54nAW-KLk6RNc.roa (hash: P5V8CUnu9bD0Jv0MPakwPFOEnZtARng4CsZzmamsq/o=)
2: Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl (hash: vnTZZtJVZyMYzkV1lgKTroh96Wi36v4IC0kIQOHfm/A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:56:01:93:a4:da:6b:8c:06:fb:a1:66:6e:bd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6378140dbd4e6ef17020d89b0d4250dffb04811c
Validity
Not Before: Jan 31 16:00:10 2025 GMT
Not After : Feb 1 16:00:10 2025 GMT
Subject: CN=a50f6bb7a1e822e667c3f947ab4f1da19b3a69aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ed:73:c7:c0:9d:0f:ec:5c:90:c2:15:2c:61:
0b:74:94:4f:aa:8f:68:2a:33:c1:b0:8c:86:e3:a7:
4b:14:7e:d3:47:48:2e:5a:9a:74:91:87:65:d9:21:
d3:9e:88:dd:20:89:73:b3:b4:3b:2c:66:00:15:40:
f5:19:b9:a4:53:a3:d8:9a:35:7c:f5:c1:28:33:b6:
4a:ff:f0:29:3e:40:5b:a4:b1:fc:b1:63:a4:23:b2:
29:af:8b:81:e2:9b:b8:2f:cc:3a:68:32:20:c0:4e:
70:e5:ad:10:ed:6b:8b:63:8d:9d:54:57:1d:bc:e1:
47:27:fc:50:21:1c:57:f5:72:f1:1d:63:99:21:48:
9f:5e:29:e5:b8:7c:da:8f:94:be:bc:ea:ff:c8:32:
81:35:e1:cb:a2:60:82:d1:e1:95:78:ee:24:86:e1:
96:49:db:5c:c7:74:b8:5a:71:5a:ad:d6:63:88:82:
28:c3:c4:23:4c:93:e2:d0:e9:74:ad:68:b7:d2:b7:
a5:bf:65:de:5f:8a:d6:d6:85:aa:bd:6f:9f:b4:af:
39:44:de:4a:11:db:9c:0d:dc:00:88:a2:23:5b:e1:
13:74:c3:a3:2c:91:0f:f3:3d:91:bf:50:17:93:03:
ef:a0:72:1b:40:30:15:ec:60:97:90:a5:23:46:31:
44:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0F:6B:B7:A1:E8:22:E6:67:C3:F9:47:AB:4F:1D:A1:9B:3A:69:AA
X509v3 Authority Key Identifier:
keyid:63:78:14:0D:BD:4E:6E:F1:70:20:D8:9B:0D:42:50:DF:FB:04:81:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ed:95:4a:8c:dc:23:a4:12:40:a3:64:68:ff:f7:99:52:6a:
ba:4c:87:52:f5:51:5a:2f:df:21:43:50:e9:39:b1:1b:d5:e8:
ad:e8:42:84:d6:f6:ab:9b:48:45:33:f3:e2:99:f5:6c:b0:73:
d5:df:b7:3c:d3:b6:9d:80:88:5a:2c:6d:b1:5e:95:44:13:d3:
79:58:c0:be:26:61:cb:0e:7f:bf:1d:a5:98:dc:ea:97:b6:36:
9d:8b:6a:e5:78:8d:ef:d0:7e:c5:fa:80:98:69:41:5e:2f:b8:
2d:5b:50:fc:0b:86:79:46:54:dc:ee:b1:ac:5c:f7:7a:35:c3:
87:52:4d:ee:c1:2c:bf:24:3c:b6:dd:16:c0:a6:3b:cf:e9:1d:
64:7b:67:2b:84:70:12:82:a9:ea:ca:85:29:59:00:75:c6:80:
07:b5:c2:4a:ad:5e:0d:b5:4e:31:8e:50:89:60:cf:c1:5e:c9:
ad:53:4d:7d:ee:a8:d6:41:0f:19:a2:b3:b7:10:51:ec:75:f3:
28:33:fe:89:60:37:91:fb:92:b6:8a:44:81:e6:a9:13:da:26:
81:7a:7c:7f:be:c6:df:5c:2f:02:e1:27:e5:d5:30:96:e5:6c:
58:4d:40:23:d5:c9:4b:c4:08:84:af:1c:0b:5a:24:dc:ce:10:
80:f0:f0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:26 2025 by rpki-client