Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
File: rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft (raw, json)
Hash identifier: xotMB88RweeyROA/dB93wV7dQOq6RmAKNjMHmDvseVg=
Subject key identifier: B9:70:C2:F4:25:21:48:CE:C7:95:50:A0:3C:93:AA:FD:CF:C0:08:6F
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Certificate issuer: /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial: 0194BC3C94EF698AF55BF63B4DBE12132D34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 12:01:14 +0000
Manifest this update: Fri 31 Jan 2025 12:01:14 +0000
Manifest next update: Sat 01 Feb 2025 12:01:14 +0000
Files and hashes: 1: 47RTgndCr3WK9uvLA47Mf3Veeq0.roa (hash: nqkQXS//GUp6pq9hI3HV70pQJ3Mrf63Mr+wizeUmh6Y=)
2: BqxQqMXfVsv8J4WaLs72INfcI-w.roa (hash: E4uf1aplKzZlY/g2WLAMnV1cBOEsVJ+7b0auNGq9law=)
3: QhB2ZKTCEnesOeMDeOfWU4I0Nyc.roa (hash: /fNvrDEh/+Li+0nMk2T9SuyVCM8Gv/ZKsHIzrxeSePA=)
4: lSgllAaAELvvF0H-w0cYbphI7hQ.roa (hash: mYm36pDoIuCzo+L7W1TsWUCdXE7ibTRlxGe95aZaVaU=)
5: rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl (hash: ZWrNQOTwyRQ1bxoQJ2HLtlxRsptHkGOtWX99WvkQbNk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:94:ef:69:8a:f5:5b:f6:3b:4d:be:12:13:2d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
Validity
Not Before: Jan 31 12:01:14 2025 GMT
Not After : Feb 1 12:01:14 2025 GMT
Subject: CN=b970c2f4252148cec79550a03c93aafdcfc0086f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:94:b7:31:4e:0d:93:0e:c2:3d:79:9f:fb:19:
91:08:c5:50:20:6f:27:1c:1d:a4:08:0b:10:12:95:
51:bb:e6:39:73:25:34:5c:1e:16:7d:ed:c6:a9:87:
af:75:82:f2:dc:84:9e:44:f8:79:98:ea:34:5f:e2:
5e:43:67:33:b3:10:8d:24:79:c7:67:bb:f3:89:98:
5d:93:a3:54:c8:8c:87:a1:e2:a8:c7:0d:48:65:73:
e5:c5:da:9f:75:a9:85:57:0c:70:bc:95:e7:04:77:
6a:cd:bb:b5:b3:1c:4d:4b:6d:1b:67:14:62:2e:42:
fe:e5:d0:3c:49:e2:aa:e1:9c:d9:64:0a:ed:34:97:
89:6f:49:e3:41:9f:36:3d:8b:ab:7f:bd:dd:d7:8e:
a6:51:38:6e:1a:7f:02:08:18:cb:9b:56:86:06:16:
c1:2d:93:b6:53:1d:42:19:1b:60:ff:54:77:26:9e:
85:ac:9d:aa:59:70:39:6b:34:a2:78:31:08:72:60:
fb:7d:26:38:7e:53:1e:11:4d:ef:30:25:a4:a2:c1:
77:46:e3:6f:a5:67:bf:d9:85:98:9e:47:9a:36:8a:
c1:cb:e0:d6:f0:d8:2b:74:b2:2f:0f:99:5b:07:d0:
bf:e6:56:17:e8:12:75:0f:a0:cb:bc:7c:f3:6c:11:
17:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:70:C2:F4:25:21:48:CE:C7:95:50:A0:3C:93:AA:FD:CF:C0:08:6F
X509v3 Authority Key Identifier:
keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f0:98:b6:a3:b9:1a:b3:93:dd:7d:f0:4a:25:10:b3:04:cd:
83:b9:f1:7c:3a:9c:ef:9f:06:27:0f:c8:45:6f:5a:bb:59:8a:
66:4b:58:6d:4a:9b:50:20:1d:62:d1:56:1d:94:a0:56:4f:a9:
87:53:d3:b3:08:9a:20:55:37:44:be:6b:52:a5:73:b0:77:5e:
e7:af:8f:6f:8a:58:87:35:ba:e6:65:2d:12:fe:1a:4d:84:61:
b5:ac:2c:b0:69:d4:82:88:0f:a5:4e:19:d1:73:d5:e7:04:82:
d5:43:cb:65:da:3a:0b:26:50:32:b9:b3:b4:c1:58:19:cf:92:
8f:fe:f1:c1:7c:d2:15:11:2f:84:f5:6c:42:27:5a:c1:b2:29:
91:a9:8d:ef:c9:e3:03:e5:9b:84:4e:2c:45:e3:8e:dd:5a:f9:
11:8c:a3:ff:a8:7f:04:13:44:d4:6a:c6:48:00:de:12:9d:e0:
d7:63:85:cf:db:71:a4:81:3f:b9:ce:b5:b9:c2:9d:1c:72:c4:
d9:10:ac:41:de:af:17:d6:34:7b:51:59:a9:94:98:2e:67:b6:
2f:f5:da:05:08:eb:50:cc:5c:d2:be:e1:0e:4e:c9:50:0a:4a:
1a:01:0c:35:7e:8e:d4:75:38:96:7b:b1:b5:61:ad:58:cf:37:
79:79:c4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:42 2025 by rpki-client