Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
File: Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft (raw, json)
Hash identifier: 4k3k5daecbtaW3PM3GrLY+yEJj6s17aC+0ljEELuiYA=
Subject key identifier: BC:ED:2A:50:C2:27:2C:7A:17:F3:4F:F7:55:B1:8B:44:55:CB:E0:15
Authority key identifier: 63:71:15:F7:28:F9:7D:16:E0:D1:24:96:37:64:08:81:20:20:5A:E0
Certificate issuer: /CN=637115f728f97d16e0d124963764088120205ae0
Certificate serial: 0194BCA9CF6B78AF1ADE55083E7DA9C26725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
Manifest number: 03F6
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl (hash: dVVQICUDFGnz3nwuLmloCCH90n5VsSWAhzynKZAEPpE=)
2: bS_l2Fl7JfNBEh4vQiqWP7zWt_E.roa (hash: rZgNK/vUggsFadv3q4dKfzKV95jK84/8a/5X5Aa/1YA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:cf:6b:78:af:1a:de:55:08:3e:7d:a9:c2:67:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637115f728f97d16e0d124963764088120205ae0
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=bced2a50c2272c7a17f34ff755b18b4455cbe015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7a:58:c0:83:2e:31:13:20:d9:ff:c5:7f:62:
0c:6c:49:fb:2f:df:04:c9:b2:53:23:0f:20:a4:a1:
cb:cd:a8:4f:f3:c1:0e:db:af:00:cb:cf:3d:10:ce:
17:5e:04:d0:c3:ad:6e:76:f7:26:4e:ed:16:a6:11:
f1:2f:8c:0e:74:c8:58:ab:60:c6:4d:09:9d:d0:84:
cf:56:f7:91:2b:6d:51:fc:55:f8:57:36:06:35:ff:
86:d6:ec:60:60:ac:fa:f2:56:d6:92:80:25:b2:20:
31:60:bd:6d:de:5e:f8:7e:bd:2a:8f:48:02:55:b6:
e9:6c:86:76:50:0f:09:56:f5:2b:fa:2b:e8:51:48:
fb:98:91:17:30:20:96:4c:4b:c1:d9:8a:0e:b3:13:
72:4e:5f:ef:e7:0a:7c:b8:b6:56:96:ae:e5:b4:76:
34:42:af:71:c2:93:81:3b:19:0c:06:c3:81:c0:63:
0a:59:1b:e2:be:b1:67:de:27:47:49:44:ce:58:a2:
19:a1:28:9c:e8:db:4b:fe:dd:f7:b4:25:d5:10:a1:
da:9d:ac:c5:08:e8:1c:b9:e9:bf:e4:21:b5:bd:e7:
09:b6:b9:9b:25:2c:00:80:67:c2:15:78:58:da:cf:
96:a8:61:a8:9b:9a:56:1c:44:20:4b:61:92:be:cb:
b7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:ED:2A:50:C2:27:2C:7A:17:F3:4F:F7:55:B1:8B:44:55:CB:E0:15
X509v3 Authority Key Identifier:
keyid:63:71:15:F7:28:F9:7D:16:E0:D1:24:96:37:64:08:81:20:20:5A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f6:94:62:96:f9:d2:41:87:78:36:92:1c:30:1f:d9:e5:b1:
9b:f4:36:82:91:e9:24:43:78:65:1a:95:c5:38:34:77:dc:cf:
08:da:23:58:15:5e:c2:1c:3d:0b:3c:ac:93:5b:b0:f3:f6:f7:
9c:c5:80:ad:c2:64:cd:e7:cd:c1:33:4b:89:16:bb:23:b1:cc:
5a:75:b1:d7:fd:a9:e6:ac:c9:89:a5:c2:4c:da:00:dd:06:7f:
b9:f0:57:c6:fb:ed:a9:4a:e8:56:4d:8c:32:53:1b:f3:39:f4:
af:05:b8:3d:2b:63:c0:e6:6d:93:07:5d:7f:86:b6:ba:db:a6:
0c:08:29:e8:bd:32:71:cc:c1:be:44:3f:dd:74:63:e1:7f:f3:
36:a8:64:bb:1d:b8:1a:e9:06:b8:aa:fa:e8:9b:dd:a4:45:ec:
74:c3:d4:fd:48:84:9f:da:ed:0b:c5:92:19:43:44:3e:9e:15:
a8:c1:73:b3:a5:ee:0d:cc:1b:12:ab:45:56:f0:7a:8f:b6:0c:
d8:8f:13:e8:c7:a3:84:34:51:aa:f3:16:a4:79:86:1a:56:a3:
f5:7f:01:3b:61:d8:f3:8a:49:32:e9:c9:1d:89:c3:aa:5e:65:
6e:59:27:22:44:ef:dc:8b:01:ea:89:a0:62:89:46:b1:b6:fb:
2b:cc:c8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:41 2025 by rpki-client