Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
File: yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json)
Hash identifier: HlNNGY+0NWhNCGWQ9IAbjalWaLu71VgVGCi5z1bronI=
Subject key identifier: BE:7C:E5:78:C8:40:B8:6C:9E:97:3F:5A:9F:B9:25:E2:F9:4C:0B:D2
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial: 0194BBCE70D08B75C49107616BB4795862D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
Manifest number: 0445
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: AM_8FnzBWvppCWEq5L2m7zOw4Xs.roa (hash: BSOdW4w3xzDGFEiTqGVLTD5VpVN1n3Tm2IL/b7m+dNI=)
2: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: VBN1t0N3hGPTEZuaxNatW05GpjDIqsXiQUsz6V/YJuc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:70:d0:8b:75:c4:91:07:61:6b:b4:79:58:62:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=be7ce578c840b86c9e973f5a9fb925e2f94c0bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:35:4d:30:b6:da:ce:15:f0:92:1d:09:92:
d6:19:54:de:0f:68:18:d1:d8:03:ee:c5:2e:9c:0a:
56:79:8c:09:91:e4:c7:5a:a7:54:c5:68:06:20:02:
00:6f:24:d9:ca:fb:4c:bb:f6:52:a8:85:7c:ec:2a:
6b:48:78:cf:f6:83:79:73:e4:45:cb:70:c5:5d:30:
f3:4f:89:5f:07:a9:ca:47:e4:1a:52:29:03:09:f1:
0b:b3:b4:04:30:0e:a8:38:83:3a:2d:96:41:f1:0c:
e4:df:d4:69:12:12:58:b1:c2:05:20:c7:35:a8:f6:
f5:f3:c6:a4:a1:be:ff:37:4f:43:39:d9:fe:94:ce:
7c:be:5e:90:45:74:14:33:67:f5:fe:91:b4:0f:0b:
6f:51:94:63:1e:c3:31:f4:27:1b:e5:b0:a0:a4:60:
df:5a:0d:fb:44:de:cd:db:24:db:fb:b5:72:72:fc:
c5:34:d2:83:9b:3c:4a:f9:e4:05:c1:f0:d4:56:2b:
b1:72:5f:2e:38:a3:1d:5e:6d:d6:8e:12:70:69:b8:
47:39:db:f1:39:7a:75:4d:6d:9b:a2:62:a0:b1:6b:
93:7e:98:c4:3c:66:9c:c9:52:ac:75:d6:0c:12:ed:
93:96:c9:90:49:2d:a4:2c:f9:6b:5d:ec:a8:f0:0a:
1d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7C:E5:78:C8:40:B8:6C:9E:97:3F:5A:9F:B9:25:E2:F9:4C:0B:D2
X509v3 Authority Key Identifier:
keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1d:13:fd:c4:3c:ff:7e:96:b0:6d:74:46:1b:af:d3:cd:65:
06:ef:4b:30:25:0d:e1:07:d0:b8:f1:27:23:4f:bf:2c:77:cc:
a8:78:e2:4a:a1:0b:ab:a7:29:c6:33:a6:cb:4b:26:06:de:c6:
65:99:3e:52:d7:cf:9c:e4:b5:03:6e:e0:d0:33:97:71:4a:6e:
70:f5:1f:a5:d0:5a:6b:26:ac:d3:7a:f4:44:c7:df:68:d4:f2:
7c:b2:de:5f:aa:38:67:de:48:e3:1b:02:b9:f9:4d:c8:3d:48:
c1:77:3d:36:14:1b:5c:ac:7d:75:d1:a1:aa:1f:da:7e:0c:9a:
6c:1d:98:07:1e:9b:ec:1a:01:cf:9e:88:92:0d:31:f4:4a:76:
ec:54:b8:92:2c:70:7d:cf:5e:d2:31:8b:ea:c1:8a:a3:49:2e:
9e:f8:86:64:a5:aa:ea:ec:2a:90:54:37:80:cf:26:0c:58:9e:
c9:b1:4d:b7:34:e9:00:87:0d:ca:a3:49:0e:3c:b1:90:c1:66:
7d:0e:16:6b:dd:24:47:79:91:f0:1a:76:58:4d:1d:9b:3d:72:
84:43:df:55:30:74:dc:19:ff:bc:5d:16:28:d2:0e:52:da:fc:
f0:2c:65:04:cd:10:b2:ab:de:9f:67:4d:50:4a:2e:20:ef:c1:
0e:91:3d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 08:17:55 2025 by rpki-client