Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.mft
File: Y2QsHKPTjH4V5ofg2UhceCaTjBA.mft (raw, json)
Hash identifier: jizbbVsqJ0fjYjJnB/J6JAdgjCcUYXA91JtqMQOcpUM=
Subject key identifier: 35:57:3B:30:D0:BD:9E:5B:16:3E:6B:0D:72:D3:C8:49:4B:93:D3:F4
Authority key identifier: 63:64:2C:1C:A3:D3:8C:7E:15:E6:87:E0:D9:48:5C:78:26:93:8C:10
Certificate issuer: /CN=63642c1ca3d38c7e15e687e0d9485c7826938c10
Certificate serial: 0194BBCF0E5017E83B59D942B0E24AB5D249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2QsHKPTjH4V5ofg2UhceCaTjBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.mft
Manifest number: 0156
Signing time: Fri 31 Jan 2025 10:01:36 +0000
Manifest this update: Fri 31 Jan 2025 10:01:36 +0000
Manifest next update: Sat 01 Feb 2025 10:01:36 +0000
Files and hashes: 1: Qzda_dpxvv_9oCqZ0rKtNjYGFYA.roa (hash: yhmVIZybj8mBYPvdFgcuCe4v8sYhgAuDZKiw+Hdv0f4=)
2: Y2QsHKPTjH4V5ofg2UhceCaTjBA.crl (hash: KUZT2j46K5djTjkileVnjhYIgXIs8RZoW7n8WMwfaiU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:0e:50:17:e8:3b:59:d9:42:b0:e2:4a:b5:d2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63642c1ca3d38c7e15e687e0d9485c7826938c10
Validity
Not Before: Jan 31 10:01:36 2025 GMT
Not After : Feb 1 10:01:36 2025 GMT
Subject: CN=35573b30d0bd9e5b163e6b0d72d3c8494b93d3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:05:a2:eb:fc:4c:d6:02:47:42:95:a5:b5:68:
ed:d0:6f:72:47:59:34:f1:59:d1:f0:97:81:4d:86:
d0:46:6d:81:08:fe:a6:24:6d:b1:85:2a:ee:fd:2f:
42:9d:d9:fd:98:af:c4:44:0b:26:bc:dd:1f:d4:f9:
de:3a:d0:43:d2:e7:6d:69:dc:b6:54:6e:dc:80:b8:
10:0d:95:f1:ff:c5:a9:ee:ca:c8:d8:c3:4a:93:a0:
c9:db:bd:59:4d:64:ef:6a:68:da:49:85:9d:5d:2d:
09:70:c2:36:32:32:09:a0:c1:e5:f5:2d:40:d3:d0:
4a:84:7c:a1:b7:89:e3:db:18:17:d6:0c:14:dd:7e:
af:90:ef:0e:28:45:6d:ce:7f:e4:08:4f:a5:97:9e:
f0:d6:48:d5:ad:e8:3f:2d:b2:60:61:18:a8:92:46:
ac:e2:28:3f:2d:6b:35:47:84:73:f1:4a:43:87:cc:
5e:ba:90:5c:78:3e:68:4d:e6:78:36:87:c7:a3:d5:
5b:20:9b:86:49:85:99:b2:c5:12:ca:4e:04:22:25:
2f:02:83:69:13:13:56:f4:20:6b:fe:15:0a:0a:be:
04:88:8d:1f:d8:1f:53:1d:2a:76:d9:29:11:26:a3:
86:df:e6:f9:d5:a7:fd:50:fc:c6:dc:02:e5:fb:fa:
93:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:57:3B:30:D0:BD:9E:5B:16:3E:6B:0D:72:D3:C8:49:4B:93:D3:F4
X509v3 Authority Key Identifier:
keyid:63:64:2C:1C:A3:D3:8C:7E:15:E6:87:E0:D9:48:5C:78:26:93:8C:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2QsHKPTjH4V5ofg2UhceCaTjBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:71:6d:89:18:3f:ca:04:14:02:42:9e:d1:55:9a:b7:85:6d:
6d:56:d9:d6:7b:f7:0e:84:6d:7c:46:cf:e4:c9:15:8d:ec:50:
f8:2c:5a:56:76:67:a5:81:b3:9a:26:91:6c:15:8e:54:c6:16:
9a:14:ac:0c:67:8e:90:f3:08:27:78:5e:0a:50:04:8e:e5:1c:
8c:ad:67:54:da:85:3f:a7:15:f7:d0:54:80:72:1f:12:78:07:
4d:91:7b:a9:d0:81:c2:f4:f7:7f:4f:9a:56:9d:17:13:c7:7b:
26:17:b4:fe:a9:95:69:cc:d3:98:02:ea:5b:7b:7b:6b:fa:8d:
2a:5b:c5:d2:3f:6c:df:f8:c9:c7:0f:3f:71:15:ee:23:3f:9e:
0e:3c:dd:4f:07:06:d2:85:92:2f:b7:2d:89:21:87:eb:2b:a2:
b4:57:c9:cd:3f:9c:45:29:c9:98:93:25:12:db:f1:06:2a:dc:
31:e8:0a:1c:88:d2:4f:2b:e9:26:88:55:b0:11:e0:09:a2:be:
81:eb:40:41:de:e8:37:e1:91:35:12:f2:d1:ed:6a:09:7f:83:
0e:85:96:89:a1:5f:37:62:cc:a2:33:9a:1f:47:3b:8a:9c:b1:
36:44:f2:7c:7d:3f:32:47:09:92:ef:dc:ce:fc:14:bb:d7:8c:
06:e2:94:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:31:05 2025 by rpki-client