Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
File: YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft (raw, json)
Hash identifier: XcDNHN//IRwdtm712vcdGnL0Cst4mGKlYtZ7QM0TVYU=
Subject key identifier: F6:6E:7E:17:A4:98:8A:08:1B:21:8B:2D:25:83:95:37:6E:64:A1:E7
Authority key identifier: 61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
Certificate issuer: /CN=6149cbba3e6629beaebfb69668678ada51744898
Certificate serial: 0194BBCE280004E38D7B8819A3CAD8607FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
Manifest number: 1152
Signing time: Fri 31 Jan 2025 10:00:37 +0000
Manifest this update: Fri 31 Jan 2025 10:00:37 +0000
Manifest next update: Sat 01 Feb 2025 10:00:37 +0000
Files and hashes: 1: 0IG70QW2hCrm52M5Cqyqdv7Bcb0.roa (hash: usdtXTbOrc0vwd46ZO8C/l/xue6j9QcbuHgY1Bupvvo=)
2: YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl (hash: Un3L3cjR5BA8FnqM1Ido45EHwHCF3aWfoWGSkzV3uAY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:28:00:04:e3:8d:7b:88:19:a3:ca:d8:60:7f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6149cbba3e6629beaebfb69668678ada51744898
Validity
Not Before: Jan 31 10:00:37 2025 GMT
Not After : Feb 1 10:00:37 2025 GMT
Subject: CN=f66e7e17a4988a081b218b2d258395376e64a1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:0b:f9:9c:2f:f5:90:ae:47:56:11:b2:d6:
f4:c7:e0:1d:b2:e7:70:8e:06:8b:76:ad:9f:2b:c7:
3e:4b:bb:71:b2:ce:91:9d:97:da:a0:e3:b4:64:a1:
d1:87:a7:a1:ea:5e:a5:e2:4c:6a:19:c0:ba:bc:22:
b2:26:0f:2e:47:42:3b:f4:a3:e3:3b:59:0e:d4:49:
f7:fe:9a:e3:b3:c1:31:7d:59:33:5a:10:22:34:fe:
f6:29:5c:62:64:7e:44:ed:6e:e5:ef:e2:c2:24:8f:
e7:9c:fc:f2:81:79:96:a1:7e:e0:e3:70:49:12:df:
43:bd:e5:97:56:cf:b7:ce:f3:92:26:1c:5f:df:ed:
36:f7:51:a4:94:27:66:ae:da:63:c3:88:ab:1e:b9:
b2:79:99:77:2e:51:77:ae:01:e6:74:47:cb:ab:38:
0d:38:71:dd:da:40:4c:84:11:d9:a3:ce:6d:c0:3f:
0a:f3:d7:33:c7:70:3d:c5:34:d6:9b:93:a2:e1:7c:
40:f3:8f:c0:a2:ab:dc:c2:2c:0f:84:bb:d8:0f:66:
73:5f:15:76:d9:50:14:38:5c:40:94:52:dd:68:28:
c7:9e:96:fa:be:d0:6c:d2:ca:f3:a3:44:75:95:19:
31:72:bd:79:27:78:73:9b:31:0f:4c:ee:0d:96:82:
bf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6E:7E:17:A4:98:8A:08:1B:21:8B:2D:25:83:95:37:6E:64:A1:E7
X509v3 Authority Key Identifier:
keyid:61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4a:8c:c8:0e:e8:d1:24:c4:51:11:ef:c1:b6:4d:e0:8d:2a:
c3:6d:b3:09:1f:38:e0:05:03:24:6f:2a:f5:33:8a:aa:5b:b3:
f0:2a:0d:96:d1:ab:1c:93:63:18:e7:bc:6b:f1:e2:dd:20:68:
7d:ef:3a:5d:cb:68:4f:04:d4:09:36:1d:2e:fe:ce:3c:84:51:
ca:fd:9a:a5:65:ef:ad:99:ce:4a:1b:a1:a7:85:39:d6:57:d9:
f9:38:fc:9a:14:8e:a2:1b:a4:b9:f0:fb:6c:5c:70:1b:2f:79:
ef:0b:a1:a1:48:98:c0:0e:9c:20:f0:cc:09:8a:28:8a:ba:55:
92:1c:f7:92:24:bd:63:ac:ff:a8:6c:42:ef:f0:2f:4c:a3:e1:
e7:13:06:68:29:7d:6e:6c:79:4a:9b:11:cb:29:c8:f0:6d:73:
8a:96:e6:3d:a6:ba:4d:30:7c:4f:b2:1c:bd:85:0a:41:3e:58:
2b:19:e4:64:65:98:86:e3:2e:10:5e:2e:c1:a3:22:5c:cc:a0:
f1:dd:73:5b:42:2a:39:47:ef:d7:88:c8:f1:00:d9:16:19:3e:
44:78:95:d2:29:15:88:e0:be:0c:1b:bb:53:6e:f1:45:51:e6:
a1:c1:93:5f:ca:24:1c:cb:61:43:55:ce:0b:6f:05:98:4b:16:
08:bd:0e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:01 2025 by rpki-client