Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
File: YxGmnIFyBEhUkx8QClm9CJy4iBo.mft (raw, json)
Hash identifier: tkd3DMv/Y+XnPZpLjDkxkt5tnlvLfjkTpIfsacBOjIw=
Subject key identifier: 8D:32:37:D9:B0:AD:EF:0B:FF:81:79:A3:2B:D5:97:2E:78:7A:C4:1B
Authority key identifier: 63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
Certificate issuer: /CN=6311a69c8172044854931f100a59bd089cb8881a
Certificate serial: 0194BC730A9B581B93066127BD5BCD0DEA73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:43 +0000
Manifest this update: Fri 31 Jan 2025 13:00:43 +0000
Manifest next update: Sat 01 Feb 2025 13:00:43 +0000
Files and hashes: 1: Iu34C6WTJwsC1Fqt5jh4X7IhtoM.roa (hash: pYBTjTgLbQQp6tqJYSrST6Bcv/MloC/SDIFHbD5N2uA=)
2: YxGmnIFyBEhUkx8QClm9CJy4iBo.crl (hash: wWlWZOVTVo77Vrq9HVgDhhAq3368MZ/kGnRtDJ9zAzk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0a:9b:58:1b:93:06:61:27:bd:5b:cd:0d:ea:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6311a69c8172044854931f100a59bd089cb8881a
Validity
Not Before: Jan 31 13:00:43 2025 GMT
Not After : Feb 1 13:00:43 2025 GMT
Subject: CN=8d3237d9b0adef0bff8179a32bd5972e787ac41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c9:22:b7:64:83:3a:3c:53:e8:ca:14:76:b9:
77:b8:4b:e4:24:35:2b:33:40:d9:56:fe:6d:4f:7c:
a4:a3:3e:29:98:22:da:e3:bb:60:4f:11:c8:bb:3a:
98:57:4c:06:c1:3d:54:26:ff:bd:53:d8:2e:36:2f:
21:41:71:43:cf:d9:2b:ed:64:14:b5:c1:01:15:3c:
f3:74:28:4c:7c:96:71:b6:07:82:17:b0:8e:6a:ed:
16:3f:23:72:e7:f2:90:b9:8c:72:e2:ae:57:d1:19:
c9:32:df:9b:e5:46:d9:56:4d:3d:6d:eb:42:fe:51:
b0:f6:4f:6b:8f:49:79:91:0a:1f:2b:e8:8f:17:44:
76:8f:2f:9d:07:20:f1:91:d2:2c:75:d9:06:f5:90:
a4:46:d9:e4:8e:b9:1a:51:11:43:89:dc:d7:71:bf:
77:60:79:7d:71:51:69:2a:25:9b:a1:9e:86:0a:5d:
ae:04:f6:b0:98:f7:1a:20:01:c1:de:2c:6d:16:75:
ce:bb:45:b5:65:c9:23:0a:a4:9c:65:eb:27:31:0f:
96:be:76:59:d8:f0:80:25:83:b1:03:f0:09:bd:8f:
0f:6c:6e:0b:b2:f0:2c:06:17:21:2e:28:93:9f:13:
b0:93:83:2d:4a:60:fa:88:78:0b:e1:d8:8f:d4:20:
65:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:32:37:D9:B0:AD:EF:0B:FF:81:79:A3:2B:D5:97:2E:78:7A:C4:1B
X509v3 Authority Key Identifier:
keyid:63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ac:75:30:d6:ec:19:ea:ea:68:67:9e:5c:4f:9c:2e:89:03:
69:26:4e:20:70:0e:21:ac:d8:95:52:0e:8a:42:46:b8:bd:1c:
80:db:59:64:bf:33:6d:1a:3d:09:f6:4b:e9:f5:63:5b:65:18:
97:43:a8:40:99:3a:8b:a6:48:80:9c:8b:02:08:8b:3e:ae:54:
51:fb:da:5b:05:0f:49:eb:fb:5b:85:b6:d3:77:da:e1:b2:1d:
60:3a:71:a9:c4:31:d5:65:32:b8:c9:09:5c:f7:9b:ef:a8:35:
a6:ca:33:71:e8:d5:64:fe:f4:ac:a8:5c:86:56:b4:67:51:a4:
b0:72:5a:55:88:16:f9:e7:d2:94:0a:9d:d0:25:8d:eb:d3:b3:
6f:fd:4a:80:1d:c9:7c:3b:5e:4c:d6:fe:cf:3d:22:20:43:72:
87:ee:bf:88:60:3f:f4:0f:68:7e:60:85:7f:ad:1d:32:f2:1a:
31:78:92:71:42:ee:e6:df:a8:5f:21:d1:2d:44:18:56:15:f3:
64:30:40:83:f1:97:6d:82:a7:3b:4d:f8:de:49:da:da:2a:a0:
be:01:06:23:a2:6f:f9:53:94:0a:ca:6c:93:1c:f6:38:38:a5:
87:99:ea:0c:6c:30:71:0b:e9:44:5f:f1:d2:95:28:2b:c8:36:
82:84:bc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:35 2025 by rpki-client