Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft
File: Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft (raw, json)
Hash identifier: WfX2WOmw5xXZwykfTyJ4mOb43uxaRxVCI4d502JppWM=
Subject key identifier: D7:42:30:07:38:D2:52:D8:47:47:93:8A:A3:FB:B5:31:C0:79:F9:EC
Authority key identifier: 63:98:EC:15:BC:03:9C:5A:60:42:FB:E9:04:84:45:6B:E0:2D:A7:B9
Certificate issuer: /CN=6398ec15bc039c5a6042fbe90484456be02da7b9
Certificate serial: 0194BD17E3F8C3FE7E5C623A2A57FCAB234C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft
Manifest number: 0D5F
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl (hash: 6xlMmd0RFNSGL3FXpNVRA4RUeE7MMDLVnt5UqUh8kh8=)
2: e7A-mRDgO875HCDrxITlnnJ3Ki0.roa (hash: 7vWhmuACkkydDfcxmeEEUNVhiR5m0fscFivB+SuNzME=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e3:f8:c3:fe:7e:5c:62:3a:2a:57:fc:ab:23:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6398ec15bc039c5a6042fbe90484456be02da7b9
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=d742300738d252d84747938aa3fbb531c079f9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:53:57:33:ae:58:6c:6f:01:fa:8e:2b:63:d3:
cb:c7:76:75:c4:c2:c9:16:b6:8c:13:35:f5:25:6d:
0b:6f:79:3a:a6:4e:06:b9:4d:0a:11:a1:be:ef:c1:
b9:fb:37:13:3c:1f:ba:f1:a0:41:62:6b:c3:08:96:
c7:3c:95:7d:8d:bb:d6:df:55:d7:83:9d:59:90:16:
5e:ec:56:95:29:ac:87:16:e7:b9:83:f2:07:3b:4e:
fb:1d:ea:2e:4f:fd:54:80:62:bb:59:be:93:fe:53:
f6:ce:b6:7d:8d:47:b3:9c:ef:6a:c4:ba:80:c8:0b:
29:4d:33:2d:dc:cf:fc:a0:67:80:b9:1d:47:4f:0f:
ba:fd:ff:aa:67:f3:a3:d8:6b:77:b0:25:a0:6d:a2:
f2:63:ef:b8:ae:e4:e0:09:3b:18:83:6b:cf:5c:8b:
07:e8:2a:47:38:36:6c:61:7f:13:11:1e:81:81:c6:
80:6a:77:67:f5:32:ad:30:d8:1c:f8:9e:3c:54:df:
a1:61:88:99:9e:42:05:96:bd:36:40:5f:ae:f4:f1:
77:16:cb:87:57:b0:58:dc:e2:0b:f4:55:e7:1e:75:
7a:0f:cc:ef:0b:e8:05:94:e2:01:1d:91:ae:21:eb:
cd:32:09:d1:a0:9c:db:20:b0:b3:d5:fb:5d:66:86:
d8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:42:30:07:38:D2:52:D8:47:47:93:8A:A3:FB:B5:31:C0:79:F9:EC
X509v3 Authority Key Identifier:
keyid:63:98:EC:15:BC:03:9C:5A:60:42:FB:E9:04:84:45:6B:E0:2D:A7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:47:ce:e1:72:e3:b9:22:28:a2:1f:a2:ed:b9:a5:1e:cd:16:
82:8b:39:d6:8b:60:5b:2d:96:30:48:24:a9:f1:c0:4e:53:c9:
66:2a:2f:13:6a:68:a0:51:4d:b5:5a:70:f8:be:65:83:ea:52:
f0:5e:3c:ea:cb:9e:92:53:c9:c6:01:ba:06:dd:d0:be:6f:d8:
65:5c:7b:ea:2f:cc:a8:8c:88:3c:80:58:af:9e:24:59:23:d9:
8b:7f:63:be:d6:11:9d:23:9b:41:ea:1d:4d:ee:56:85:cc:2b:
3f:9c:db:bb:d4:2e:96:c1:e1:2f:3e:97:14:8e:11:d2:a9:5e:
2f:39:fa:38:49:c1:e0:ed:64:77:e1:f3:0d:c6:9e:5d:d8:99:
87:9a:62:8a:a0:96:c9:a5:d7:da:a9:92:68:70:1f:9a:06:b4:
8d:b4:2c:90:cc:ad:bd:af:bf:d2:3b:aa:d3:55:88:56:14:ad:
78:9e:7a:ee:ea:6d:c3:7b:db:e9:99:d0:0c:09:3c:97:c7:4b:
56:4f:c8:e3:9c:da:4a:9d:70:06:91:4a:ed:9a:3f:98:1e:c8:
4f:6f:88:e6:59:ed:6e:9b:80:1f:a0:45:95:8d:47:4b:08:18:
dc:c0:f8:ad:fd:95:8d:b7:ec:de:79:e7:1a:0c:b3:37:7b:af:
07:c9:49:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:52 2025 by rpki-client