Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft (raw, json)
Hash identifier: G4BwWjN6Xc3JrBe0XrK9Hgr+thRqS8T5jvyLwQFsix4=
Subject key identifier: 97:F8:A6:18:FD:F3:90:67:E1:15:05:F8:F0:D9:44:9F:FD:2C:5B:FF
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 0194BD17E3A0768F87EFC20E7B13F2235575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
Manifest number: 0C98
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: 4vlmdPXJEIj9BD5XrGcncgmk5j4.roa (hash: riPKiYt/L7BDSbhqPzWMVJUAIze+SOZFasERkJ2mKqY=)
2: 6JnpDB-avLJy-XNKDDSSHNV24As.roa (hash: Y/YVn+7OJ+S4qmnI1JW4HV1PsJFLQFMKAejvFBc5SZo=)
3: yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl (hash: lkiBg6gEJYhRMw9m8WSUIGl+LrecvKVylXIn9G3cL4I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e3:a0:76:8f:87:ef:c2:0e:7b:13:f2:23:55:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=97f8a618fdf39067e11505f8f0d9449ffd2c5bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c9:46:80:08:73:a5:8a:41:45:e2:80:db:e6:
e9:e4:70:e8:c0:31:03:76:19:49:d7:89:bf:e5:44:
a2:e4:a1:76:68:cd:eb:7f:1d:e1:5c:bd:36:bf:a4:
10:3b:46:7f:0e:33:3c:9a:51:09:c5:fd:12:ab:d4:
87:ad:23:2b:23:2b:5d:45:37:23:4c:88:5c:e3:4e:
d3:09:11:0d:f4:a3:a7:02:a7:53:e8:ad:7d:d7:d8:
71:35:a4:ee:a0:55:d1:b5:6c:6e:e6:aa:9e:1f:51:
0e:76:02:e8:5b:06:b5:bc:cd:e8:56:07:40:16:d6:
99:9e:07:6c:13:c1:90:63:17:c5:c8:fa:4b:4c:6a:
a9:90:08:4a:d4:98:35:c4:5a:76:26:f1:59:81:e8:
fd:10:43:b5:91:4e:37:e2:90:42:e3:ce:35:b1:ab:
46:2e:58:ea:44:a3:c8:be:a7:90:a8:35:88:01:e9:
f0:8a:8c:71:96:32:f3:88:02:92:04:95:6f:26:50:
c2:42:7e:be:4d:27:0e:e9:11:6d:45:73:e1:3f:b5:
4a:2f:de:7b:c3:b6:88:78:84:70:e1:cd:48:11:b5:
27:6b:27:b6:38:86:75:e1:f8:dc:fa:d1:ab:f8:0f:
1e:c1:5b:9a:d1:88:f3:7b:79:7f:9c:5a:f1:82:df:
77:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F8:A6:18:FD:F3:90:67:E1:15:05:F8:F0:D9:44:9F:FD:2C:5B:FF
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:13:47:2f:74:21:b7:88:87:7d:88:10:66:17:1e:34:7b:e4:
a7:b7:05:8a:92:a5:3e:f9:ba:b0:84:47:38:95:c0:8c:8f:f5:
b8:63:15:6e:e2:1a:c4:d7:14:21:a2:63:c6:6b:48:74:f7:70:
59:97:e7:b2:9b:ec:77:c3:e7:10:22:fa:74:a4:0d:a7:49:b4:
98:a0:c3:9b:1b:4d:45:0c:32:e4:a2:77:47:b8:78:71:4e:cc:
c6:90:b9:81:37:1d:14:96:8b:e9:db:0c:72:d8:b5:ee:73:64:
af:68:22:15:9d:70:df:d1:89:f5:38:02:b4:e9:e1:ec:4c:a9:
08:92:17:92:16:49:4e:fc:9c:24:7e:bc:b4:a4:26:00:ac:eb:
f1:3d:21:00:41:34:de:ea:6d:fa:ec:7c:ae:68:0d:33:c7:31:
94:28:18:e5:e7:0e:d6:f9:d7:2c:81:94:40:58:56:ca:45:5a:
3e:da:cc:80:0b:28:e4:4f:06:ae:0a:7c:20:eb:21:0e:fa:33:
65:ae:21:d1:ca:c2:a2:61:cf:01:78:c2:38:bc:7d:f1:af:9c:
ae:ea:e0:23:57:c4:56:49:2c:d4:95:23:dc:d7:4f:96:eb:13:
41:4a:92:56:d7:89:d0:ed:31:46:fc:41:c7:28:25:2d:60:e0:
f6:7d:d0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:26:35 2025 by rpki-client