Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
File: ylIg5T5PgcoljM_qGHKAKA9fYho.mft (raw, json)
Hash identifier: mUQKpPb2Y2WnnXLa3QyT88cltDd3aOXz3LT8psmHcRE=
Subject key identifier: 01:E2:0D:A5:1E:65:58:E9:F0:BF:F4:5E:29:19:9B:61:48:5D:CA:5F
Authority key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
Certificate issuer: /CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Certificate serial: 0194BCA9DED2BCD89CBDEA70784A74D56C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:36 +0000
Manifest this update: Fri 31 Jan 2025 14:00:36 +0000
Manifest next update: Sat 01 Feb 2025 14:00:36 +0000
Files and hashes: 1: HnblzgjRhv7ohFCku2dgX5Jr7vw.roa (hash: o9K0gGCxUA0R4sGgN9lj9M6IzHoNtSXBjdq46DJlaa4=)
2: dem0uBwT7g7YZDZIQsS-aXVQdOI.roa (hash: XISttqO419C7SgkgSmOfFJd6GmXYZpUuMQWw/YZudzA=)
3: ylIg5T5PgcoljM_qGHKAKA9fYho.crl (hash: d1XJVKUx9XIaxvbDClST5//6VP3oNrVsyi0li2DkHU8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:de:d2:bc:d8:9c:bd:ea:70:78:4a:74:d5:6c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Validity
Not Before: Jan 31 14:00:36 2025 GMT
Not After : Feb 1 14:00:36 2025 GMT
Subject: CN=01e20da51e6558e9f0bff45e29199b61485dca5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:dc:20:e7:4e:f4:b0:e4:03:73:34:9d:c5:
da:f2:13:ea:d3:f5:6b:de:cf:20:76:54:50:0d:bd:
37:b3:9e:fd:2a:e7:c4:7d:4a:59:f2:d9:86:b9:96:
a4:b3:c7:fb:33:e2:26:15:37:f4:8d:45:f4:42:ce:
e8:6b:ba:ad:8f:24:68:0c:b4:91:f2:7b:2f:62:75:
27:0f:f1:26:e9:57:bc:0c:3b:77:7d:77:ae:9d:f2:
c9:c6:44:79:1e:5f:08:7d:ef:22:f6:d2:18:15:59:
b6:61:f2:bb:f5:11:8e:f1:6f:c2:29:97:be:5e:51:
e1:99:60:a0:e7:fd:a8:0b:bd:32:56:f5:39:92:63:
77:91:d5:b4:85:9f:d7:8c:1e:05:22:53:a8:36:e6:
4d:72:d2:e4:70:0d:17:0a:ef:86:f4:ba:90:94:dd:
b6:ff:8a:7a:b9:de:31:b7:50:53:a4:54:42:df:47:
ae:44:9e:3c:07:f0:dc:6d:8f:64:4d:8f:35:1c:9f:
86:7f:0c:a4:9d:99:f3:9d:8e:7f:b0:6f:40:6d:65:
96:3c:56:c0:93:b0:1e:41:0c:62:a5:e8:0a:b7:04:
ed:15:37:da:54:7d:f2:3f:ad:31:4e:0b:45:d5:32:
75:06:6e:ba:95:07:ce:c0:7f:ed:ef:58:97:ca:4b:
ed:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E2:0D:A5:1E:65:58:E9:F0:BF:F4:5E:29:19:9B:61:48:5D:CA:5F
X509v3 Authority Key Identifier:
keyid:CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7e:a7:22:d0:ab:a0:1d:d2:f5:f9:77:45:0e:a4:27:a2:e6:
bb:d0:5e:24:b4:88:88:9d:65:7f:33:91:dd:89:6d:7d:ac:d1:
e2:26:c2:48:83:cf:04:24:84:29:36:87:4b:a4:81:e9:24:ab:
13:76:83:ef:8f:f6:b2:28:5c:2c:06:dd:1d:73:7a:e9:2c:e9:
82:67:e0:cd:d9:c5:92:46:7e:85:f1:73:da:0c:3e:8e:81:ae:
7c:ea:1a:62:70:9e:12:1f:44:de:94:5b:b9:57:38:98:d4:d1:
ad:ae:02:24:79:5f:a3:ea:42:18:d5:08:39:87:24:53:18:52:
ad:3d:72:3a:f5:03:67:e7:df:eb:23:f2:1b:09:26:85:b8:70:
18:3d:f0:9f:8f:c8:45:87:34:1c:08:79:8a:1d:2c:e5:20:cb:
4d:ce:a4:2e:dc:e0:f4:5b:9e:1e:c3:23:c8:62:ec:8a:54:c5:
81:13:de:66:87:c2:8c:43:b8:77:81:cd:32:fb:e9:9c:9f:bb:
82:77:55:5b:a1:a7:02:3a:99:c5:db:33:d9:2b:d7:bf:3c:a7:
45:1b:3f:8c:9c:e0:2e:7c:42:eb:9d:65:57:52:98:3d:7b:49:
05:22:fc:c3:c6:2f:89:10:7f:27:4d:fe:a5:a0:cd:d3:3e:14:
a1:77:cf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:14:58 2025 by rpki-client