Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
File: __N-YUS-f13ZOtubq9g9SNUYlP0.mft (raw, json)
Hash identifier: p/sW2ZXr9St2XomswkoZihjdAdNscMbrSEaGLe9hk1s=
Subject key identifier: 18:D6:BC:5E:E2:C8:F5:D6:40:AA:4B:B3:6C:DA:5C:99:20:E3:C7:8E
Authority key identifier: FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
Certificate issuer: /CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Certificate serial: 0194BBCDED63D0F052F05623850359174C9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:22 +0000
Manifest this update: Fri 31 Jan 2025 10:00:22 +0000
Manifest next update: Sat 01 Feb 2025 10:00:22 +0000
Files and hashes: 1: T4JSoFrEVlA3_2SnHmgBXY12CKk.roa (hash: vzGu6j83ipDUTJQRTh0Y6Da8WT9NSHL+4Dey6CzoU8U=)
2: __N-YUS-f13ZOtubq9g9SNUYlP0.crl (hash: efiP3XHljZTyKKmQt065K+ULHZpBK+BLpf1JnGdwkJU=)
3: dUNsJzgqtJkMy1l0L21Y0Zsy2ts.roa (hash: 1X+g9lFYFIJoJGwfwGANKciE/PMScLctb1+/RsHdL0E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ed:63:d0:f0:52:f0:56:23:85:03:59:17:4c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Validity
Not Before: Jan 31 10:00:22 2025 GMT
Not After : Feb 1 10:00:22 2025 GMT
Subject: CN=18d6bc5ee2c8f5d640aa4bb36cda5c9920e3c78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:b6:be:a8:83:cd:50:93:89:45:ac:4e:28:
4b:10:90:bc:0f:56:d3:ab:ef:86:52:a2:76:f3:bb:
7e:31:7b:70:f0:59:1f:d4:2c:02:54:2f:16:25:05:
df:07:d5:55:8b:7c:88:dd:79:85:d9:c0:91:57:83:
6f:34:69:98:6a:f1:9c:aa:46:37:9a:59:d8:65:58:
02:1d:3d:0b:a1:6d:41:94:12:6a:15:f0:c2:51:63:
68:12:ab:eb:e7:39:4e:1f:4c:01:bb:94:17:10:d7:
99:b8:a7:6d:f2:d8:69:ff:1b:ef:89:57:ae:94:3a:
45:ad:4f:a4:34:7f:5f:18:eb:c3:ef:46:3a:fb:1a:
bb:1a:73:29:b3:98:be:0c:4b:30:cf:05:a9:07:6f:
5e:d4:9b:89:43:75:c0:70:03:bf:73:0d:41:c2:17:
c5:f6:cf:a2:aa:80:fc:ba:c8:c5:e6:a0:67:d7:39:
f1:79:d4:8f:e8:4a:f3:7e:26:eb:06:3c:fa:61:f1:
64:fe:99:2a:1c:d1:96:b3:8a:d0:59:d7:5a:6b:90:
56:94:d2:7f:21:50:b0:b2:52:f3:ed:16:d9:e5:42:
7b:f4:1c:ca:b3:73:43:0c:b1:d3:79:be:a5:d3:4c:
9b:40:c6:fe:07:af:71:f8:d8:6a:04:74:18:b2:46:
b8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D6:BC:5E:E2:C8:F5:D6:40:AA:4B:B3:6C:DA:5C:99:20:E3:C7:8E
X509v3 Authority Key Identifier:
keyid:FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4c:68:a8:4b:30:11:68:be:39:a7:97:72:c8:5b:54:aa:79:
e1:c6:0f:11:7d:7d:78:5e:f4:36:dd:c2:26:ce:bd:cc:e3:ea:
64:06:91:0b:29:d3:eb:1f:4e:da:52:3e:d0:cb:75:c3:6b:11:
2f:6d:4a:7d:bb:b7:ac:0b:9e:c9:7b:f8:37:e1:21:f5:d6:83:
a5:5e:00:9a:a9:97:05:2a:83:d6:21:13:74:2f:cc:20:01:d8:
d6:28:90:df:ab:58:04:e0:4a:38:02:f0:a4:fb:54:79:a9:a5:
8f:bc:98:29:36:d7:5e:b2:ff:7f:5c:1b:c9:a7:bd:67:c1:c7:
da:04:9d:15:fa:c6:17:8b:90:eb:fd:ef:40:48:e4:9c:44:f5:
bd:76:8e:59:15:9c:55:b6:a3:1a:f1:2c:5f:da:99:5b:60:41:
0e:49:6b:68:08:1e:ff:2e:fb:f8:14:5e:20:3e:b1:b0:fc:28:
86:6a:6b:ad:27:a5:0c:13:c0:5b:c4:41:f6:00:18:56:3b:55:
b5:5f:fb:94:87:76:dc:29:77:4f:8d:4a:74:ad:06:a9:3f:a8:
57:ca:64:74:4e:c4:9b:3b:27:70:c5:6b:c5:88:ea:fe:9b:29:
55:a6:59:da:c4:5d:96:f4:90:0c:9a:9e:60:3b:bb:fa:9e:9a:
dc:1f:98:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:49:57 2025 by rpki-client