Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
File: Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft (raw, json)
Hash identifier: qLNnSx0g15jF/idO5XOIT8YD0ZROX9djQSiwrPZSJv4=
Subject key identifier: FF:A3:79:C7:F3:5E:D7:BC:AB:53:72:E3:8E:C9:B0:46:35:D8:4B:D2
Authority key identifier: 62:AF:1D:7F:36:B1:86:58:02:53:5E:49:A7:33:1E:03:5A:D0:10:08
Certificate issuer: /CN=62af1d7f36b1865802535e49a7331e035ad01008
Certificate serial: 0194BBCE8C4A2D1E997A8D770FA4F0DE100F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
Manifest number: 088D
Signing time: Fri 31 Jan 2025 10:01:03 +0000
Manifest this update: Fri 31 Jan 2025 10:01:03 +0000
Manifest next update: Sat 01 Feb 2025 10:01:03 +0000
Files and hashes: 1: Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl (hash: iAXqIEwkK7xCj2h6MxvidnklunPJmdcU2iEEZZH3oNE=)
2: y9JMR_ZxLXrYLvgRShORqLwJidY.roa (hash: Uw28deLkoDLLwc6/RTXYzT+/L0LSFoqfWT5M5xI68aM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8c:4a:2d:1e:99:7a:8d:77:0f:a4:f0:de:10:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62af1d7f36b1865802535e49a7331e035ad01008
Validity
Not Before: Jan 31 10:01:03 2025 GMT
Not After : Feb 1 10:01:03 2025 GMT
Subject: CN=ffa379c7f35ed7bcab5372e38ec9b04635d84bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7b:65:b4:ea:a9:ba:b6:18:3f:00:6c:8b:ea:
31:7e:de:6b:ff:22:56:2a:04:95:1a:e0:68:c2:b1:
cd:d8:e5:ed:9d:ac:43:5f:b9:61:d9:09:09:73:9c:
a0:86:49:b3:fb:28:e1:90:d0:10:5b:d1:6e:a7:54:
fd:ad:fd:60:5a:23:21:e6:af:63:cf:2e:5b:c8:4b:
fa:15:34:aa:72:b5:f6:b1:2d:33:8f:10:7c:be:a0:
b5:6b:0a:e1:61:4f:5a:b1:6b:51:29:24:e9:58:82:
40:e8:85:c2:ee:9b:26:ec:4f:cf:28:96:36:39:49:
33:3c:26:a6:36:77:45:58:5b:a6:8e:1d:d2:e7:49:
83:b8:ab:70:2c:0b:5e:c6:db:d8:14:34:df:b4:43:
05:87:72:10:57:a5:9e:0f:1e:3b:a6:ab:44:88:35:
14:19:c5:29:c6:e7:e3:67:7a:fe:3a:dc:00:be:1c:
20:9f:e6:04:f4:3f:59:7b:6b:64:af:71:2c:63:ce:
d9:00:d7:47:0f:7c:8a:bd:c6:ad:9d:82:d7:81:0f:
8a:41:9b:5c:c5:b3:0a:a2:58:1a:6a:4c:37:db:fd:
56:38:ad:05:b2:37:f6:f5:f5:1b:96:1a:78:a7:85:
81:0f:e2:bf:cf:f6:bd:bd:be:63:ca:54:2a:ff:f0:
a1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A3:79:C7:F3:5E:D7:BC:AB:53:72:E3:8E:C9:B0:46:35:D8:4B:D2
X509v3 Authority Key Identifier:
keyid:62:AF:1D:7F:36:B1:86:58:02:53:5E:49:A7:33:1E:03:5A:D0:10:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:08:0e:97:76:ec:1c:ac:49:a0:dc:0c:8b:9f:64:5e:7a:fa:
21:83:9b:61:0b:ca:79:27:df:5f:bf:8a:6c:83:62:0a:1e:68:
00:ef:b9:aa:4b:b4:46:c8:2b:1a:dc:9a:08:1e:68:44:9b:38:
49:9e:2c:d5:1f:d4:c8:f2:ef:ae:78:37:eb:6f:29:01:30:89:
88:a2:7b:6c:76:0e:0a:52:f9:41:c2:b7:fc:5e:ee:27:ae:50:
e4:1c:40:80:51:55:88:a2:22:97:bd:17:11:d6:10:d2:36:6b:
ce:28:8e:8a:38:3e:b4:de:62:db:38:6e:ec:eb:69:73:1f:32:
3a:9b:32:c2:a1:c9:f1:e0:76:0d:9a:24:19:53:50:a7:b0:e9:
c1:bb:6f:92:52:62:f7:f1:5a:a1:ab:37:4d:71:ab:7f:11:45:
3d:5a:d4:7d:15:f8:4f:c1:40:98:73:4f:8c:ba:89:e7:ee:49:
6e:65:9f:d5:e0:df:8d:d4:e8:34:ac:2b:5f:eb:1c:0c:76:f8:
87:4c:15:f2:3b:9a:e1:08:7d:99:75:cf:7c:4d:55:7a:fb:79:
49:e3:67:09:29:d4:ef:a5:c9:7a:14:2c:4f:fb:f9:fb:24:12:
51:f9:eb:06:21:d1:ef:26:ed:16:7a:80:55:6e:5d:51:c4:e1:
ec:c8:5a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:23:27 2025 by rpki-client