Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
File: yXKq7Icz1F96AANRAYC0ri1Lvo4.mft (raw, json)
Hash identifier: isIxi5JMB+tMAZuxmVpXyPXWrzOrnd12Zmqk8RZ3Kx8=
Subject key identifier: 5E:B3:FC:20:81:9E:83:AD:B8:3D:52:5D:28:59:6D:8D:15:20:3E:8C
Authority key identifier: C9:72:AA:EC:87:33:D4:5F:7A:00:03:51:01:80:B4:AE:2D:4B:BE:8E
Certificate issuer: /CN=c972aaec8733d45f7a0003510180b4ae2d4bbe8e
Certificate serial: 0194BC3CB2CC086BF1E7F54B0B1B802D3FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:22 +0000
Manifest this update: Fri 31 Jan 2025 12:01:22 +0000
Manifest next update: Sat 01 Feb 2025 12:01:22 +0000
Files and hashes: 1: iEYRoHL_x--Q-PC_QmRkLatna0w.roa (hash: 5s1E+tOqSuT9Il26pYgrASE0LBQS+wYadwRdpb6ASa8=)
2: yXKq7Icz1F96AANRAYC0ri1Lvo4.crl (hash: U3KK5+SBxZ4X2uP4ORh+dG11iahB54ccS5UodDmnco0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:b2:cc:08:6b:f1:e7:f5:4b:0b:1b:80:2d:3f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c972aaec8733d45f7a0003510180b4ae2d4bbe8e
Validity
Not Before: Jan 31 12:01:22 2025 GMT
Not After : Feb 1 12:01:22 2025 GMT
Subject: CN=5eb3fc20819e83adb83d525d28596d8d15203e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:7f:5e:db:6c:14:a3:35:38:51:a6:81:01:5e:
18:c7:ff:99:57:b2:43:4f:0c:5e:cf:53:7e:1b:f5:
03:34:ce:12:5e:62:bc:87:c4:20:c6:4b:b9:e2:26:
1c:1f:ef:6a:2b:1b:b3:42:e4:33:6d:65:7c:86:ee:
56:36:ca:6a:b7:c9:bb:c3:ca:20:8e:97:fe:34:14:
04:21:2a:f8:3b:a2:18:af:34:fa:36:93:4d:8c:65:
fa:9b:66:ae:5c:9b:58:1d:f4:f6:05:c9:f1:0d:82:
13:65:b6:2a:33:d2:d1:1d:ee:68:71:40:ad:b5:33:
d1:4d:f6:1c:e1:88:1d:97:c3:c0:57:12:14:10:b7:
b7:47:2b:0e:90:17:38:a4:b6:be:7d:9d:c2:48:3c:
5c:e1:d4:c8:9c:92:8e:b7:60:dc:91:4e:41:b3:23:
a1:19:88:2d:3f:c9:69:e4:35:de:5e:8f:6f:40:12:
6c:47:b6:68:e0:87:e8:cb:d0:e4:85:67:fb:03:d8:
b8:09:2d:42:72:9e:71:a8:34:07:e6:62:18:4b:6f:
d2:64:98:ea:70:26:a8:cb:bc:4a:87:21:48:ab:e7:
7d:ca:07:54:86:6e:f4:30:c2:70:54:98:2e:ac:c3:
b5:1e:55:43:69:5f:a1:ed:8a:5b:d6:8b:71:8c:b4:
cc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B3:FC:20:81:9E:83:AD:B8:3D:52:5D:28:59:6D:8D:15:20:3E:8C
X509v3 Authority Key Identifier:
keyid:C9:72:AA:EC:87:33:D4:5F:7A:00:03:51:01:80:B4:AE:2D:4B:BE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:89:55:4d:2e:45:c9:d0:cf:76:93:59:ab:01:86:f3:4e:0e:
ec:5d:58:4b:e8:c0:45:87:4c:62:fb:3c:4c:bc:4f:78:29:16:
f1:d7:c2:b7:a7:ce:d4:59:bf:c3:43:f8:8a:ae:82:1c:2d:25:
2e:ae:73:92:57:e6:e2:44:e3:a6:bc:58:02:5b:02:7b:24:77:
35:d3:8c:d9:72:f7:20:4d:a3:71:76:21:4e:38:f8:18:94:61:
1f:c8:85:c3:df:47:2b:df:1c:75:4f:9a:d5:98:14:07:85:d5:
5b:3e:fd:96:22:97:08:4f:31:27:42:ad:e2:b5:56:0b:f5:30:
f6:6a:ea:84:c8:03:de:e2:af:43:eb:6f:eb:0e:8c:99:d0:d8:
d7:29:93:dc:bc:de:a8:f3:21:93:ef:0a:ac:d4:f4:01:84:47:
ec:7b:56:95:3f:f0:e5:22:34:70:ec:ee:3d:42:45:f4:18:f7:
e8:3a:1c:23:5e:66:c2:d7:4a:e8:c9:a8:b0:66:6e:21:9f:7d:
25:38:4a:b4:cf:f6:62:ed:e6:6e:e4:fd:b4:be:df:27:13:b6:
56:2b:91:a7:41:24:94:96:74:ec:92:d9:35:f5:36:c3:72:5a:
f6:91:d1:4e:10:cb:0e:e9:51:99:63:ed:3f:9f:3e:a4:59:2f:
4c:26:3c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:29 2025 by rpki-client