Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
File: YFvAEwOQWABiCsJsFGixQfgHRRQ.mft (raw, json)
Hash identifier: JsXKpWVPIi4AMy09thDezGq5QjTt6XSa5FsTiom9nbg=
Subject key identifier: 2C:E4:8B:1A:E9:66:C8:D5:34:43:34:9F:D9:11:FB:93:5C:DB:4B:64
Authority key identifier: 60:5B:C0:13:03:90:58:00:62:0A:C2:6C:14:68:B1:41:F8:07:45:14
Certificate issuer: /CN=605bc01303905800620ac26c1468b141f8074514
Certificate serial: 0194BC72B39A545CF3148ABDC9956EAE08AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
Manifest number: 0B00
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: 9c99e7OOCoSsqv05bamuZvrBRAg.roa (hash: gcQqAYS/2mIfyTda9lezITlbdeVA2P8mDvlHBkdo3p0=)
2: YFvAEwOQWABiCsJsFGixQfgHRRQ.crl (hash: V1quSwRYo6TLc+yr66GVCNhjF8x3aD5vn5BAPAVd1w8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b3:9a:54:5c:f3:14:8a:bd:c9:95:6e:ae:08:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605bc01303905800620ac26c1468b141f8074514
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=2ce48b1ae966c8d53443349fd911fb935cdb4b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:c2:72:5a:47:86:1c:ca:d5:13:06:04:e6:
5c:d7:7b:10:34:59:d9:66:b6:55:fe:1f:56:17:8c:
db:a7:fe:9f:e5:cb:40:ef:9e:ef:69:7f:b8:46:3d:
3b:4a:1a:29:7a:76:38:5d:6f:f9:ed:e4:3d:a6:4e:
a8:7c:fd:8d:a6:72:d2:45:a2:1d:77:4b:b7:6d:ac:
33:8b:22:99:1a:bd:27:ae:9a:9a:94:97:64:ef:ef:
af:a5:9a:ed:f9:52:72:e4:02:a8:c0:47:53:f0:d1:
27:17:01:f5:f7:a6:74:d1:34:0c:bd:8f:6e:ff:2f:
fc:a7:2f:27:00:ec:56:90:57:42:64:67:2d:ce:40:
1d:c4:26:62:ec:1b:00:40:12:62:5d:25:d5:87:01:
b2:75:62:45:e6:9f:dc:1d:b2:b5:10:4f:fc:e6:76:
ab:ee:60:0e:ea:18:78:15:c2:86:d6:93:68:dd:60:
b1:e2:3f:87:82:bc:cc:fe:e7:72:2b:c9:9a:c1:1f:
dd:8a:d1:d5:28:60:4c:e9:8c:7e:a3:df:1f:95:0c:
95:fb:81:c8:22:e5:7b:f7:30:b4:51:a4:53:93:dc:
d5:33:e3:b9:19:f6:4a:b3:b6:e4:01:7d:e2:05:b1:
60:2c:2d:29:8a:dd:45:5f:21:4c:83:61:a7:50:57:
19:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E4:8B:1A:E9:66:C8:D5:34:43:34:9F:D9:11:FB:93:5C:DB:4B:64
X509v3 Authority Key Identifier:
keyid:60:5B:C0:13:03:90:58:00:62:0A:C2:6C:14:68:B1:41:F8:07:45:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2d:1c:3f:02:41:98:c1:9b:3b:cf:6e:2b:d4:43:45:a0:29:
f1:67:6d:99:f7:fc:e3:9e:dc:ab:8d:27:30:37:5a:0e:e7:f8:
45:07:f4:92:a4:37:4a:16:6a:fa:37:f7:5e:89:d8:e7:8b:12:
23:55:ec:3a:e3:9a:d6:8e:d2:78:fc:1b:ba:cf:a9:58:94:a5:
31:e8:b4:ac:a5:57:3b:b8:e6:13:70:23:dc:c2:fa:67:92:d8:
9a:35:4f:c3:e4:62:43:7c:3f:6f:f7:be:63:1f:b8:37:a2:1f:
91:39:6d:3b:6a:c3:f5:e3:14:4f:74:13:a1:9f:91:58:2a:e5:
46:72:2c:6a:5d:4e:95:73:1a:65:45:d0:77:c3:e5:26:d2:40:
28:6d:68:82:9d:54:a9:3d:65:64:f4:d5:83:d3:5b:4b:8e:e0:
1c:3c:1e:a6:e5:43:f6:aa:a5:bf:a6:51:88:bd:fd:f9:e7:c0:
4e:79:b2:5e:d2:a7:a2:f4:d6:7d:65:12:0e:35:92:41:f6:30:
ee:0e:c2:ec:ac:1d:ab:48:a2:e9:24:ef:d3:b3:7f:9c:f2:57:
a3:48:d2:7e:d3:89:7a:a1:91:54:7f:c8:be:9f:94:c7:2b:36:
40:70:44:a9:cd:3e:1e:98:42:54:84:e8:54:55:5f:9e:6f:1a:
ba:9d:ee:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:29:50 2025 by rpki-client