Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
File: rYg6hugtDZEPz1n4_5978aZxSHA.mft (raw, json)
Hash identifier: C0QwpYacxLQLYfJh3phs/tGFI2gQFm+NKKduz1GGIgM=
Subject key identifier: BE:3E:14:9C:E0:6A:EE:89:02:AA:1C:FF:65:9F:A0:D1:E6:C9:D5:9C
Authority key identifier: AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
Certificate issuer: /CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Certificate serial: 0194BBCEC867284BCCE541241BD3B2B0064F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
Manifest number: 0679
Signing time: Fri 31 Jan 2025 10:01:18 +0000
Manifest this update: Fri 31 Jan 2025 10:01:18 +0000
Manifest next update: Sat 01 Feb 2025 10:01:18 +0000
Files and hashes: 1: od7ExObCxDqzHqRis0nMtXmus2Y.roa (hash: WoaJOBOnB6iTsR77zkPSuoVOWwQU/LjcUNKKgIIFfv0=)
2: rYg6hugtDZEPz1n4_5978aZxSHA.crl (hash: XIfWkb8EHBfG2AE2w9s2gso1zlVzgLRw92rCrI4xDno=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c8:67:28:4b:cc:e5:41:24:1b:d3:b2:b0:06:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Validity
Not Before: Jan 31 10:01:18 2025 GMT
Not After : Feb 1 10:01:18 2025 GMT
Subject: CN=be3e149ce06aee8902aa1cff659fa0d1e6c9d59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:71:82:48:86:90:df:1a:98:dc:2c:93:52:
ca:23:58:96:9a:be:8a:40:27:53:0e:fc:a4:ef:44:
d1:38:aa:99:85:57:1d:26:ae:e5:d4:60:0a:4c:fb:
de:e5:2b:31:1f:95:24:bb:31:03:aa:45:c5:a4:5f:
33:4d:66:ad:ff:c0:ee:5a:7c:20:13:1f:f5:74:17:
c8:be:f2:aa:99:62:12:c3:0c:32:14:5e:7f:5f:8b:
72:d7:40:70:c5:a0:ea:91:58:15:04:81:c2:e9:63:
88:77:e0:0e:d1:07:49:b9:d4:60:1c:8b:4f:fa:13:
be:5b:89:15:03:6b:33:74:44:37:22:e5:18:be:0b:
6c:0a:29:51:eb:2a:6a:18:fb:89:c8:00:57:8f:ed:
b5:2e:12:94:d4:3a:b6:86:7c:6c:10:a1:be:60:59:
a2:23:18:62:1c:87:56:bb:27:ef:c4:d5:46:4a:fa:
3c:b2:c7:5d:c0:12:1f:54:df:f8:58:10:64:90:95:
bf:22:d7:9a:cd:bf:9c:2a:2f:00:d2:4e:10:e3:27:
b9:8a:ad:44:8a:8c:10:c0:f7:53:49:f7:96:4c:69:
93:dc:fe:2f:a2:5b:6b:d5:02:1c:07:e6:8f:cc:2d:
8c:53:d8:9c:e0:75:90:79:32:0a:c6:18:b8:15:6e:
e2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3E:14:9C:E0:6A:EE:89:02:AA:1C:FF:65:9F:A0:D1:E6:C9:D5:9C
X509v3 Authority Key Identifier:
keyid:AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:95:67:16:db:0f:8b:5b:96:15:9f:72:98:cd:e2:16:73:2c:
ae:76:6e:af:07:c1:e9:5c:62:6e:c4:5b:b6:2d:d6:5f:36:bd:
4b:75:84:a6:21:2b:90:4c:24:56:5f:9d:10:48:1e:4b:6a:11:
f8:41:00:a3:ba:cc:ec:ac:3d:7b:53:a5:2b:6e:53:30:78:3b:
17:8d:82:a8:de:6f:06:07:3e:53:c8:ce:35:ed:3f:b6:ff:05:
87:0b:fb:ae:ca:40:23:f1:ae:14:c8:dd:f2:65:0e:18:cc:cc:
2f:f9:c2:5b:af:57:b7:ff:29:9e:fa:86:c4:88:d9:4c:1f:59:
f6:47:0e:5c:43:c9:44:a7:66:e2:90:1d:47:ff:21:c9:73:67:
4d:c3:75:63:e1:48:62:48:0e:5d:a6:68:44:80:74:2a:9d:92:
50:c4:5d:3a:d1:4d:bd:dc:83:46:98:0b:9c:5f:63:3f:94:7c:
98:87:64:8a:0f:a7:3a:13:fe:a4:07:7a:03:1b:90:9c:49:96:
34:7d:a5:24:9c:af:26:8a:3c:0b:f8:a9:5c:af:ef:54:ed:88:
3c:c4:81:8b:02:73:a2:0f:73:fb:5d:c1:37:e7:a2:27:de:7c:
84:d2:4d:97:dd:bd:60:d5:de:c2:48:1f:df:91:5a:3e:a0:59:
66:7b:c6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:53:48 2025 by rpki-client