Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier: iC6Dr4Qqx26N5czLl3G+NfSvKp2lsqPqeuuNLkq1xJc=
Subject key identifier: 04:5D:62:DB:78:E1:4E:BA:39:10:35:22:AF:BC:07:96:07:D4:D1:99
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 0194BCA98F2789C87100DC32B61424C51DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number: 1356
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: MluEItNzhsZo0KlEkHW2gGjFsZA.roa (hash: hoWRhUtEL622AwT/94vc4oZQjrwHDprmF8UFYzmZ0qI=)
2: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: Q0WwrrDhvrXk4CM+qBKg+wdTMHrnooCzgrXzsekDHWk=)
3: qdzMsGh5S6wiS7QQa-GGYlBb1qM.roa (hash: 6/bZRBO2jbasIfkz3gmkcsaKY6ttqzhNRaTLSgH7xuI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8f:27:89:c8:71:00:dc:32:b6:14:24:c5:1d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=045d62db78e14eba39103522afbc079607d4d199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:75:d6:b3:c3:70:3f:17:9e:02:a8:dc:44:88:
ca:91:15:0d:5f:6f:bd:5f:43:bf:6b:fa:bd:98:df:
20:f9:be:51:67:99:f2:46:2a:0a:fa:25:95:38:14:
7c:ef:dc:04:2c:b2:d3:9d:fc:b5:8f:17:4d:1d:4e:
7a:d2:b4:1a:8d:f7:85:91:f3:0b:c5:a0:2f:93:68:
df:3e:ff:af:db:f9:da:81:6d:1b:f8:db:9f:27:2c:
30:bd:ef:2b:83:b6:85:b4:08:03:44:8f:2e:5b:89:
e8:44:22:ac:51:29:96:6e:a4:8e:01:4d:25:e6:2e:
9a:3d:9a:e5:2d:46:06:44:3b:c9:ca:d1:bc:5f:ee:
c6:e2:1b:07:09:24:22:98:e1:00:26:e7:a7:6a:0f:
0c:d1:1c:ec:f5:cd:41:3a:40:ea:08:e3:6c:ec:83:
9b:c9:e7:1a:9e:e2:e6:a6:da:4a:a6:89:56:db:bd:
48:08:50:3b:80:e2:58:7a:11:7f:28:0d:f5:7d:0b:
74:48:c6:1c:f9:59:98:49:0f:d6:47:fc:ce:d9:e4:
1e:df:e4:09:01:77:bc:28:65:2e:37:5f:d0:54:27:
bc:c8:c2:30:d7:f7:bc:57:c8:ca:0c:a8:f3:c7:82:
9c:a3:4f:26:bc:a5:33:a1:35:57:04:bd:72:a6:cb:
39:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5D:62:DB:78:E1:4E:BA:39:10:35:22:AF:BC:07:96:07:D4:D1:99
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:14:78:ea:e4:a1:da:39:66:27:04:f3:06:69:fd:5a:de:8c:
29:40:ea:03:d4:e1:6e:8f:b7:6f:6e:d8:28:af:f1:24:55:b3:
68:f7:96:b8:4a:14:42:bd:5d:1c:5f:7a:a9:3f:1b:8b:1a:23:
c2:66:59:21:c1:1e:ac:06:9d:34:ac:bb:2d:05:10:f3:c7:0c:
71:7f:84:af:a4:a0:ac:97:6a:38:75:54:7d:42:f4:f8:4e:a2:
51:9b:b9:e1:64:4e:08:14:8d:61:0d:0a:dd:80:2f:8c:85:90:
49:b2:86:b3:16:60:b1:da:6a:96:c8:79:49:1f:25:a1:40:3a:
3a:cd:6c:95:97:75:74:dc:fd:b4:25:fb:1b:48:87:5c:6b:a6:
fe:4f:3a:e5:4b:62:95:e6:09:be:fb:ce:e9:09:2b:5f:26:60:
19:fd:d1:6b:c9:f7:65:b2:2b:55:62:a0:23:da:dd:84:30:4e:
17:a4:3b:27:cd:ed:0f:65:5a:e4:24:65:85:2b:d4:79:a8:aa:
0b:ed:6f:93:89:83:8a:86:20:21:9b:9e:fd:0e:b8:12:2a:80:
7b:13:70:07:ff:6e:77:ec:15:f5:44:83:10:05:78:bc:42:af:
8d:fe:58:df:83:7c:40:fc:cd:74:f1:f6:f3:e4:d0:6a:74:e7:
75:cc:11:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:15 2025 by rpki-client