Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
File: 04YKmzZYX7iqBR_Df8xqB3OZDL8.mft (raw, json)
Hash identifier: URLXumnbmugakG0kKbuI/Mvyy60Co4MGPF9s9KYxqEY=
Subject key identifier: 8D:49:32:04:67:23:12:26:C4:0E:AA:EF:47:B6:AC:D2:26:90:8E:12
Authority key identifier: D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
Certificate issuer: /CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Certificate serial: 0194BC3C8EA9355CD5650FA8850CD28E282E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
Manifest number: 1436
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: 04YKmzZYX7iqBR_Df8xqB3OZDL8.crl (hash: 6ck2rfeSlSQno4UAxdGlsXN4g30aqSg8j584NQBAUxA=)
2: 7tcRmUXU9Q3TzSU3E8XUeyrYniI.roa (hash: 3q07zOwK9FpR/xxKetT0w53QAdYnEKsI1+bhtbTPVBE=)
3: XK3m5m9D-x9fvYelJ012WnW2Xog.roa (hash: uj4ER+AdCmGKRZXl0/zG8YdqqGFuaXIIxndencWXdmE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8e:a9:35:5c:d5:65:0f:a8:85:0c:d2:8e:28:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=8d49320467231226c40eaaef47b6acd226908e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:80:cd:a9:6f:b9:c6:11:46:64:c9:ec:dd:68:
52:cc:61:b0:c3:3f:40:67:67:b4:fb:57:b0:e0:aa:
a5:4a:46:67:e3:e5:01:e0:a5:64:5d:6c:6d:1d:60:
7e:ef:46:93:0b:ad:a5:fc:e8:dc:b5:fd:04:5f:7e:
d3:74:c2:38:09:99:4a:5d:bc:66:a1:bf:c4:03:13:
41:63:70:25:d4:57:12:71:65:e8:cc:f2:18:87:88:
6c:0f:b3:e8:da:79:82:39:1d:78:42:fe:fa:e0:47:
52:63:92:6a:00:ac:21:a2:b9:4e:70:7e:10:a7:ec:
8c:ec:d7:08:fe:3c:df:fd:36:f0:95:e8:5c:a3:ea:
f3:ce:4a:75:56:d8:e7:92:f4:ae:0c:c7:a9:63:7a:
3d:1d:3b:ff:ea:0a:7c:58:10:76:19:bc:1f:b7:9d:
22:c3:01:d8:78:c3:db:5c:41:a5:e4:f2:8d:b4:30:
b8:c0:bd:b9:ea:f1:9c:45:7d:a4:43:0f:4a:d3:7f:
f9:4e:94:3a:88:ea:8f:0f:6a:c0:77:05:b5:03:3a:
9c:98:01:f0:39:ca:52:83:eb:16:41:e9:fa:3f:c8:
43:01:ff:4e:2e:d2:95:35:81:dc:af:ad:fb:c7:57:
bb:07:8f:a5:ab:d9:07:f4:10:38:4f:b0:9f:dc:24:
e0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:49:32:04:67:23:12:26:C4:0E:AA:EF:47:B6:AC:D2:26:90:8E:12
X509v3 Authority Key Identifier:
keyid:D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:86:22:d4:99:e6:9a:71:f6:a4:30:72:6c:f0:6b:1b:64:b9:
5d:07:63:3f:d3:98:ad:0f:bd:9f:ab:18:19:36:5d:1a:1c:f2:
f7:73:ea:34:ef:f1:52:90:fc:44:96:75:39:cb:cb:be:65:24:
96:97:1a:26:24:6b:f0:4c:96:18:17:80:73:60:7b:89:90:72:
52:a6:bb:75:bf:78:98:47:10:2c:0f:76:61:35:89:f9:31:61:
24:23:b7:34:e9:40:16:a5:cd:17:62:61:be:24:4e:38:06:7a:
e6:83:e1:df:7a:22:89:a8:2f:58:95:a6:70:ae:53:89:5a:89:
4b:77:68:79:a8:c9:82:ff:f2:67:65:e0:d1:ff:00:42:05:42:
8c:b3:c4:eb:65:9e:9c:60:77:ba:0d:fb:de:84:83:01:70:85:
f0:a5:5b:e7:91:b7:b4:3c:5c:1f:3c:57:5a:2f:af:d6:79:5c:
66:2f:54:be:a8:66:0e:86:56:5f:8c:b6:f6:f2:a2:d3:98:02:
75:2a:95:03:18:5b:77:ac:76:0a:ad:b1:fd:a3:a0:ad:b9:51:
c5:b6:0d:7a:2e:00:ea:18:87:8f:d1:5e:59:8f:13:0a:2f:4d:
80:22:cd:fe:3b:11:a1:8e:1e:4d:00:ee:37:96:54:f6:c0:41:
d2:06:9f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:33 2025 by rpki-client