Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
File: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json)
Hash identifier: vemY8agjg5xTyt3vGWhWjZHIKW1xHFSKDmt4od14qV0=
Subject key identifier: F1:9C:12:24:2F:AB:F0:53:2C:DA:B1:1A:CD:97:B2:85:95:E0:57:C2
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial: 0194BD4E841BA7EBAB0D8E5995D1B47C15AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
Manifest number: 0E90
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: Je7r8p2i15SExZL77Clbe_3pLIU.roa (hash: q5RkBfa8EqGTkb+E8fZ8KT2+q7JMLCFvRnhSE6vnDeU=)
2: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: iUmxRxceTBhWsx5LDvnBHImk1rmTDhoCgn5CCH7CdvY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:84:1b:a7:eb:ab:0d:8e:59:95:d1:b4:7c:15:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=f19c12242fabf0532cdab11acd97b28595e057c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ea:d5:ab:19:e1:87:4b:b8:91:14:e6:2b:a4:
a1:6f:36:a2:26:e1:65:5a:3d:1c:e6:7c:d7:45:d6:
5b:a9:e0:b9:5c:dd:9b:78:da:ed:82:f7:85:33:ba:
86:cb:8c:6b:01:c6:cb:01:e1:7f:95:3d:70:79:d2:
e4:93:d1:b5:6a:b6:fb:29:a3:8f:d0:f6:73:9d:a8:
da:f4:0e:c2:40:f1:2f:d5:62:82:2e:a5:1f:5b:cc:
29:32:11:7c:30:3c:a3:23:6b:fa:e0:69:28:a9:b3:
8a:19:b8:8b:89:6a:37:5d:bd:60:46:fe:3b:35:92:
90:07:ec:38:91:55:58:84:b2:be:27:e8:af:83:10:
14:2c:5a:bc:8a:37:d2:ea:ae:c2:5b:d5:34:05:bc:
41:fe:ca:b3:5b:56:6a:a1:0d:b1:f4:f9:88:2c:52:
a4:4b:16:a2:71:37:1d:d5:fa:c8:0f:35:24:d2:8b:
37:59:0f:b9:fb:85:54:a6:08:d9:e1:0d:4c:f3:55:
75:ef:c2:4b:66:ea:43:03:b1:77:b8:d2:9f:e9:3f:
2c:03:05:12:5d:8f:7f:a9:d0:dc:1b:87:df:87:f6:
32:03:8b:81:23:04:f6:45:de:c6:ec:3d:66:2c:29:
c7:b0:80:2b:fe:81:c4:82:af:87:46:65:36:64:aa:
9c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9C:12:24:2F:AB:F0:53:2C:DA:B1:1A:CD:97:B2:85:95:E0:57:C2
X509v3 Authority Key Identifier:
keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7b:8c:c3:67:81:71:5c:9e:ee:1e:83:d8:1b:81:18:92:c3:
52:09:75:31:f5:ef:6d:20:95:e6:e3:aa:1c:2c:dd:f3:b2:fa:
8a:1c:96:a4:d8:0f:bb:a2:b4:95:b0:dc:8f:45:b7:13:10:e7:
c4:a5:74:e7:94:32:bd:b1:b6:af:dd:88:a0:64:26:4c:02:b3:
87:c5:03:ed:49:ba:c6:f8:e4:7b:29:af:86:77:47:06:dd:18:
31:74:21:25:41:01:58:f9:11:ee:aa:d6:7e:24:f4:d3:65:f5:
cb:d7:45:12:e1:b2:07:6d:e3:86:bc:21:77:7e:44:2f:ce:33:
80:c9:a4:5f:cc:38:a3:8c:fd:5b:4d:ed:bc:4a:88:17:dc:72:
d3:74:2f:a6:50:7f:5d:d6:74:3b:1f:4f:07:4c:af:90:c4:53:
ef:fb:4c:de:68:0f:c0:42:27:73:3f:a0:6b:23:c1:1e:f2:a3:
90:69:c0:8e:83:5d:6a:d6:20:e3:96:83:7d:3a:bd:09:33:0f:
f4:11:0a:99:d1:98:7f:71:d5:64:a4:88:5a:0c:c8:17:97:1f:
e7:0f:23:5d:5a:1e:f0:a9:60:5d:62:ff:b3:f4:5e:fb:90:b2:
c6:58:17:58:da:7e:a1:ca:98:56:a3:49:db:2e:95:dc:84:1a:
e3:f0:68:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:55:57 2025 by rpki-client