Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
File: yQs5SsYzN2B_obsOq6EUU6gx85g.mft (raw, json)
Hash identifier: ZdyPyqRaqe4wwiMcmo+8FxSPTzgfy7im2wx0gEZ+2OE=
Subject key identifier: 6A:4A:1B:BF:15:3B:D5:90:15:76:11:51:6D:E5:3E:7B:DD:43:15:D5
Authority key identifier: C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98
Certificate issuer: /CN=c90b394ac63337607fa1bb0eaba11453a831f398
Certificate serial: 0194BCA9C128F4CE016651FBF75A38707785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
Manifest number: 0AC0
Signing time: Fri 31 Jan 2025 14:00:28 +0000
Manifest this update: Fri 31 Jan 2025 14:00:28 +0000
Manifest next update: Sat 01 Feb 2025 14:00:28 +0000
Files and hashes: 1: 3DeOifSeLxMUCM20VxHQS5cXQE4.roa (hash: 783WmkyHs/Bvag8AxFOjFyrEJCCbAmS83HXavAaPMKY=)
2: yQs5SsYzN2B_obsOq6EUU6gx85g.crl (hash: 9W8SGRyTi1IEZ1og9opms5J1s6Oey+z1eFqJjimD1pg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c1:28:f4:ce:01:66:51:fb:f7:5a:38:70:77:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c90b394ac63337607fa1bb0eaba11453a831f398
Validity
Not Before: Jan 31 14:00:28 2025 GMT
Not After : Feb 1 14:00:28 2025 GMT
Subject: CN=6a4a1bbf153bd590157611516de53e7bdd4315d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a0:c8:cb:e2:75:58:93:4f:58:8d:2e:d6:1b:
61:a0:ad:e6:71:77:5c:51:3a:04:3e:b0:a6:d0:7e:
bc:70:70:0c:ec:8b:28:8a:8f:8b:9a:56:ba:8a:e9:
29:58:b4:a8:c2:75:ca:03:e0:9e:31:44:79:06:dd:
ab:74:75:b9:78:17:0c:7e:ce:09:35:0b:ac:6a:02:
62:1e:b3:0e:55:d5:5d:17:29:91:5e:d4:e2:66:26:
3e:2d:6b:63:17:53:80:0b:69:3c:00:01:2d:6f:bc:
7c:8d:ad:1b:bb:d4:2a:92:b7:3c:78:8e:33:e6:34:
d7:8e:2d:1e:e7:b4:38:dc:12:09:aa:7b:a0:f4:93:
22:22:86:b2:79:72:fd:f4:a3:b7:c2:40:27:8c:2f:
ea:bb:63:70:0b:bb:1b:b9:f8:4c:95:8c:26:a5:b1:
d1:3f:26:c1:ed:64:ea:a3:6a:bd:d0:ac:b1:25:91:
e4:43:4e:61:82:6e:6a:96:ed:84:51:f0:f4:ef:00:
05:c0:21:20:19:ad:fa:df:15:93:d4:3e:b8:57:e3:
f8:8d:04:f3:4d:8b:d7:9f:a4:69:6e:97:9c:6d:a5:
1c:cc:f2:1d:12:d9:8c:e7:92:c0:5b:5e:8f:99:c9:
4c:e7:e1:15:59:c5:aa:97:f3:22:1f:2b:dd:71:fd:
de:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4A:1B:BF:15:3B:D5:90:15:76:11:51:6D:E5:3E:7B:DD:43:15:D5
X509v3 Authority Key Identifier:
keyid:C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:68:3b:3b:fd:72:e2:46:a1:c4:7d:e7:ad:45:95:d2:c1:76:
fa:2e:6e:e1:cb:6a:5b:c1:df:d8:a7:e6:95:0f:6f:7c:ad:76:
fe:08:70:f2:2f:98:91:71:72:77:65:48:c5:fe:76:71:c7:d6:
fa:70:62:62:b9:70:ec:53:e1:4d:9d:c1:e4:97:44:d5:74:a6:
76:21:9f:06:fb:31:72:3c:85:7a:f5:34:fa:eb:b4:e4:e6:56:
fc:1f:4e:70:f7:ab:02:cf:f4:6f:63:b6:e4:bf:bd:0c:95:0a:
22:54:48:ea:61:67:2a:98:06:a1:57:d8:de:1d:8a:0f:38:2f:
65:79:c6:2d:07:a2:be:15:fd:f3:11:0f:a0:47:8e:9a:b3:ec:
15:cb:2c:d1:52:fa:e7:bf:66:f3:48:e7:29:53:83:14:b9:98:
21:81:53:df:b0:a0:19:cf:c5:6f:ad:46:be:ba:a9:43:3d:b7:
23:d6:45:d3:db:93:d8:15:1b:92:9c:9f:22:32:a4:29:ff:f0:
fb:92:4a:a6:4b:42:a8:1b:9d:55:41:e3:08:56:26:9c:f8:c3:
65:86:15:ed:6a:8b:dc:b7:88:7c:59:fa:dc:f4:13:f9:bc:8c:
60:01:c8:4c:73:d5:0a:7e:26:ae:13:dc:46:b7:71:23:da:63:
64:b5:2a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:03:18 2025 by rpki-client