Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
File: yTsGP8Y-ihq6H0MLLQdNvicL45U.mft (raw, json)
Hash identifier: 2MbBn6nTV0tb0dm0Eh9+JDZVZDS3dIbmYpbdFpCju3E=
Subject key identifier: B6:BF:8B:25:3D:6D:23:5C:E6:C0:A0:10:8C:14:69:37:82:37:B0:2F
Authority key identifier: C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
Certificate issuer: /CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Certificate serial: 0194BCA9C585ABC8AA13F4BD7C985B2E0DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: 1F8onmseCNCuGUO4DR0wCF969LM.roa (hash: 5Q04Z/04ubuR0XnIvzjk6WhZzGAxE4KZkR5m6+NYcEk=)
2: yTsGP8Y-ihq6H0MLLQdNvicL45U.crl (hash: VtYHbgZYURD7DlmEOfBWwUdAT6RHqbzaYIfhLzYlSQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c5:85:ab:c8:aa:13:f4:bd:7c:98:5b:2e:0d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=b6bf8b253d6d235ce6c0a0108c1469378237b02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ab:cb:c7:2f:b2:e2:43:19:3c:2a:07:e8:c8:
0c:dd:5d:ed:d4:49:07:92:ef:7c:75:69:4a:fd:0b:
e8:d7:33:06:15:03:fe:d4:fd:a1:4e:8f:48:19:39:
76:32:ec:51:a3:eb:48:ba:c0:f7:08:db:2b:da:f1:
ab:a1:e9:5e:70:c5:c4:ba:c7:18:14:4c:47:a7:86:
e3:54:c9:a0:7d:30:70:62:f8:15:ca:3e:4a:1f:be:
4e:4c:4f:8d:08:a9:a2:d4:79:fc:2f:ce:2b:8c:86:
08:3a:45:44:b8:46:45:23:08:c9:19:f3:ec:14:69:
68:9d:60:6d:2c:86:06:98:9a:3a:73:ee:22:fc:45:
e1:a4:79:d1:48:0b:bc:42:0e:20:20:b3:82:90:89:
d9:4e:26:79:3e:27:3c:8d:54:d1:21:29:01:1a:5c:
e0:1a:77:6e:0e:53:65:4e:dc:3d:e6:9a:6d:f1:b1:
bd:e3:fc:e6:97:4a:0b:2f:d5:21:1f:46:51:1c:83:
30:57:85:ec:fb:5b:74:e5:9c:76:d3:d0:51:7f:c3:
68:29:2e:d9:85:31:e3:10:98:07:d6:a5:e7:ea:81:
b5:9b:a8:48:f4:a2:29:5c:0e:15:ca:a8:b2:1f:a0:
ba:b7:18:66:c1:56:5d:f7:9b:94:f8:53:35:e4:b6:
9b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BF:8B:25:3D:6D:23:5C:E6:C0:A0:10:8C:14:69:37:82:37:B0:2F
X509v3 Authority Key Identifier:
keyid:C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:24:50:2f:cd:58:6a:76:2e:ed:cc:5e:2e:62:43:63:dc:04:
2c:3c:56:73:ec:9e:23:f2:8b:7c:98:2a:66:ee:f4:ab:26:1b:
9d:f7:f0:38:38:09:7b:1a:da:be:83:cd:21:90:f1:ff:22:87:
e5:1f:fb:5c:d7:33:ff:68:6e:fe:e0:9d:9c:48:6c:28:b8:55:
d7:02:69:82:02:8d:05:eb:59:4d:54:40:ae:dc:66:cd:6c:16:
a4:c8:8a:81:40:d1:7f:ce:35:55:66:74:10:e1:d4:08:c3:d5:
c9:e1:e7:72:d1:b0:c5:c7:a0:c0:b4:39:75:72:89:eb:d0:14:
a9:6c:13:69:32:15:24:9b:d5:d5:61:6f:8f:2c:50:29:74:f8:
75:ff:00:5b:df:ab:53:d6:8d:01:85:a8:6d:40:14:2f:2b:4f:
e5:82:3c:60:c8:97:3e:19:f6:cc:a0:10:1a:c3:b8:06:76:fe:
71:71:0f:69:42:6d:1f:7a:1d:59:2b:1c:bd:54:ea:0e:b4:c0:
88:24:93:62:c9:06:1c:4f:46:e2:79:d5:5b:f5:5f:fc:03:c0:
2c:8f:1c:fe:a5:9d:28:19:ea:55:a9:5f:5f:e9:fe:90:c0:78:
c5:cd:24:5b:b7:26:69:de:4a:6a:3c:b5:d3:a9:65:51:02:7e:
bd:bb:08:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:13:57 2025 by rpki-client