Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
File: yAkUktLOioDAh7h2-R1qPCm-eiU.mft (raw, json)
Hash identifier: Kd1AmYw3puf37K53A+PgrWuGIJQJTPs+WrLNVqlN8C0=
Subject key identifier: 32:A6:71:BD:79:54:2A:8F:A4:38:E9:44:68:6F:98:F8:47:5A:EC:92
Authority key identifier: C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
Certificate issuer: /CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Certificate serial: 0194BC3C3421A35196E13AE383F28BBCA70B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
Manifest number: 0A23
Signing time: Fri 31 Jan 2025 12:00:49 +0000
Manifest this update: Fri 31 Jan 2025 12:00:49 +0000
Manifest next update: Sat 01 Feb 2025 12:00:49 +0000
Files and hashes: 1: IUu38IEhp9FcGXHXO7VwuMNYV6E.roa (hash: 0chzG77l4zUiIxP7svJWJ4YTzi1qnItTODpt8dd9BKQ=)
2: yAkUktLOioDAh7h2-R1qPCm-eiU.crl (hash: 5DEikOK/2wU3XOzMf+61eZ5H4eLVerdvichnnv1vqxU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:34:21:a3:51:96:e1:3a:e3:83:f2:8b:bc:a7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Validity
Not Before: Jan 31 12:00:49 2025 GMT
Not After : Feb 1 12:00:49 2025 GMT
Subject: CN=32a671bd79542a8fa438e944686f98f8475aec92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:98:3f:80:10:3c:bf:13:a6:50:60:93:4f:a5:
56:c4:db:79:99:aa:c6:25:fb:13:b7:c4:66:94:72:
39:a6:9f:88:11:19:71:56:77:57:7c:76:f3:46:07:
27:d2:03:93:bf:a5:e2:ad:6b:7c:a8:60:16:23:ad:
ff:57:0b:27:49:43:0a:68:df:37:b4:58:59:4c:10:
b5:6b:89:2a:92:2c:be:3d:ce:92:2b:98:c3:08:b1:
c9:9b:32:29:ec:21:94:bd:b0:3d:14:97:dd:61:ce:
6d:80:0e:44:81:a7:8b:b0:5f:14:46:07:bd:60:c6:
db:4c:7c:7e:10:c6:1d:e7:d5:75:da:1b:d0:9e:32:
d2:c7:4a:6d:93:1c:9d:2b:8e:c9:04:29:34:37:44:
09:c9:25:a6:bb:5e:2a:4e:36:3e:82:b8:c2:7f:63:
39:39:2c:6c:cb:46:03:8d:fe:aa:3f:58:ad:dc:06:
9b:00:4a:1b:72:89:8d:47:40:0b:97:5f:ec:a3:ed:
3d:2d:34:a0:0a:09:85:61:7e:47:c0:26:b1:7f:03:
b3:a5:60:c4:af:6b:5e:95:49:e3:6e:be:d7:ae:25:
6d:12:e2:52:1f:49:67:ab:45:17:24:e0:1e:9e:14:
4e:30:8f:75:ce:71:55:0f:de:6d:f4:6b:05:3e:94:
71:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A6:71:BD:79:54:2A:8F:A4:38:E9:44:68:6F:98:F8:47:5A:EC:92
X509v3 Authority Key Identifier:
keyid:C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d3:a4:a3:a7:db:6d:f9:45:01:a1:c3:99:d8:7e:7c:f1:94:
c4:66:0c:f1:fa:11:00:c2:c7:df:3c:0a:40:9f:ee:37:5e:6d:
07:00:95:4c:f2:31:06:46:bb:12:35:64:a6:1b:3e:f7:35:c3:
b3:d5:1c:0b:5a:15:22:55:5f:86:08:cc:18:fb:2a:85:c9:60:
c7:25:ad:a4:af:e2:29:51:cc:f6:de:2e:44:50:aa:3d:72:b2:
34:39:2d:43:3e:be:d3:fd:7a:02:c0:2b:5b:25:ab:df:24:2a:
16:59:f0:3a:ad:66:76:6f:15:24:bf:55:8d:64:a5:e3:1c:82:
89:83:03:55:73:54:35:3d:e7:34:f4:7b:78:2c:5f:35:65:a8:
c5:29:d6:de:de:75:6e:b0:a1:8b:a9:15:46:9e:66:06:79:77:
fe:16:d9:42:f9:65:e1:ed:1f:31:dc:85:2b:8c:5a:5e:b3:47:
05:21:66:8c:18:d8:57:36:09:25:33:37:7c:9c:fb:2d:21:c7:
0b:a2:27:11:7c:2e:5b:c8:4d:dd:f6:d1:26:88:98:0d:a7:30:
f9:e0:ab:c0:f6:d4:17:00:05:6d:d1:83:2e:7a:52:f9:72:b3:
c6:b4:ef:5d:49:fc:bc:69:95:08:1a:0a:a3:0d:ab:60:be:7b:
30:8b:25:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:33 2025 by rpki-client