Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
File: ygAblIWVvOJJE_gRr_cePM5F1lY.mft (raw, json)
Hash identifier: b42qo0EGIa048CIP8WZtJaAo9EymqVMlF6a7ehXWdLM=
Subject key identifier: AA:1A:A0:A6:97:30:6D:F4:78:25:45:93:EB:14:8C:3F:A1:2F:63:0B
Authority key identifier: CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
Certificate issuer: /CN=ca001b948595bce24913f811aff71e3cce45d656
Certificate serial: 0194BBCE2A517F877C5EB4088C8E8734AB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: ygAblIWVvOJJE_gRr_cePM5F1lY.crl (hash: ymBqhOB1tCA3+ZWKkNjW13KPI9fGA0gcEaztHqJ0YTA=)
2: zr3t3IA44QoorxZIsw1MTeuie_g.roa (hash: ompX8t7N2TkHWnLirBbMhvCUBmfybfJcK/n6fwWr0hs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2a:51:7f:87:7c:5e:b4:08:8c:8e:87:34:ab:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca001b948595bce24913f811aff71e3cce45d656
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=aa1aa0a697306df478254593eb148c3fa12f630b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:8d:e8:ae:b8:6d:db:e3:ca:3a:3e:7d:fe:
54:35:cd:81:4f:5c:37:47:ed:ea:50:bd:06:f3:ee:
5c:80:c6:20:db:01:2e:d7:cc:a5:80:6b:6f:99:fc:
1f:c7:52:3c:6f:80:b9:4f:6c:9e:83:50:ed:71:19:
1a:66:a1:7a:b0:0c:3c:34:e4:12:c2:24:c7:02:89:
09:ed:90:22:c8:cd:fc:df:16:cb:04:98:5e:88:af:
61:6d:ce:89:e5:cd:59:e7:fd:7d:48:60:92:73:a7:
e8:75:91:80:81:71:da:2d:77:26:cb:1b:0c:de:93:
94:97:e3:61:98:93:6b:2c:25:68:7d:7c:8f:1c:e2:
ab:35:cf:46:05:ea:20:e6:47:46:02:ca:c2:6b:1d:
35:db:70:a0:77:95:d2:74:71:1a:48:a3:ec:37:9b:
43:e1:f2:67:38:bc:43:5a:df:db:d1:c3:43:2e:32:
ca:1c:b1:9c:93:11:8b:45:b2:9f:dc:c4:05:8a:a5:
db:0e:bf:54:6d:ed:7f:25:f9:28:09:ab:74:cf:96:
dc:05:ae:11:58:46:1d:71:51:e8:80:60:7f:19:40:
dc:64:2f:8c:7f:47:fb:8b:b6:0d:e9:0a:20:da:2c:
b7:c2:ef:a8:0a:67:a5:f4:d4:86:f1:c7:f1:bf:05:
0e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1A:A0:A6:97:30:6D:F4:78:25:45:93:EB:14:8C:3F:A1:2F:63:0B
X509v3 Authority Key Identifier:
keyid:CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:09:cf:f6:b5:0f:03:30:6f:ce:0a:10:ed:bf:89:2c:c3:88:
4f:32:1e:40:a1:eb:e7:7f:67:e6:df:65:b4:6e:af:ce:f1:5a:
d1:b7:ca:34:ae:0d:31:27:b1:3b:a8:dd:a4:ad:02:72:02:df:
bf:f3:38:d1:98:01:9b:52:52:40:f4:ca:74:5d:bb:a3:3f:ee:
62:fc:17:b9:2d:cf:20:00:f0:be:a5:96:3a:7f:89:59:49:f1:
1e:a6:85:00:55:03:a3:64:5d:0b:86:e7:06:17:4b:28:6a:fb:
32:c7:ed:c5:2d:ec:1a:b3:1e:9c:0f:6a:4f:7a:95:28:18:e6:
bc:6e:fe:fe:0f:cc:29:c6:eb:f8:e0:70:f4:5b:c6:c0:e6:fc:
0a:23:be:49:93:9a:ef:e1:6b:37:38:6e:75:b6:fb:01:1b:07:
57:6d:e7:e1:df:44:be:7b:20:0d:9e:6a:00:ab:49:ea:82:45:
87:f7:a4:27:f7:c9:08:cd:3a:a2:86:a9:70:66:df:1d:f8:6e:
2a:5f:cb:df:9b:64:53:0d:91:b4:f4:79:fa:ff:9f:29:51:4d:
9d:a0:15:53:50:ff:a5:30:9b:b0:69:a3:7e:17:ee:a5:95:b0:
bd:9e:af:38:81:42:a9:5c:29:6b:64:1b:2a:c9:13:dd:2b:fc:
d9:55:5c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:22 2025 by rpki-client