Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
File: 1YghK_XazhCA3EXixVuS_4XGwZI.mft (raw, json)
Hash identifier: xYCP/a/OHysCYypwzQ0f+q5vMTEoTv4bacI6FJOvoto=
Subject key identifier: 29:39:2C:F9:57:47:12:E1:8C:49:BD:2D:F7:16:02:13:1A:FE:E3:11
Authority key identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
Certificate issuer: /CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Certificate serial: 0194BCA98B253883D9AE1D3F64682F7FA2B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
Manifest number: 2F
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: 1YghK_XazhCA3EXixVuS_4XGwZI.crl (hash: IvLWEuzKS0NVkcR0jgmEbajhGbk2Q/pichbqeI6Ll5g=)
2: MFslxU9jklG_nlHqOQzlLoO-78s.roa (hash: ufgeo3WhjRd2JmkZkV7qDxvZtz1IkleRju1hy5drCk4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8b:25:38:83:d9:ae:1d:3f:64:68:2f:7f:a2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=29392cf9574712e18c49bd2df71602131afee311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:04:99:ef:82:40:6a:77:1e:f0:5a:29:44:9a:
d2:30:fe:46:f3:ef:03:63:56:95:13:55:9f:99:08:
c1:d9:1a:0f:0c:f9:73:19:8c:0b:3b:1f:90:cd:23:
81:9c:6e:10:4c:5a:20:36:77:10:41:b6:48:33:4a:
88:c6:7a:86:87:8c:11:ec:72:ee:02:7c:33:f0:69:
28:e1:0e:e8:31:89:93:21:97:49:75:7b:53:de:22:
ef:e2:1a:4d:8f:df:2b:50:b3:5e:ba:3a:ff:60:1e:
e9:1f:35:be:19:f1:e7:9c:d0:f7:44:35:a7:60:0f:
f0:a9:ec:3f:06:b8:4a:c5:45:49:5c:ba:85:83:05:
00:70:95:77:30:32:f6:77:78:f0:6e:79:b9:52:55:
19:98:1d:02:dc:89:82:03:8e:17:55:65:5d:3a:b3:
75:34:2d:ff:86:dc:c5:c0:c1:1c:11:35:f7:44:ab:
de:7d:63:7f:92:7e:a7:80:cd:88:ac:43:ff:e0:50:
39:49:70:50:6a:fa:b7:da:ae:49:5a:7d:67:e8:63:
58:b3:9a:cc:01:ba:5b:78:2d:eb:3d:26:1c:55:87:
df:e4:c6:f1:eb:31:fb:2c:80:04:7f:e4:60:80:c3:
a9:9b:17:ea:a0:1b:c5:67:a5:bc:84:dc:01:2e:4c:
24:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:39:2C:F9:57:47:12:E1:8C:49:BD:2D:F7:16:02:13:1A:FE:E3:11
X509v3 Authority Key Identifier:
keyid:D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:20:b6:82:eb:17:7a:db:5f:5f:37:e2:e8:a3:87:39:2a:a6:
d6:4f:68:ad:08:3e:da:6a:8a:ed:a6:29:27:b5:ab:4c:3a:a0:
ca:51:39:ba:93:e9:85:ff:fc:2e:e7:07:18:c5:0c:78:b0:31:
68:05:dc:fa:93:a8:e8:a4:fd:b9:8f:24:8d:be:31:c2:43:d1:
fa:e3:48:cc:72:5e:c6:54:b6:c5:c4:3b:23:b5:78:c9:dc:af:
62:ea:8b:1f:7e:b0:54:bf:4f:7a:6b:aa:d2:75:c2:5f:d0:f6:
0f:db:db:bb:04:08:d7:c9:d1:c4:b2:61:46:da:28:c8:07:df:
59:3d:32:d6:eb:1e:5d:de:55:d7:a4:c2:ef:61:8a:33:d2:2e:
b3:d8:0a:94:58:f5:9a:db:59:6e:54:a3:d0:9e:97:af:c6:25:
60:e1:66:bd:75:08:3e:bd:75:ed:c5:16:25:bb:e5:2f:3c:f3:
83:bb:92:4e:14:6d:3f:28:d0:7b:b6:91:aa:71:88:49:28:93:
3b:e3:fc:2d:72:db:ea:e5:a4:86:95:18:b7:55:3e:f2:39:c8:
83:03:cc:9f:56:ca:3c:f9:8f:46:5f:e9:d4:da:ca:02:22:5b:
d4:df:e4:4d:dd:a3:fd:b7:ad:10:cb:e7:27:78:aa:2a:f1:35:
ca:48:32:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:04:33 2025 by rpki-client