Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
File: P1YjHn71MYG2MCYPVzmpOZgLzg8.mft (raw, json)
Hash identifier: KmpvSe7ZM9NUtSL54unJwgyE5znf4knMWslKh3ibv8M=
Subject key identifier: AF:DF:C2:71:8B:11:96:EE:3E:66:CF:AD:15:D8:03:52:CE:75:C1:6F
Authority key identifier: 3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
Certificate issuer: /CN=3f56231e7ef53181b630260f5739a939980bce0f
Certificate serial: 0194BC72F05987BFA31D6310A06BB3AD13FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
Manifest number: 0471
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: N7wTPY9fMxEW9bxsO96kZUV-srk.roa (hash: uJjDkbG36UQdfaC7DvT1mlqCZKSOCWSqMQESz+y4GRo=)
2: P1YjHn71MYG2MCYPVzmpOZgLzg8.crl (hash: NO60Pck3WPJVyHmNTnoBb/7UAquPQFLRKc/EjvsZp+M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f0:59:87:bf:a3:1d:63:10:a0:6b:b3:ad:13:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f56231e7ef53181b630260f5739a939980bce0f
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=afdfc2718b1196ee3e66cfad15d80352ce75c16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e0:b1:3f:65:a3:dd:b6:01:d5:ee:b0:1e:d3:
79:ec:17:c5:10:e8:80:60:16:9b:f7:85:aa:a0:68:
5e:64:60:4a:c5:d9:82:36:cc:a8:62:aa:0f:07:af:
4a:d2:4b:16:61:38:bc:0d:2f:54:f6:7a:88:3e:88:
8a:0e:13:a7:17:fb:76:90:f5:fc:ea:9a:fc:07:82:
b6:5a:5a:29:f3:b4:9c:16:08:a4:11:71:05:00:59:
a6:6b:cf:55:47:85:c7:1e:f1:da:5d:79:18:0f:93:
5c:b3:d5:c7:15:02:f1:da:17:5f:c6:d5:e9:9d:24:
3d:be:8a:84:64:c0:d1:86:aa:70:0a:c5:b6:f3:73:
f3:82:3e:81:7d:19:fc:cd:66:d5:88:04:e2:0d:38:
9a:6b:64:4c:c3:52:23:a9:b4:d9:99:df:ad:f5:50:
76:e9:0e:70:93:d8:8b:a3:9a:e0:c4:35:f5:e7:ab:
6d:f7:12:d8:ca:86:3e:03:a6:70:de:2a:e3:36:33:
2b:01:4f:0a:bd:3d:4b:d8:13:50:7e:c9:16:f4:1e:
bc:f2:54:02:21:c4:a9:2f:53:1a:84:39:90:e7:e2:
1a:49:5f:a5:52:2e:4a:ff:e3:c6:85:67:4d:f2:87:
a2:a7:1c:f2:7b:bb:6a:9e:3b:04:ef:d0:bb:bc:88:
95:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DF:C2:71:8B:11:96:EE:3E:66:CF:AD:15:D8:03:52:CE:75:C1:6F
X509v3 Authority Key Identifier:
keyid:3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7b:e6:7c:5f:69:6a:eb:9f:c0:13:2b:8e:c0:96:6b:3c:14:
a7:3b:47:85:9b:15:da:20:bc:db:ae:44:b7:6f:98:50:bb:b7:
1b:b0:29:49:e6:0f:bc:95:fe:dd:63:16:d0:ce:0f:58:8b:90:
7d:d1:ac:35:20:f8:6f:65:89:a2:77:05:35:e8:1e:69:8b:b2:
99:30:1f:bb:79:ac:8b:d4:16:0f:db:16:78:62:f2:d1:65:14:
2a:ad:60:9e:44:7f:f1:56:9b:0f:7d:4a:16:2c:d2:ff:dc:85:
da:ec:a0:e3:46:4f:9e:3a:93:f5:7a:a2:44:57:41:a1:c7:fd:
12:50:8e:c9:01:2a:87:24:73:b9:a4:76:2c:8b:eb:91:41:77:
23:72:d7:04:fa:fc:9c:c0:1b:6d:56:e4:e9:30:a6:88:06:75:
bb:5c:a7:e3:e5:0e:53:d9:e5:fc:af:40:a4:63:dc:35:36:b0:
ba:11:59:d9:70:a2:74:ec:aa:51:3f:33:8c:ad:3b:13:60:b8:
ac:7e:e7:6d:64:3e:12:1f:2c:3d:95:a9:c3:ed:b3:f3:7f:3a:
29:40:41:10:95:05:28:39:19:89:e8:88:fe:b7:b6:68:21:a5:
f6:6e:60:2e:a7:2a:45:a4:78:52:4b:11:70:5d:8b:8a:12:cd:
49:bf:f7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:21 2025 by rpki-client