Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
File: yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft (raw, json)
Hash identifier: MUC8wmIEezu+xFXBv02dpyUgZaTTVJF7U3D+Zr5PjlE=
Subject key identifier: 8E:DF:9C:A3:E8:60:51:14:2E:4F:08:DC:D2:79:74:F6:A6:54:8A:49
Authority key identifier: CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
Certificate issuer: /CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Certificate serial: 0194BC3C4ADC951481A9DDACE2D2189B37BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: GsgBqUerkRLRUcbs_Ls-LQF-79g.roa (hash: o+byKU/lMI3gKI/hl2xDgwzjDY3NcVCYFP3p/RabszM=)
2: ozhROBFdVytrD3TpvGqAgnW-fDw.roa (hash: 4VtjPfNgZjp68d8isA/cFQEHicpTsWLTQUKQfDvxm2Y=)
3: yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl (hash: 8KRequlj9j6PrBWhxo57OgqZG69JYLOH3pg9e6mWt8Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4a:dc:95:14:81:a9:dd:ac:e2:d2:18:9b:37:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=8edf9ca3e86051142e4f08dcd27974f6a6548a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:e0:57:cd:28:e0:d3:f8:af:03:6f:11:94:
57:3b:c0:ba:c8:e4:a7:eb:17:b0:cf:a3:c9:44:d8:
b6:e7:42:74:b1:ea:66:8b:cc:68:82:2b:56:2f:34:
62:52:87:18:45:ad:17:f0:76:4d:95:13:19:74:70:
f0:9b:1b:b0:c5:ed:77:8c:84:9e:e3:3d:dc:d7:f8:
1c:1f:69:1d:54:c3:a3:cd:3b:b2:8e:88:bf:9d:b0:
7d:82:12:7d:6b:de:c4:11:c0:3d:78:e1:98:e2:4a:
bb:97:d6:92:23:34:42:4a:84:3f:37:dd:86:11:ff:
6c:19:22:87:3c:c0:de:19:7c:53:69:2c:fd:17:b4:
91:fa:6e:68:c2:f1:4d:7b:65:85:38:48:78:98:17:
76:f7:38:6d:7d:53:00:46:3e:44:71:44:6a:1b:1b:
d9:8c:dc:31:f4:2b:aa:bf:c7:b6:42:74:97:24:d5:
0d:12:2b:02:7a:38:14:24:1b:9d:57:35:bd:73:bd:
88:6b:37:a5:8b:8c:a3:00:dc:c6:52:38:9a:76:92:
5e:6a:b1:5c:e4:59:65:5d:34:10:ca:34:32:a0:ce:
09:a6:d7:93:19:01:21:d2:d5:77:6a:da:3c:41:c9:
88:a6:7f:9a:b4:20:87:5c:cc:07:5c:b0:b0:66:79:
e9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DF:9C:A3:E8:60:51:14:2E:4F:08:DC:D2:79:74:F6:A6:54:8A:49
X509v3 Authority Key Identifier:
keyid:CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:95:a2:cf:da:e8:07:b4:6c:91:ef:ad:c1:e1:d7:39:3b:28:
ed:39:b0:7c:1e:17:e5:a0:cb:e4:3a:40:9d:da:72:04:f1:f6:
cd:a0:b4:84:74:b0:e9:a0:40:08:14:99:08:c3:ef:75:1c:0b:
4b:52:32:34:12:53:fc:a5:0d:fe:0f:22:2b:fa:90:b7:a9:48:
c0:01:b2:53:cd:f0:4a:16:d4:a9:9a:8e:cf:50:2c:4a:99:29:
7c:27:1a:8b:04:4b:67:34:90:8b:09:6e:ff:c9:eb:c5:86:01:
50:73:c7:09:74:fe:1b:99:58:f7:e0:f6:7e:7c:c4:15:b9:6a:
b8:f3:e6:e4:49:df:39:3e:78:e7:4a:5a:2a:b4:65:d7:07:f9:
57:05:29:ee:f7:e1:df:ad:f0:d4:d4:b2:4c:ba:cd:5a:a3:79:
54:55:0e:d8:95:27:80:5a:35:7b:1d:ec:c1:a1:9f:dc:75:f8:
32:a7:43:7f:4a:48:10:32:2a:a8:fb:65:f8:fa:cc:ad:26:4a:
00:91:1c:ae:0b:5a:79:e9:bb:2d:e7:fa:10:0f:7a:76:e7:35:
f3:95:61:fe:c1:16:f2:71:ad:05:ff:9b:5f:d8:5d:6f:d8:fc:
72:fa:cb:65:ca:59:44:7f:f6:ce:39:a2:f4:0a:6d:c9:1c:64:
1f:cc:0d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:55 2025 by rpki-client