Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
File: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft (raw, json)
Hash identifier: QultZPR67V/VGKSc5eUaAElmGUkVIVGExMuEiS8bG/g=
Subject key identifier: 83:AA:E8:74:3A:57:FA:80:09:8E:31:72:8F:4F:11:AF:B1:F4:D6:92
Authority key identifier: 63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
Certificate issuer: /CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Certificate serial: 0194BC72F52133B8B4B01FB6315B2BC8696B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
Manifest number: 0A3E
Signing time: Fri 31 Jan 2025 13:00:37 +0000
Manifest this update: Fri 31 Jan 2025 13:00:37 +0000
Manifest next update: Sat 01 Feb 2025 13:00:37 +0000
Files and hashes: 1: 1-LgPF9BCjhZNWWw9hElab0Lv-UQ.roa (hash: ruSOhXJd1v3gKBskv3cjew+PBFyYM840a6Wjo+pKuTw=)
2: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl (hash: UXotrTOq9dQWH8Ytd/PPtpAmKjms7hGgiusB/++bGO0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f5:21:33:b8:b4:b0:1f:b6:31:5b:2b:c8:69:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Validity
Not Before: Jan 31 13:00:37 2025 GMT
Not After : Feb 1 13:00:37 2025 GMT
Subject: CN=83aae8743a57fa80098e31728f4f11afb1f4d692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:14:df:dd:e0:fe:0d:98:73:53:f1:d5:0e:f7:
93:d9:55:a3:c0:f1:c0:03:69:c9:00:14:ad:24:d6:
1d:f9:fa:54:f2:49:09:e8:90:f0:25:be:f9:b2:7b:
50:c2:fa:68:42:b7:f9:15:c3:e9:86:b4:8f:03:11:
6d:4f:d6:8e:a8:3e:b1:38:40:79:65:93:6e:30:88:
28:d7:81:a8:b3:e7:d4:9b:2f:ed:7c:a0:93:a0:8c:
c3:cd:60:9f:d6:ca:79:91:2a:46:7c:c0:55:7c:5b:
86:89:96:8b:bd:bb:03:46:68:b2:f4:1e:a1:9a:3a:
78:99:c6:ff:4f:2a:3a:64:cb:bc:3e:f7:55:46:bd:
34:64:77:ea:3c:74:1a:65:f6:48:66:72:a6:29:23:
4b:ac:62:e0:a5:f8:a5:35:f6:a7:13:69:3d:e6:be:
c5:d4:f4:80:56:9a:e8:83:b3:0b:c0:27:04:c5:8d:
95:b4:70:26:f1:20:7b:c5:89:6d:fb:09:9e:4c:51:
84:a6:f9:30:07:04:9c:be:fe:ec:ca:ab:56:55:0f:
50:be:50:b7:0c:4d:b6:3f:25:54:40:1e:2d:da:d1:
0d:40:0f:52:b1:e8:be:ab:02:15:4d:c6:94:14:27:
c7:7c:7c:9c:db:da:11:db:ea:f0:4e:09:07:ab:2c:
bb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AA:E8:74:3A:57:FA:80:09:8E:31:72:8F:4F:11:AF:B1:F4:D6:92
X509v3 Authority Key Identifier:
keyid:63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:07:d4:5f:28:23:80:3c:2d:3e:30:32:5e:7a:fb:17:0a:c8:
ab:0f:1c:07:5e:23:f3:44:85:83:a9:1f:84:8c:0b:a2:37:14:
1d:2f:20:a0:a6:3a:d4:53:b0:e7:b6:15:54:f6:71:38:80:8a:
aa:51:b3:60:e2:02:a0:03:77:08:20:4e:2c:db:ec:d6:8d:44:
ff:35:77:f9:ca:27:d2:61:e9:80:da:75:86:ed:36:45:bc:ba:
80:30:80:cc:37:1f:46:77:25:96:2c:be:1b:79:b5:c3:24:d5:
89:a7:d5:91:ea:3f:bb:b0:1b:c8:6a:4a:76:5d:63:eb:3b:fe:
b9:14:81:83:df:f6:e3:12:4d:59:8f:68:ce:57:6c:27:fb:83:
63:b1:7c:82:8f:8d:e9:9f:00:40:a3:75:d5:13:ed:05:f4:0e:
f5:7d:ac:87:96:c6:bb:99:49:04:37:cc:d3:6e:43:fd:0f:77:
0f:91:7b:b0:ec:6e:d0:af:70:cd:3e:ce:22:f6:23:da:cb:ea:
07:63:77:b7:d0:bc:e7:88:b6:db:d3:96:48:1e:0c:5e:f6:08:
4c:38:b2:5a:2c:5d:f0:0f:06:e7:b9:42:4b:a3:47:42:81:08:
c7:05:c1:d7:ee:5b:39:c4:36:5c:8b:95:d3:ea:5a:c3:5b:ce:
c9:af:55:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:33 2025 by rpki-client