Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
File: ysmhVQ09sawK6xHBbWPkimg7ygM.mft (raw, json)
Hash identifier: gMqBtFVjay8kcrgaWRHk8q29atMe1KETuEkkSCh6UPY=
Subject key identifier: 1A:7E:82:E9:39:26:88:1B:FC:90:40:4A:E2:59:48:BE:33:69:F6:1A
Authority key identifier: CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
Certificate issuer: /CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Certificate serial: 0194BC3BDE6C7DFBCEA3197747680DF61C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
Manifest number: 0183
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: Rui0sD0wI3PFIXuSgFCUVWy-M9k.roa (hash: hbv5XThLS6CFQJgStPKrJAlPn/du5JdwcgW0fJRsYnU=)
2: ysmhVQ09sawK6xHBbWPkimg7ygM.crl (hash: yCJH04amVlilFraDc5K97NVx7wA6iyuWPLwjkv9gkK8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:de:6c:7d:fb:ce:a3:19:77:47:68:0d:f6:1c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=1a7e82e93926881bfc90404ae25948be3369f61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:76:10:96:82:63:7b:69:93:99:25:a2:82:
e2:7a:6b:f0:15:b7:ea:1d:10:d1:15:7b:d9:d2:b2:
f6:8e:cf:c1:ba:87:84:ac:5b:60:61:6d:0a:e4:77:
8b:51:d9:e6:7f:87:9a:a5:45:18:4a:ac:34:54:ee:
9a:6e:df:2d:31:af:aa:14:a4:4e:cf:99:7c:7a:a2:
f8:eb:2b:35:ec:30:b7:c0:95:50:46:f8:ab:38:20:
a4:c2:98:2a:3b:7d:20:80:1e:9c:cc:db:f4:ed:bc:
dc:c3:db:0b:08:4c:cc:f3:85:a2:77:61:c2:66:a1:
d4:cd:87:af:2c:e1:dd:39:4e:0d:1a:1e:7a:8c:57:
5e:83:17:f0:a6:8e:4d:ac:fd:d2:60:f7:b2:2c:fe:
4a:3e:59:a4:6b:6d:29:b6:a5:54:64:29:16:08:5b:
de:1c:39:e5:14:2a:9f:86:93:95:c8:7d:80:d3:dc:
b7:8c:81:af:c5:8a:67:93:5d:ae:d0:ba:1b:70:e5:
cb:08:df:0e:22:af:f5:4c:f1:7a:ad:20:5d:56:39:
47:aa:9f:98:cd:f0:ea:37:b6:49:1a:02:45:fe:32:
e0:43:71:57:47:ea:11:e4:d4:0b:65:a8:0e:ec:9c:
78:14:0c:25:aa:59:e3:37:90:52:47:1f:33:89:0b:
3b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7E:82:E9:39:26:88:1B:FC:90:40:4A:E2:59:48:BE:33:69:F6:1A
X509v3 Authority Key Identifier:
keyid:CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:5a:ab:a8:c7:ff:f1:c1:36:79:35:79:b8:57:4f:4e:b2:8e:
b9:25:2b:a3:50:2a:3e:36:ed:a6:f1:50:e3:88:cc:8c:4e:37:
d0:06:fb:ec:aa:12:11:5a:69:70:36:af:15:78:56:d9:a1:a0:
43:62:a1:1c:df:3d:fd:41:53:05:de:03:00:bf:1e:5d:df:51:
01:b8:f2:dd:5b:57:5b:50:ad:7e:a7:3e:52:22:7e:07:71:8a:
ef:c4:86:c7:4f:19:f7:27:fa:e6:5c:1c:a3:08:4f:be:04:d7:
4b:25:92:62:a3:bc:47:1d:6d:b0:ed:36:59:2b:01:8d:79:9c:
52:e4:44:16:7a:60:df:98:3d:ca:b1:9a:b1:6e:94:9e:90:b0:
d1:dd:ed:df:3b:e4:99:4d:4e:72:8d:0d:7b:2e:53:4c:89:f1:
bc:3f:91:47:3d:ad:b5:ca:bd:bf:e0:6b:13:d2:f0:b5:b7:68:
f7:2d:00:93:8d:8c:56:df:b0:15:85:4b:90:65:54:e1:94:b8:
c2:22:e1:42:5f:eb:b4:fe:d4:7b:f7:88:c8:97:2d:c4:e2:49:
7a:3c:a7:e2:3e:1c:b5:2f:37:02:a2:29:10:1f:f8:9b:35:48:
2a:91:d8:53:f5:3c:86:85:f0:a7:c0:57:a3:cc:02:9b:c7:31:
61:a0:69:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:12 2025 by rpki-client