Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
File: yAA8l5YD986hKsoB68IFfDb9fzA.mft (raw, json)
Hash identifier: m1PyoMjtY1W2LiSZ27zG14kcUbXAnrMsuQkKeFLN6co=
Subject key identifier: B9:76:68:5E:C0:E4:9E:4A:24:9D:7A:AC:2B:92:99:D4:65:04:70:13
Authority key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
Certificate issuer: /CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Certificate serial: 0194BBCE6EEA1B6BFAB5AC240DF697F65FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
Manifest number: 094B
Signing time: Fri 31 Jan 2025 10:00:55 +0000
Manifest this update: Fri 31 Jan 2025 10:00:55 +0000
Manifest next update: Sat 01 Feb 2025 10:00:55 +0000
Files and hashes: 1: 1-xE0-vSES3q7X24C7bA8kScsYVE.roa (hash: AMR+YDswQHGejlMnTq+0urVDztOvK2YpsO5lA8H1zXk=)
2: BHRefR2VcU9Cwhnc_jkStzqaKRk.roa (hash: ZrbTFGtHCrlkSMciC2wWa2wqdIxNJiFYUjns0T4P09g=)
3: KwFiVQgCHTlXMY_TYL_laU7APsg.roa (hash: qfYaVhKwplFB9wdvFF2eG+ZvwUUFbi4aeim7C9EVTCM=)
4: yAA8l5YD986hKsoB68IFfDb9fzA.crl (hash: eV2AaYk3qQ3iXhTGw7EzVJH5FRi9lXivJvuFxFaA8Lw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6e:ea:1b:6b:fa:b5:ac:24:0d:f6:97:f6:5f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Validity
Not Before: Jan 31 10:00:55 2025 GMT
Not After : Feb 1 10:00:55 2025 GMT
Subject: CN=b976685ec0e49e4a249d7aac2b9299d465047013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:7c:5b:6d:48:b9:e9:2d:b5:17:fa:e1:46:
d3:06:9c:18:84:e6:25:b3:d6:ac:57:2e:18:9c:aa:
d3:a5:60:41:ab:d1:5d:5a:b0:8b:80:c7:12:23:83:
25:04:12:3e:09:d5:19:df:21:1d:d3:ee:22:95:35:
e3:de:51:ff:a0:a4:1e:15:9c:17:ac:7d:e2:99:0a:
e8:d7:94:41:91:34:fe:f9:59:c5:62:69:3b:ee:0d:
f7:b9:7d:07:ef:7d:40:d0:aa:27:55:8d:f9:66:22:
e5:19:fc:6a:d4:3d:94:6f:aa:aa:04:ee:6e:d6:7a:
97:2c:20:a4:ab:bf:e8:84:b7:af:39:fe:5d:9b:0c:
61:16:27:91:af:8c:6b:24:c3:e7:52:c5:2f:58:27:
66:52:34:a3:5a:56:1d:aa:5d:f5:81:0e:b8:ba:ab:
1b:0e:bb:e1:d4:8a:09:cb:5c:cf:22:2d:28:63:a4:
e5:75:75:0b:26:f9:9d:06:3b:7d:a9:57:1d:76:15:
ed:f4:67:1e:a4:a7:01:5e:b5:60:b5:b2:d6:55:41:
3e:4c:30:c6:9b:99:93:e8:73:1b:ac:b6:8c:28:45:
f5:8a:c3:11:2c:b6:b1:6e:83:d9:b8:da:c2:b5:8d:
8e:bd:79:bb:3f:a7:a2:34:84:a0:9f:f7:70:e9:53:
a1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:76:68:5E:C0:E4:9E:4A:24:9D:7A:AC:2B:92:99:D4:65:04:70:13
X509v3 Authority Key Identifier:
keyid:C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e0:f1:6e:f6:ea:ab:bd:1a:5a:15:ec:29:37:9d:51:b0:7c:
0f:b1:31:d8:5f:f1:37:14:15:0d:45:1f:b5:2b:c9:f0:27:11:
3e:aa:3f:ce:b0:06:1e:c6:1c:c1:b8:d4:d6:50:e8:7a:e1:dd:
fb:b2:6b:d9:f9:33:89:21:5a:bf:01:07:f7:44:09:a9:24:2a:
f7:f2:36:c4:e0:d3:e0:3b:f4:b5:ef:a0:08:7e:10:d6:51:76:
b0:b4:4d:28:89:7d:ba:7a:73:8d:e5:7b:d4:17:1f:aa:d0:f2:
75:7c:c1:3f:e9:8e:41:00:cc:0a:d0:85:9f:79:52:6a:cf:10:
7e:51:b4:2a:e7:87:01:45:55:6a:7f:1d:16:c3:93:b6:94:ff:
bf:0f:08:30:18:3f:93:2e:c0:a4:5a:e1:25:c7:06:06:e8:80:
31:11:32:46:4b:9e:f2:63:7a:19:76:7f:c7:bf:f1:5b:21:3c:
9a:58:48:3f:d9:5b:df:d9:6b:58:c4:52:52:0f:aa:01:09:36:
65:01:43:9f:a2:1a:27:e0:29:7f:11:15:f0:2b:5a:6c:29:5e:
c3:86:bc:6d:0f:1b:3e:31:79:f0:86:78:01:a1:2e:06:c2:77:
0b:06:11:78:a6:f5:b4:43:8a:a9:61:f5:f0:f2:cb:ba:ba:09:
3b:0f:da:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:30:20 2025 by rpki-client