Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft
File: Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft (raw, json)
Hash identifier: bSfHSJQjfF6uXHELo+/VPXYKdGcONhhF/Ewz9zPjCUQ=
Subject key identifier: 52:EE:43:AF:45:E7:8A:C8:17:F3:5A:65:13:D1:E6:87:78:C2:63:9E
Authority key identifier: 62:3D:8F:99:DF:A3:09:2D:1F:67:57:EF:AC:B4:9F:9E:00:E6:D4:B9
Certificate issuer: /CN=623d8f99dfa3092d1f6757efacb49f9e00e6d4b9
Certificate serial: 0194BBCE8792D05AE9F9154D22D83C94E42A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft
Manifest number: 0512
Signing time: Fri 31 Jan 2025 10:01:01 +0000
Manifest this update: Fri 31 Jan 2025 10:01:01 +0000
Manifest next update: Sat 01 Feb 2025 10:01:01 +0000
Files and hashes: 1: RwKWDh9I_VhT28gEF3k9tJ9hdSk.roa (hash: CWqw/aMDA6ZuqW+g16a2LFyjcXoDj/1ZGqdzZueDSNs=)
2: Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.crl (hash: hCgfYLHAn7P57+IXqDccBxeH7th5Uh/ak6vWjD3Igcg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:87:92:d0:5a:e9:f9:15:4d:22:d8:3c:94:e4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623d8f99dfa3092d1f6757efacb49f9e00e6d4b9
Validity
Not Before: Jan 31 10:01:01 2025 GMT
Not After : Feb 1 10:01:01 2025 GMT
Subject: CN=52ee43af45e78ac817f35a6513d1e68778c2639e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:76:f9:6f:47:d3:24:86:cc:41:85:c4:24:e0:
54:2e:9c:b1:9c:15:51:63:a2:48:72:d6:b9:d5:27:
66:36:7e:6e:ec:88:82:23:c3:e0:89:1d:93:b1:4e:
7c:6a:a2:d9:e9:3f:ed:d8:53:75:36:7d:d8:9d:b3:
68:14:96:f8:4c:9b:d9:51:22:d5:74:32:8f:13:68:
51:05:ed:ab:64:be:a4:c7:1a:52:ab:f1:45:77:67:
10:a8:ff:5b:3c:9b:ac:29:90:39:96:7b:6d:63:0b:
65:aa:26:75:09:0e:8c:c8:2b:fb:a9:23:8b:79:bd:
69:40:cb:e3:31:c8:fe:be:4d:8d:48:40:b0:21:24:
9c:80:63:24:2c:eb:25:c1:0a:81:0a:13:b6:b7:48:
07:43:4f:e1:f5:e8:fa:af:78:4d:92:85:98:b1:be:
e7:6e:a7:7e:e5:db:70:c8:82:97:43:70:81:72:f9:
10:85:cf:e6:61:13:7a:cf:d9:f3:98:5b:c7:cc:9d:
8a:e0:c7:3a:da:ea:23:48:cf:c8:7d:89:61:57:26:
1b:b0:88:b2:5f:68:2d:3a:6e:0a:f9:25:c5:85:49:
1c:84:87:2a:77:1c:19:52:89:07:40:d6:9e:cb:2a:
29:42:4d:84:57:11:70:68:eb:45:68:80:c3:dc:f4:
ac:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EE:43:AF:45:E7:8A:C8:17:F3:5A:65:13:D1:E6:87:78:C2:63:9E
X509v3 Authority Key Identifier:
keyid:62:3D:8F:99:DF:A3:09:2D:1F:67:57:EF:AC:B4:9F:9E:00:E6:D4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:97:fc:b1:10:9f:60:5a:4e:33:11:a9:6c:df:ef:e6:ea:01:
a8:d9:06:9a:68:b5:66:eb:c8:c7:6e:a0:c9:84:46:01:cf:ef:
e3:0e:38:c1:1a:52:bc:b2:98:7f:32:d1:c1:df:a2:62:a1:cb:
76:a5:f1:7e:48:ff:d1:52:7c:e5:ff:09:13:57:59:62:53:17:
3f:04:e6:e4:cc:66:65:72:23:20:37:a7:cf:67:6b:7a:31:13:
33:6e:cb:ed:60:e4:34:8d:a7:fc:2f:3a:03:2f:d2:a6:66:f5:
d8:90:b5:81:f4:8d:41:c5:22:49:ac:d5:20:7d:2e:24:12:76:
60:c5:96:4e:3a:31:b7:4b:1c:46:ed:49:7b:ee:f9:56:38:84:
c5:e7:51:75:f3:71:41:2e:c7:c6:22:43:1b:5b:4d:47:be:55:
32:f9:a0:b3:a0:00:cd:d4:97:96:39:15:4e:49:ed:7a:66:84:
07:9c:5a:85:fa:06:8e:0b:8e:fc:57:14:b0:72:51:aa:d2:cf:
f3:f6:ce:08:13:4a:84:69:0c:70:3d:72:1e:5c:bc:37:28:88:
d7:3b:69:04:00:ed:93:ba:5d:c9:ae:c4:96:f5:57:e7:83:9a:
67:33:52:99:13:7b:2e:5c:b5:21:f6:26:70:d0:6a:14:a7:88:
b6:3c:ca:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:23 2025 by rpki-client