Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
File: yIYjh23RrY5iSiPdUossZMgKhSE.mft (raw, json)
Hash identifier: 7NyTOLGYu9zLIe9nHxTPQwGirWw10ZoMU/lifopodls=
Subject key identifier: AC:6E:8D:E4:79:27:CE:FD:1F:5B:F6:59:1E:60:B2:09:A8:12:3B:75
Authority key identifier: C8:86:23:87:6D:D1:AD:8E:62:4A:23:DD:52:8B:2C:64:C8:0A:85:21
Certificate issuer: /CN=c88623876dd1ad8e624a23dd528b2c64c80a8521
Certificate serial: 0194BC3BF59A022482F5813E74F3A5F497F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yIYjh23RrY5iSiPdUossZMgKhSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
Manifest number: 034B
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: 6bGSQZyXICWLbBfHBORwDUVmEgs.roa (hash: 1jQZKU6KRpYxffMVHliAkA59/J/hUE4iGAwCvJDdSlw=)
2: yIYjh23RrY5iSiPdUossZMgKhSE.crl (hash: pu8YZfaROnmMs1mblG2JfADDndCF6zZddQFrNmfa4wE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f5:9a:02:24:82:f5:81:3e:74:f3:a5:f4:97:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c88623876dd1ad8e624a23dd528b2c64c80a8521
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=ac6e8de47927cefd1f5bf6591e60b209a8123b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c7:af:3d:0e:c7:e9:59:93:3d:32:15:4a:8e:
66:fe:26:49:a7:96:61:59:76:14:40:f8:37:6e:a0:
40:c4:c1:01:3c:79:7f:f1:f3:ab:57:ab:07:86:11:
ed:28:35:c1:bc:73:41:5b:9d:96:d2:b4:e8:53:58:
79:36:94:d4:4e:04:c6:e7:4f:47:4e:94:8e:d6:75:
18:0a:64:0f:0d:01:50:e5:5a:85:10:7e:0a:ba:62:
32:a6:e9:5b:c0:d9:d4:35:74:2e:63:12:c6:fa:10:
95:6d:80:41:3b:f8:f6:e9:42:72:d8:69:6c:9d:15:
4e:38:ce:d1:79:bc:f0:cd:66:04:23:1d:e6:30:31:
73:e6:7c:1d:8c:80:f7:cd:6e:f4:4c:74:d5:8e:c5:
32:1a:7b:60:62:af:fe:13:06:7d:e8:7e:ae:26:b6:
d8:5b:e2:c0:66:26:45:cf:35:d9:07:9f:cd:6c:96:
54:af:e3:a3:10:80:d7:54:29:ae:01:59:38:4e:23:
74:f5:c1:f3:71:bc:63:95:28:a0:da:c9:66:9b:44:
d9:03:dc:da:24:03:90:a8:b6:a7:2c:f4:84:ee:75:
72:ca:42:3f:fb:34:17:c3:4a:4c:81:5a:00:0a:d5:
95:b7:79:50:de:f1:70:98:77:77:c5:87:ce:00:65:
ff:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6E:8D:E4:79:27:CE:FD:1F:5B:F6:59:1E:60:B2:09:A8:12:3B:75
X509v3 Authority Key Identifier:
keyid:C8:86:23:87:6D:D1:AD:8E:62:4A:23:DD:52:8B:2C:64:C8:0A:85:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIYjh23RrY5iSiPdUossZMgKhSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b2:fd:1d:c2:39:a6:0e:1d:bd:14:60:26:7e:31:c5:72:8d:
a1:39:09:a7:b3:34:54:7d:e9:67:61:a6:d3:f9:98:e4:eb:a2:
33:4c:77:1e:ac:07:d9:da:5f:ad:d3:a0:4c:4a:1e:40:3e:a5:
c8:2c:85:02:a8:bd:c4:14:e5:27:a0:95:a9:eb:a0:95:44:d9:
b8:c3:ed:b3:bf:03:ff:a9:66:92:ca:e4:70:b5:c8:9c:a5:1c:
cd:08:57:66:b0:9f:0d:fb:00:90:21:1e:8b:57:b2:0f:42:d3:
64:6b:9d:8c:e0:40:3a:f0:42:7d:98:fb:4a:e8:d5:e7:78:e9:
66:90:4a:2e:13:65:a9:c4:9a:81:8d:74:4c:bc:e6:77:38:8d:
d4:0f:dc:e1:0b:5c:8b:2d:0d:23:da:cc:dd:46:5d:8c:db:c9:
84:4a:82:d9:d3:2c:c4:40:46:3d:cf:1f:46:d8:37:e9:9d:5b:
30:e6:4d:4f:e4:fb:b7:c9:b5:ad:cb:18:bf:85:90:1a:b1:14:
9c:a8:36:30:3c:69:37:13:11:bf:96:21:a6:db:f8:82:26:c5:
dc:94:96:68:96:71:ac:bf:70:db:94:32:9f:74:40:38:ac:43:
e4:1a:a7:6f:34:85:3b:c5:63:55:3c:07:c9:c9:02:80:09:3e:
93:cf:c9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:09:22 2025 by rpki-client