Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
File: Ymd-4I9LshmAS2czR8OgtqMy1yI.mft (raw, json)
Hash identifier: nVT5pIyrgGC9F/+qOwRhaRxlvOemSkdZ8MJGAuXOUOY=
Subject key identifier: 3F:A6:DF:01:DE:C2:1C:D0:85:CA:C0:CB:3F:7F:53:FE:CB:E3:A6:F5
Authority key identifier: 62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22
Certificate issuer: /CN=62677ee08f4bb219804b673347c3a0b6a332d722
Certificate serial: 0194BCE0CBBA30B291F6D715DB165B2A6D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
Manifest number: 03E8
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: Ymd-4I9LshmAS2czR8OgtqMy1yI.crl (hash: EpOqI/8NklTAMypDoCCvEaVifh9oeC4xPfxrCTnG8yA=)
2: gQ1Mk4Ko4bazOy7pZDxAv9B_6qk.roa (hash: FoB5dUGf24mZ9gRXtihHS6AK0Gj+K7gCvGHMZywvDao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cb:ba:30:b2:91:f6:d7:15:db:16:5b:2a:6d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62677ee08f4bb219804b673347c3a0b6a332d722
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=3fa6df01dec21cd085cac0cb3f7f53fecbe3a6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dd:d9:4f:46:22:7c:9f:e1:12:7e:e2:8b:4a:
7a:44:e6:86:c6:de:91:c8:d6:97:a3:0f:e7:c0:7c:
7c:73:57:d3:5f:a4:91:49:2d:1a:ca:91:9f:bc:7b:
4a:71:f8:01:5b:c5:53:9e:ae:d0:65:b4:3b:bc:ca:
34:d8:f1:07:7a:e5:de:5c:92:e3:8c:b3:04:6f:76:
a2:e0:31:29:ed:4f:a6:4f:85:81:4f:b5:09:92:8a:
97:9f:43:4f:fd:88:35:20:3a:59:35:04:e1:fe:ef:
9c:10:56:34:25:62:02:d6:e2:b4:39:ef:3e:d3:8f:
d9:22:a1:4a:2e:e8:eb:38:ce:88:00:26:a8:dc:82:
1b:ca:6b:09:07:9d:4e:b6:41:f8:bf:58:cb:72:a2:
d3:ae:f8:52:3f:88:84:0e:9b:b3:ad:45:84:34:78:
48:e6:65:11:dd:2a:a3:27:8d:bc:51:30:8f:0c:52:
b0:6f:76:8d:25:63:89:00:c4:da:0c:89:47:7a:8d:
65:2f:5f:13:bb:b7:ff:35:e1:2f:0e:90:29:23:18:
4c:8c:01:03:17:be:6f:a4:7b:6b:60:62:60:45:ea:
5a:d2:65:80:e0:e5:6d:8b:dd:1e:dc:11:3c:7b:c4:
b9:43:fb:40:16:62:99:53:28:d3:29:54:15:0d:9b:
d6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A6:DF:01:DE:C2:1C:D0:85:CA:C0:CB:3F:7F:53:FE:CB:E3:A6:F5
X509v3 Authority Key Identifier:
keyid:62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c2:be:03:48:d8:7d:fd:58:ac:c7:fe:d1:b9:d6:11:60:43:
01:21:2a:20:0f:6f:4d:ff:53:05:3c:62:fd:b9:a7:b0:e8:57:
51:53:52:28:3b:ad:3c:9e:cc:da:c6:ea:9e:6a:f2:01:b2:06:
54:7a:8f:46:a7:1c:7e:99:92:6c:c3:0a:54:38:6f:0a:78:cb:
b0:cf:f1:68:1e:57:f0:b5:f4:f2:71:af:f6:c3:a9:9f:6f:44:
7a:04:d7:61:8f:38:cd:a9:75:f4:dc:8f:8f:7e:a8:f8:a8:4a:
27:82:00:67:3b:42:67:9f:54:1e:3d:05:f1:e0:26:f4:a9:7d:
fa:c6:84:d3:01:d4:19:f9:e7:29:bb:e9:32:7a:8e:21:e5:b5:
72:e2:1b:da:c1:b9:39:97:fc:21:31:c4:9f:9f:f3:f1:78:b4:
f0:1e:e6:87:3f:e3:c9:05:08:d1:27:f7:c6:b7:1f:10:e9:0f:
e2:3c:70:42:06:1f:7c:3b:88:4d:a4:ce:cd:8f:00:cd:e7:07:
c4:6b:6e:48:d9:9c:4e:7b:be:a0:82:8f:49:6f:5f:7d:af:84:
44:6e:07:e5:84:dc:ee:d9:eb:be:44:0c:0a:2d:07:8a:cc:2f:
46:6d:ed:70:a4:34:01:6c:7f:6a:cf:6f:9d:3f:01:d6:58:c1:
51:5f:08:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:41 2025 by rpki-client