Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
File: Y4H3IILjEgadg9mvTzGc8K-ANkc.mft (raw, json)
Hash identifier: qI74txGn1SCJU9I+UlVBjAyMOnN+ebEJ3kEoPOs1WdY=
Subject key identifier: 3F:10:78:59:73:A6:A7:C4:5E:8A:49:98:B4:E5:EF:30:A7:C3:20:8D
Authority key identifier: 63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
Certificate issuer: /CN=6381f72082e312069d83d9af4f319cf0af803647
Certificate serial: 0194BD4E48CB58219D314D56E236D800393E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: Y4H3IILjEgadg9mvTzGc8K-ANkc.crl (hash: iayqUgLDpEmQyZp0O3bllnZdb0ERsg3GXEB3pF4kfaI=)
2: dOaeIHruifCT3_Y-NZ9ouvbnhuc.roa (hash: PG+NsqO34TjeMURDoubqwQXu9F/XY0vJGA8jsdkgloo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:48:cb:58:21:9d:31:4d:56:e2:36:d8:00:39:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6381f72082e312069d83d9af4f319cf0af803647
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=3f10785973a6a7c45e8a4998b4e5ef30a7c3208d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:c9:ae:89:1e:e0:63:d2:b1:44:22:52:30:
e1:7e:de:e2:26:46:82:ec:9e:d5:28:ef:6b:84:6f:
80:60:a9:aa:b1:50:ec:a6:d6:fc:8d:12:85:df:5b:
e0:c3:08:f2:b1:c2:3c:f1:52:ab:d0:f7:94:65:7d:
4b:d1:a4:b5:f4:a4:5c:6f:aa:e2:e2:f5:79:0a:2a:
05:28:6f:71:d8:bd:69:aa:fb:06:3b:bf:40:03:bd:
4c:00:25:e8:6e:ca:8b:57:fd:45:25:c9:bd:18:7b:
66:c2:6e:ee:14:28:21:3c:da:55:16:10:13:75:6e:
d7:8b:8b:de:3e:61:a1:97:7d:f4:54:61:9d:24:46:
95:8a:47:46:0a:51:ae:0f:76:26:21:12:7a:af:dd:
8d:71:e1:55:e9:e1:78:76:ae:f6:9b:c3:45:93:df:
d5:af:35:d5:24:4c:82:f7:57:12:9a:d7:fb:c9:0d:
5e:97:9c:80:bc:d7:a1:0e:b0:88:51:2b:17:e0:17:
70:da:39:f6:fd:9c:76:a1:6e:9c:20:71:e1:23:a3:
ba:da:fe:81:d5:65:39:d2:9f:75:cf:ec:3b:dc:91:
a9:0f:f9:6e:9a:50:d1:9d:4f:e7:bd:d3:b7:f8:3c:
cb:56:e8:d7:51:7a:a3:cf:e1:35:7d:9e:6f:db:0e:
39:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:10:78:59:73:A6:A7:C4:5E:8A:49:98:B4:E5:EF:30:A7:C3:20:8D
X509v3 Authority Key Identifier:
keyid:63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:44:ae:4c:9f:d0:d8:94:d5:43:ec:57:79:2f:94:11:3c:b6:
dd:d1:5f:2b:9b:6b:5f:89:e2:e6:42:b2:64:2b:28:17:bf:4f:
fe:52:b5:05:34:53:e7:0b:62:c5:48:b4:a0:29:f1:a6:d9:50:
19:1b:b0:44:cc:e2:c5:c5:5b:a3:a8:19:ef:c6:15:d3:a2:5d:
1f:cc:32:4b:a5:88:9b:8b:3d:97:27:98:3a:0d:a1:72:07:14:
e1:bf:f4:e5:ee:02:10:2c:d3:8f:7c:2f:84:39:ee:28:dd:39:
61:fd:e3:d0:b5:22:00:1f:d7:72:f0:fb:68:a9:71:72:ad:90:
ee:fe:48:65:07:ac:6b:cd:5b:89:eb:7c:7d:d7:1b:d7:82:09:
1d:1e:f9:82:57:e1:87:ad:24:10:0c:27:45:cc:db:81:f8:93:
51:81:bf:e9:e2:1d:33:85:81:03:00:c1:7e:a2:de:6f:90:ce:
d0:fb:46:d7:f8:43:52:4b:f6:e4:85:2c:80:79:5d:a9:2f:55:
b6:aa:5f:8b:d3:3b:c7:d6:ee:98:a1:0a:5e:c8:a3:b3:88:10:
b1:c7:54:11:96:e5:cf:e2:03:d5:7b:8f:c6:98:a2:73:c7:90:
b4:58:79:56:0a:8a:8c:a4:d8:a6:96:46:2a:f8:db:f6:d9:ee:
fb:25:3b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:45:16 2025 by rpki-client