Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
File: aYhRnekYGF-24euv0eCDXKoRMuQ.mft (raw, json)
Hash identifier: dM4C/wbNWjOYEhY2rYS70MsyQEzTXbXPAC/S1xu+4rU=
Subject key identifier: 32:B5:0E:07:43:79:E7:14:FC:10:7F:79:19:A3:E6:C3:D6:D4:7F:2E
Authority key identifier: 69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
Certificate issuer: /CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Certificate serial: 0194BC04EAF3D596C0C137E58BAC4DCECF6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
Manifest number: 0EF2
Signing time: Fri 31 Jan 2025 11:00:26 +0000
Manifest this update: Fri 31 Jan 2025 11:00:26 +0000
Manifest next update: Sat 01 Feb 2025 11:00:26 +0000
Files and hashes: 1: TBGpVFI2lLvyIH4AY_XvgasXlhQ.roa (hash: tvFeHcNNfQ4t5ATDiY+/Dak2Xl/WexRzcSGHjDplBZM=)
2: aYhRnekYGF-24euv0eCDXKoRMuQ.crl (hash: WLOGCTkbbbk17bzvNYxlLD7xDF2gzTKUD+E8aL8WdWg=)
3: rbkwFcYLaEEcgP57xj9znwlpmj4.roa (hash: enJo8AXIWRTz+79R6txrBmjabj1OaXyVz0RKSwmCnM0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ea:f3:d5:96:c0:c1:37:e5:8b:ac:4d:ce:cf:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Validity
Not Before: Jan 31 11:00:26 2025 GMT
Not After : Feb 1 11:00:26 2025 GMT
Subject: CN=32b50e074379e714fc107f7919a3e6c3d6d47f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:9b:6e:86:8a:3c:a3:ca:8a:78:79:32:f1:
b3:f9:74:30:07:9a:48:61:9b:9b:67:b2:ce:1c:be:
57:ae:04:35:49:f6:6d:6c:bb:62:7a:ed:6a:ec:3a:
20:89:7d:d8:bd:30:ea:48:b2:7e:ad:53:f5:5e:06:
65:85:2e:01:70:9e:50:70:02:0a:a0:ba:e1:e1:62:
58:ac:c0:2c:e0:8e:dc:ec:e7:04:57:46:67:21:52:
c4:24:db:55:6d:00:9e:94:76:94:a1:d2:37:82:80:
93:e9:c0:32:c7:8e:e4:0a:6a:e3:cd:a7:cb:99:19:
d5:17:5d:be:fe:c3:7e:81:5c:3a:65:12:82:c5:02:
89:84:b5:c3:1c:bf:b0:12:de:d6:44:65:eb:57:c0:
c6:73:60:7d:50:24:f8:70:cc:53:5b:d4:fe:c0:1b:
2f:53:2b:8e:b3:07:8a:6e:9d:97:7b:65:47:73:8f:
7c:e6:48:08:e3:2c:f4:84:37:96:f6:2a:50:68:bc:
a2:86:0b:d9:22:be:3f:4c:ec:5b:44:89:d9:cf:a2:
09:58:dc:44:bd:6e:05:cd:2d:84:05:a2:df:2f:e2:
f3:90:73:ca:a8:0f:cb:94:71:c6:90:15:23:59:fb:
f0:86:cf:c1:d5:8f:44:75:0e:20:39:76:f2:ee:15:
2d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B5:0E:07:43:79:E7:14:FC:10:7F:79:19:A3:E6:C3:D6:D4:7F:2E
X509v3 Authority Key Identifier:
keyid:69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:dd:9d:ff:31:3b:8f:b1:5a:1d:1a:3d:04:2d:2d:94:9a:c9:
8e:77:13:f6:07:a5:92:06:4b:26:1a:3a:7b:e9:41:56:05:c6:
de:66:a1:1c:3d:6d:15:1d:95:f2:d3:e2:32:77:5a:1b:80:51:
9d:89:48:8a:12:e2:49:1f:96:00:c1:e7:fc:4b:ee:64:02:13:
d3:4f:f5:35:60:6d:b3:51:69:26:1e:41:5d:88:77:84:8d:c8:
ff:6a:85:fe:1f:d6:28:44:ec:d8:2a:9d:da:4d:fa:be:40:3c:
ce:8e:74:5e:a9:58:66:b4:79:70:c1:3f:80:2a:00:c6:83:ca:
84:32:7c:05:92:88:6f:e2:b2:3d:c2:04:61:c8:75:0f:74:db:
3e:61:d6:e7:00:86:f8:98:57:f4:e1:b3:32:2c:5e:08:8c:00:
ee:2e:cb:9f:cd:34:8e:34:24:3f:73:dd:d1:69:99:42:85:34:
1b:5c:a8:8d:34:1b:27:38:3a:09:57:08:bc:06:38:7c:d7:fd:
ba:18:0a:b2:6b:12:37:04:f3:11:b9:e3:37:c1:05:de:4e:aa:
c1:43:a3:d2:19:3d:95:f0:11:d1:f4:b8:21:70:e6:77:ce:ed:
3b:b2:47:bf:af:70:f3:0c:13:bf:4d:b1:09:43:4b:54:bb:48:
f1:31:bc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:16 2025 by rpki-client