Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
File: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft (raw, json)
Hash identifier: XXNqDC/MOsH6qNLc86WuJL5Q7qFMS8x/XZWV9hxaRTA=
Subject key identifier: E4:23:4B:CF:28:DF:69:98:E0:54:75:C4:A6:B2:E9:11:02:45:17:C8
Authority key identifier: 60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
Certificate issuer: /CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Certificate serial: 0194BC3BBEB17BE6A702C93DD7570D0A237E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 12:00:19 +0000
Manifest this update: Fri 31 Jan 2025 12:00:19 +0000
Manifest next update: Sat 01 Feb 2025 12:00:19 +0000
Files and hashes: 1: F-cO8DY5we3ruehpt1DdaGZTJLY.roa (hash: LAS644NvWoPgwtaziFP441ODeculzXhcaX+rYlVwp50=)
2: XXUXKaNBLjG2zXes3zUz4pT_p2E.roa (hash: V04szlA87zJPQWBTLBTTrCqtzJ6gxyAZvxuUSuhQTGs=)
3: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl (hash: meHKJ0yzLDaE5JF82r/sjA2LgvjeIb54D32UlSi6ClA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:be:b1:7b:e6:a7:02:c9:3d:d7:57:0d:0a:23:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Validity
Not Before: Jan 31 12:00:19 2025 GMT
Not After : Feb 1 12:00:19 2025 GMT
Subject: CN=e4234bcf28df6998e05475c4a6b2e911024517c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:82:7b:c5:ef:9d:86:d5:6f:37:e0:27:cd:aa:
4e:55:33:67:37:7b:19:5c:40:b2:49:80:2e:08:b0:
b3:a3:ef:11:cd:17:7e:58:ed:82:d1:47:9b:f1:a2:
60:95:b3:01:00:96:7f:7a:8b:f6:87:9a:6c:af:42:
4b:e0:d6:06:4f:05:e3:ab:9c:6f:7e:6f:b0:9a:b2:
49:a0:9a:7f:80:4d:e7:4a:38:1b:d4:7c:49:dd:07:
2e:95:2b:24:43:78:c1:a7:df:f9:2b:c2:fb:e5:dd:
12:3a:84:00:7e:fc:53:33:d2:1b:47:60:1b:e2:7f:
bd:3d:a5:bb:a5:0b:89:91:70:54:b8:d3:aa:2f:9f:
30:04:69:25:e5:19:c0:9d:76:fc:3f:4e:f8:32:9a:
36:2b:18:a8:c0:73:b1:34:e6:d7:e7:b9:d6:4d:b7:
81:15:bc:9c:c9:f3:42:28:6c:20:ed:8c:b4:5c:85:
f0:53:f4:2c:b1:59:29:19:46:59:af:69:a6:92:d2:
43:68:8e:e2:9d:eb:e2:79:af:8e:c1:4f:81:2b:71:
44:a3:96:a6:2b:7b:82:7d:ca:8a:a8:0a:4a:a4:c0:
7e:e2:d8:a5:34:09:26:de:69:6f:7e:f9:4d:1d:99:
be:bd:fa:23:20:f0:35:82:3d:c7:4c:db:bc:94:db:
c8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:23:4B:CF:28:DF:69:98:E0:54:75:C4:A6:B2:E9:11:02:45:17:C8
X509v3 Authority Key Identifier:
keyid:60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:bb:15:3d:1f:0f:0a:bd:bc:b6:93:50:98:cb:05:40:6a:77:
62:a7:c8:98:dc:88:93:7d:4b:b8:aa:c9:c9:99:67:30:9e:19:
95:4d:18:d7:7a:95:b9:13:11:27:61:74:b2:f7:bf:8f:4e:17:
6a:0b:47:3e:75:dd:82:af:b7:67:9f:c3:9d:fc:31:e0:63:14:
d9:bf:c2:4e:34:2d:a5:37:83:c4:d1:cc:81:2c:fe:90:dd:0c:
be:e3:f3:83:55:4d:ec:c9:9b:6f:95:34:5e:cf:f9:34:c8:7d:
c7:90:10:89:d7:0a:5d:e2:68:71:92:c7:ae:77:81:03:78:52:
32:3f:06:e0:df:32:4a:00:18:c1:78:c7:d1:9d:f6:d1:8b:86:
8f:6c:0a:a9:62:fc:8b:44:a3:32:20:f9:01:93:ea:00:fe:1f:
dc:fa:81:5f:df:72:fa:86:9b:1d:82:c9:7f:f4:2f:86:7d:87:
bb:db:ca:65:a0:9f:73:02:ac:81:d7:f1:ae:e9:af:2a:2e:64:
4c:07:6e:f8:fb:af:28:19:62:27:01:95:f2:21:52:10:67:ef:
56:80:25:47:25:f4:14:54:17:48:e0:e5:bb:4e:2c:63:f9:25:
38:08:18:a3:77:8a:1f:dd:93:37:57:5d:25:9f:e2:3c:8a:89:
38:92:9c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:27 2025 by rpki-client