Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
File: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft (raw, json)
Hash identifier: X9vjb05QjXXEBLYgZXcJMt3bJXCQJFN1JKCcx07kXUM=
Subject key identifier: E4:3E:5D:B4:49:71:FA:24:60:50:16:EC:2A:08:4E:87:62:5C:AB:43
Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
Certificate issuer: /CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Certificate serial: 0194BC04CBE18B9574316EC3D36978BD62FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
Manifest number: 0A6D
Signing time: Fri 31 Jan 2025 11:00:18 +0000
Manifest this update: Fri 31 Jan 2025 11:00:18 +0000
Manifest next update: Sat 01 Feb 2025 11:00:18 +0000
Files and hashes: 1: 1GNJJW2MjxVD_5YjOAnhTl6g1zg.roa (hash: p9+B/bwGUg8wWWb+goY+HH8qOHNqvJrQlybwIBP6B1Y=)
2: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl (hash: yQrpU1YqPNW8WKK4Wlg30ko1ofwwH+J9vRzGLibUTWY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:cb:e1:8b:95:74:31:6e:c3:d3:69:78:bd:62:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Validity
Not Before: Jan 31 11:00:18 2025 GMT
Not After : Feb 1 11:00:18 2025 GMT
Subject: CN=e43e5db44971fa24605016ec2a084e87625cab43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a1:39:a7:34:01:8b:bc:66:34:df:d9:21:4f:
d4:d9:59:70:28:1b:93:66:f3:93:9b:e8:9c:3f:cc:
09:f1:bf:00:94:d9:00:2b:05:e2:9d:91:b7:e5:3f:
e7:7d:9b:09:d5:c2:cb:ab:b2:2b:5a:66:7f:5e:54:
21:38:28:dd:16:93:4c:5b:f0:64:f2:a9:40:c2:c5:
e1:41:e0:f9:1b:46:b7:74:4e:83:be:96:16:3c:23:
e1:6c:fd:2b:83:d0:e9:32:b0:b3:7f:2e:fb:23:4e:
7a:87:47:7b:27:cc:ed:a1:c2:2e:bf:99:01:a2:90:
3f:05:2e:3c:97:7a:24:a5:6b:db:9a:cd:f6:8e:81:
bb:1c:85:80:58:42:b8:3a:cb:45:c4:7e:b1:68:3b:
b2:1a:cf:12:77:03:43:fb:1c:4c:35:dd:58:68:2a:
a3:c7:d7:39:5b:75:ef:d0:a7:2d:c1:3d:31:2a:e5:
b6:cb:95:a4:80:57:f1:92:15:8e:f5:04:ad:86:88:
26:ae:23:ea:72:ca:0b:8f:e9:7f:71:93:51:26:dd:
91:d5:50:e5:a1:19:b0:68:c4:94:08:c7:2c:60:bc:
8f:dc:99:cf:30:4d:0c:d2:7b:fd:66:4b:1e:c6:0e:
c8:03:95:74:88:9e:3a:f5:87:db:c8:90:96:00:35:
e1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3E:5D:B4:49:71:FA:24:60:50:16:EC:2A:08:4E:87:62:5C:AB:43
X509v3 Authority Key Identifier:
keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:85:da:1d:1c:7e:14:a1:c0:d2:4d:f7:07:f7:62:44:aa:74:
b3:0c:43:df:69:74:91:f8:58:1c:d5:87:18:9b:9d:9d:68:2f:
7b:d8:8b:62:61:5d:8a:da:e6:5e:d8:4c:5c:7a:b5:ad:ca:af:
76:d3:9a:87:7e:25:1c:9f:ab:78:31:fc:8c:3c:bd:57:ce:54:
d4:be:a3:f7:23:bf:fb:a3:6c:36:8d:0b:24:89:e7:51:fb:96:
d0:dd:8d:d6:5a:79:13:66:47:de:40:8a:0c:76:f5:3f:d4:79:
9a:09:6c:53:53:1a:55:e7:b4:24:37:f2:07:df:2c:ac:0b:97:
73:9b:70:86:5f:92:10:a8:88:9a:92:6a:4a:3d:a6:44:ed:59:
ae:bb:57:c6:ad:c4:32:05:d8:c7:cb:a4:9f:f6:6a:83:21:bd:
b6:eb:fe:47:4a:c1:d2:45:66:a6:e3:e6:3e:74:0a:8d:6c:d5:
52:32:52:e7:cc:a2:e9:f3:77:1c:b1:92:85:b4:51:a7:3e:bc:
af:aa:5e:ca:1f:4e:a6:0d:88:02:d2:67:c7:bc:c2:ca:9d:ed:
3d:9c:2f:a1:d4:87:33:40:1a:7a:61:f2:e5:1f:7d:83:89:6b:
a8:03:a7:ec:c8:3d:7e:bf:40:35:4a:25:d2:d6:38:31:39:78:
cc:8d:40:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:26:02 2025 by rpki-client