Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: hciySpGSfqN75Z+uTy/8PeUJusyLIstszLmymWOzTSM=
Subject key identifier: 09:8D:21:38:58:37:3D:5C:4E:F3:2B:A0:70:18:77:16:B7:89:31:5F
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 0194BC051074A16108DA9441F1E25989FD89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 0AAE
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: 1c8AtbAMfHlASe1nRmNmVLi-IPE.roa (hash: Yc6B/ACFRjBHZdeDucnbU591dd3oO9WG4VeSfIdJAWg=)
2: B-YGSnw6mlzmsy9e1WdnYiYl8uA.roa (hash: dqAKP/dgHYPVRyqQIAqMlRLtWiN+IpM+mjudxWdaulM=)
3: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: ytQKu7XzeAUf4GAFYgBuaQA5vkgymT6Iv+EhYVLouW4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:10:74:a1:61:08:da:94:41:f1:e2:59:89:fd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=098d213858373d5c4ef32ba070187716b789315f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:67:df:0e:1a:cf:18:ee:b2:7d:1b:94:b4:12:
f4:a7:8e:27:c4:47:76:69:70:7e:b9:09:fa:2e:5f:
36:ad:b2:67:9a:7c:5d:c4:fe:82:b5:14:90:82:0a:
44:05:4f:24:91:c4:fe:69:7c:8e:79:2f:c4:34:1f:
15:6c:cd:60:48:3d:48:3e:2b:c7:d7:e7:f5:22:12:
a6:07:72:3e:ab:5c:15:dc:97:6a:26:54:a6:20:06:
71:3b:4d:02:55:76:f3:c6:d4:ac:3f:42:a6:88:5e:
bf:3c:e2:61:15:85:b1:8e:91:3b:5f:f6:40:d0:24:
19:de:75:be:c1:ed:ec:f3:4f:72:2f:1e:03:f7:4c:
52:24:f0:af:eb:d2:c4:ae:d2:47:49:66:64:46:b3:
36:78:3d:41:b1:0e:00:f7:0f:ed:86:bd:db:98:d8:
71:08:b3:65:42:40:1d:1c:c6:7e:1c:b8:48:89:c9:
51:31:00:eb:2f:03:ff:fc:ab:e1:3e:6a:a1:6c:f2:
fa:f7:b5:cb:74:80:c7:69:32:ff:56:18:ec:2b:84:
3d:c0:8e:51:2a:c9:f3:4d:ff:a6:89:79:45:a7:9c:
23:82:8c:87:05:f2:e3:54:ad:42:6f:52:1e:1e:8b:
64:aa:e2:9e:7a:68:c1:3f:be:e4:9d:0e:9e:07:f7:
5d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8D:21:38:58:37:3D:5C:4E:F3:2B:A0:70:18:77:16:B7:89:31:5F
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9e:ff:1f:ed:79:9b:7c:a0:1d:ea:2d:cc:7d:78:bb:25:e9:
79:63:91:41:b0:1f:55:54:d6:15:e0:fa:06:52:57:f1:49:be:
c7:c2:e9:e2:de:63:da:e1:76:99:77:4f:7b:02:21:0a:a3:ee:
4f:61:16:ee:fd:53:55:70:24:49:27:79:6a:14:a6:fd:09:d6:
20:e1:4d:6a:6e:e8:3d:ef:3b:cb:a6:81:d0:b2:ff:2d:1e:72:
af:2b:64:07:ed:d9:e4:60:3c:12:b3:a7:97:19:64:c6:27:e1:
b2:90:fe:6e:0b:e3:19:3e:1c:50:a7:c2:f0:db:b5:d5:d0:6c:
b2:ba:c5:25:67:f6:f4:e2:51:12:1c:00:d5:07:38:dd:8e:7f:
91:fc:e4:b1:72:64:fa:47:6d:b0:93:e9:1b:06:a9:3c:17:3e:
35:6c:5d:0d:39:66:4a:62:f2:22:66:f4:17:3f:dc:c3:d8:2a:
69:dc:01:db:d1:0f:46:93:51:4a:cd:4f:6c:d3:ad:1c:55:d1:
91:57:a2:eb:02:39:b4:ce:87:8c:6e:bb:8e:c9:f9:46:ff:09:
61:3d:ee:c7:83:c5:54:8f:04:d4:16:89:06:d6:f3:7f:f4:dd:
1b:9a:f4:94:b0:5c:00:53:2c:30:72:20:2c:a6:59:07:3a:43:
2c:42:f4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:16 2025 by rpki-client