Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
File: m-YNSucPb1WZhMdrUhzjd8we5yE.mft (raw, json)
Hash identifier: JYc8Bn6SKK3KiBcecddnYuP1RPZjbEBMLmNGWIVxUMY=
Subject key identifier: 4C:19:3D:82:27:20:E2:18:9F:FC:E0:38:EA:BB:5D:4B:39:B5:53:46
Authority key identifier: 9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
Certificate issuer: /CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Certificate serial: 0194BC73065752467308B5C7DB7F2A10381D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
Manifest number: 0537
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: EvLIZkrQOLa3Dw1QeQY-_nsYunc.roa (hash: 7wySXJGI2LRPILtTDDd8e153b5pc8VYBaUgp6NmPV7s=)
2: m-YNSucPb1WZhMdrUhzjd8we5yE.crl (hash: 4GaZtNlXqRn3VPzNZTIFBF1VaSW7JY4FHi8JM8ekpHg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:06:57:52:46:73:08:b5:c7:db:7f:2a:10:38:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=4c193d822720e2189ffce038eabb5d4b39b55346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:74:e5:51:9d:57:3f:df:7f:5b:9c:8d:90:79:
ed:44:b0:8c:27:47:f6:06:3f:36:49:c4:c0:8f:33:
5c:ea:5f:c5:3e:ba:62:c8:fc:8f:43:04:f2:4d:bc:
83:36:44:c7:17:a4:3d:25:65:b0:5a:3a:8d:07:cd:
f2:84:d5:9d:b9:46:fe:24:0b:10:13:2f:4c:c6:a1:
fe:31:a5:ba:a7:0c:69:04:25:ba:ca:6a:ca:0f:39:
9a:ea:90:1c:23:ce:d9:8e:4d:a1:7a:27:8a:4a:fb:
bf:3b:23:16:e8:15:98:4f:08:3a:da:09:b1:e7:da:
1c:72:8c:a3:0d:5c:7f:5b:14:34:d4:3e:86:29:7b:
6a:84:88:da:ec:dc:3b:90:6d:05:09:d9:bf:da:91:
9e:46:a3:9f:b8:07:46:f3:11:50:de:ca:36:f2:a6:
13:a0:10:36:a5:28:a3:87:5f:6b:a9:81:51:39:00:
97:b1:ce:a2:d6:fa:5b:40:9a:b7:3a:0b:82:44:73:
31:a8:19:2e:63:be:56:aa:5a:91:9a:74:fd:db:c1:
13:fe:a5:6c:21:ea:de:dc:aa:0e:e1:31:3e:d8:2e:
39:0a:00:bc:4a:68:12:3a:7b:f9:92:0f:69:da:0b:
e4:b3:ca:9e:23:81:e3:9b:be:bb:97:d7:4b:54:52:
8e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:19:3D:82:27:20:E2:18:9F:FC:E0:38:EA:BB:5D:4B:39:B5:53:46
X509v3 Authority Key Identifier:
keyid:9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9d:6e:7d:73:5d:45:05:17:48:f9:d1:29:58:0f:9c:25:7b:
54:31:53:b9:6d:b8:eb:0c:dc:ed:ef:3d:db:95:f0:2f:fe:df:
bf:ca:e6:56:c4:3a:e3:14:6d:50:1b:9d:11:91:bc:17:91:ae:
ed:22:44:18:44:79:36:6e:67:55:97:fa:9e:52:71:74:3e:4d:
f9:4f:7d:ed:be:ee:59:40:12:8a:c8:3a:05:a3:47:0b:bc:39:
36:f7:b4:2e:48:55:b6:f7:be:d1:4a:94:ef:6f:27:b9:1f:e7:
17:39:a9:79:fb:e1:ec:1b:c3:3f:e1:b3:a7:a7:c4:f2:21:e6:
8c:89:54:24:67:38:9a:07:0b:5c:63:87:97:26:78:8c:50:21:
5e:7c:57:3c:ba:f9:6d:3a:d0:ae:e6:32:75:d5:12:96:12:39:
91:18:3c:e3:ed:18:2f:af:c7:45:1b:ae:4e:35:b9:56:0e:f8:
fb:69:59:4f:11:36:f4:7a:8e:ce:7e:b5:b6:96:0b:97:86:39:
be:e6:e0:c0:9d:70:b6:45:8a:8a:eb:d0:d5:39:94:c3:33:34:
51:30:30:ba:e1:92:4e:bf:0f:d4:54:a3:a1:f0:33:9a:05:b8:
f3:3b:fc:e5:b1:ce:5b:25:36:28:14:42:05:a6:b7:21:a8:24:
8d:7d:0b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:23:55 2025 by rpki-client