Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
File: dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft (raw, json)
Hash identifier: iviJzi3liHNviYLGKuBlx7UpjppHGfUE5gCOId+EHvM=
Subject key identifier: 6D:2B:FA:CB:C7:B8:16:BA:66:8E:CD:2C:E3:40:63:1D:12:AF:DC:AC
Authority key identifier: 75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC
Certificate issuer: /CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
Certificate serial: 0194BBCE8FA7A614A22B047E8AC7590A9443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 10:01:04 +0000
Manifest this update: Fri 31 Jan 2025 10:01:04 +0000
Manifest next update: Sat 01 Feb 2025 10:01:04 +0000
Files and hashes: 1: PKUF3H4nGREVMJD2dPtsZCb0xVA.roa (hash: bRtt/6wvb5BpNmugIhLVhjBbUyT5JnZDmpL0RvuD7vw=)
2: dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl (hash: hdUrskFYvVDzcVtj+CnAJwGMMjqaTMtC0zSVZ2U//M4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8f:a7:a6:14:a2:2b:04:7e:8a:c7:59:0a:94:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
Validity
Not Before: Jan 31 10:01:04 2025 GMT
Not After : Feb 1 10:01:04 2025 GMT
Subject: CN=6d2bfacbc7b816ba668ecd2ce340631d12afdcac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c7:29:14:14:f9:54:33:cb:3b:ce:20:d9:89:
ff:0f:c2:e4:c0:a8:b9:b4:5a:78:64:aa:7a:60:4b:
6e:4b:a6:a7:b7:06:3c:5d:35:28:63:18:ae:7f:c0:
dd:bb:8a:be:b7:03:13:8b:4b:c6:49:81:2c:86:3b:
20:e7:83:52:0a:32:ee:fa:fe:fd:5e:96:5f:1c:8e:
76:d5:2f:bc:22:8f:9b:64:ed:83:ad:94:e3:ac:42:
c9:e5:fd:dc:94:51:82:b3:12:54:be:48:82:96:d8:
b6:26:da:43:6b:7f:ae:96:f7:c9:67:fe:39:a3:62:
d6:a6:b1:e8:7c:3f:d9:f6:ee:e7:1c:d3:40:69:6f:
94:9f:b2:32:32:20:2d:91:6a:be:84:7f:3a:b5:8f:
cf:48:79:43:3d:21:41:18:a3:f8:7a:36:8c:58:e8:
31:f2:db:d7:ee:e2:98:c4:bb:a5:6e:29:32:4e:8c:
31:d0:d0:ab:58:c4:36:00:ca:7e:21:9c:7b:a3:ef:
6b:a7:76:7d:d7:9f:08:0d:db:75:72:b5:39:e4:05:
f3:13:79:2d:50:e4:9e:13:68:9f:63:9e:dc:49:e4:
2c:1d:1e:e2:01:9b:52:7b:12:6f:ee:ca:08:7d:e3:
5f:41:67:1d:40:51:79:ff:a3:8d:b6:38:36:28:9f:
33:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2B:FA:CB:C7:B8:16:BA:66:8E:CD:2C:E3:40:63:1D:12:AF:DC:AC
X509v3 Authority Key Identifier:
keyid:75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:f2:ef:2d:4c:83:48:cb:e3:f7:a1:68:28:69:7e:5e:77:8c:
c5:a5:84:cc:c0:c6:91:3f:e7:70:76:ea:1f:e6:23:9f:dc:77:
22:d5:c4:92:b3:16:da:7d:e3:0a:cd:26:34:89:4c:8e:05:a3:
59:34:04:a1:fa:19:e6:64:c2:18:1e:77:2e:ec:f1:2a:a6:4c:
7b:c8:49:f0:3a:a5:3e:73:c5:ce:37:08:bd:de:8d:24:be:f7:
1e:34:16:5a:2c:cb:36:2e:32:2e:13:7e:19:cd:c1:a7:bf:c2:
50:a7:78:bf:f2:af:25:cf:5f:ec:19:cb:ea:35:41:aa:bc:16:
d5:ec:e6:bd:5c:d3:77:6b:e3:20:87:07:cf:0a:25:e4:74:15:
a5:34:fd:20:be:f1:73:db:2f:24:5e:85:53:36:df:6e:a2:4a:
d4:53:a8:0e:cf:86:e2:01:12:6a:fb:07:29:bb:c8:5f:e4:80:
fe:a1:23:ee:26:7f:7a:32:78:48:68:39:ad:3d:25:67:bf:5e:
f7:9c:40:1d:8f:88:cf:9d:ed:18:0f:3b:db:f3:c0:db:ed:39:
b1:bc:a1:9f:ef:1e:55:21:b6:36:c5:35:02:2b:85:dc:ee:0a:
2d:40:05:fa:fe:aa:7e:fa:ad:63:50:e3:bd:bf:7f:66:7c:4e:
ad:e4:28:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:10:32 2025 by rpki-client