Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
File: cNySeAi5pn58uhunTvtb9sEsiVs.mft (raw, json)
Hash identifier: ycfAs4kQpt1luoGMYrS6mDZaZOylV10bFyAoMD8U9i0=
Subject key identifier: 6F:FE:32:49:5C:91:FC:89:04:69:FF:A4:A8:18:E5:7A:DF:8D:24:70
Authority key identifier: 70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B
Certificate issuer: /CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b
Certificate serial: 0194BD17844B642868BC7DEC242A6DC3068E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 16:00:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 16:00:22 +0000
Files and hashes: 1: BAJtDqJxaWUqQAfiueye7uuRaiw.roa (hash: xliJwPehY40wkTea7xdHZ3Ii3nZae+NEE66sFETvyTA=)
2: cNySeAi5pn58uhunTvtb9sEsiVs.crl (hash: voIzrMUfcNC/qbc2MVnm1KUad8bncIsrd3OsHiuLLM4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:84:4b:64:28:68:bc:7d:ec:24:2a:6d:c3:06:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 16:00:22 2025 GMT
Subject: CN=6ffe32495c91fc890469ffa4a818e57adf8d2470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:79:da:26:df:88:6d:a6:75:c3:15:1a:e2:eb:
b1:c3:ef:27:83:64:f5:fc:32:7c:00:0f:7f:12:1f:
95:94:a0:14:cd:4c:05:1e:45:b7:a9:1e:58:dd:da:
e3:7d:05:a6:58:61:ec:e3:d3:c8:49:74:7a:4e:d8:
d2:ba:3f:e2:a2:a7:56:b5:25:9c:2d:46:25:5b:c8:
d2:f4:88:e0:74:e2:80:4a:88:cb:d9:c7:1b:08:17:
47:aa:d4:ae:fc:4b:9f:05:9d:17:46:a5:9d:38:54:
80:87:be:c1:0e:19:04:27:76:d0:48:93:6b:cd:89:
11:7d:51:32:dd:05:be:99:8e:d3:b5:ef:cd:4c:63:
e2:47:a1:dd:2d:5b:8f:04:68:95:9c:e2:96:b8:6b:
ff:0c:8e:24:46:83:07:3c:01:71:ed:8d:d0:03:68:
0b:11:22:a0:b6:87:85:92:a8:9b:69:8c:bd:ef:4d:
70:2a:f4:b4:99:3f:d1:32:09:c8:cf:ff:b5:fa:1b:
52:db:63:6f:7f:d3:af:cb:cd:59:b3:c7:e4:9e:5d:
a5:3c:40:60:68:4b:7b:f8:d3:a4:3e:65:d7:8f:72:
b0:27:34:62:90:94:33:7b:95:ff:eb:fa:30:05:5c:
cb:8c:5d:3a:66:52:40:4d:38:75:98:6f:fb:84:1d:
c3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FE:32:49:5C:91:FC:89:04:69:FF:A4:A8:18:E5:7A:DF:8D:24:70
X509v3 Authority Key Identifier:
keyid:70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a8:80:7c:8a:60:66:8d:03:b3:d1:97:65:64:d3:90:3b:b3:
cb:70:08:6a:22:28:a0:89:48:8c:21:1c:a6:3f:25:e8:62:13:
96:f6:23:84:fc:d7:c1:49:d0:bf:ef:2c:50:85:46:79:86:1d:
ba:6f:d3:08:32:93:3d:a8:fa:e6:e0:fb:5b:71:02:f8:32:0a:
21:a8:ad:d4:60:47:ea:8a:44:40:e9:64:61:80:83:0f:e2:9e:
72:c0:21:1b:6b:cf:b0:74:b2:08:ee:44:7b:8b:15:0c:8d:ab:
61:6f:1a:56:c0:17:0b:d1:f8:2a:b2:a5:47:e3:14:65:75:34:
6c:30:c6:ac:d9:76:dc:58:6a:47:84:a1:4a:07:1b:e2:54:f5:
ed:cb:95:0e:fb:4d:36:bf:63:66:5e:38:9e:f4:f0:41:4a:59:
cc:94:32:8d:89:aa:7a:50:cf:96:8b:f2:eb:71:26:14:7b:30:
94:4b:e9:6a:55:50:fd:79:7e:92:29:a7:28:75:e5:57:d3:f0:
e3:62:d8:9f:7d:4e:32:1a:0d:b2:63:cf:e2:9e:47:64:e4:f6:
10:2c:a4:2f:fb:9d:51:32:f9:7d:1c:6b:64:c8:4c:92:fe:71:
cc:12:c7:cd:9a:34:c3:a5:7b:fa:85:c0:b3:3e:3f:fc:d7:5e:
24:5c:53:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:32:53 2025 by rpki-client