Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
File: A-ynkyRXUrZ6iB9441q4_0ndPsE.mft (raw, json)
Hash identifier: osCcd6Yp7GCDY793s1P7kDQf1LFa53L4wngO2kMl3p0=
Subject key identifier: 37:BD:26:89:AC:33:94:97:C7:DB:2E:D2:B6:37:92:D6:C3:3D:33:33
Authority key identifier: 03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
Certificate issuer: /CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Certificate serial: 0194BCA9B3694D25C64B64D92E07894E772E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:25 +0000
Manifest this update: Fri 31 Jan 2025 14:00:25 +0000
Manifest next update: Sat 01 Feb 2025 14:00:25 +0000
Files and hashes: 1: A-ynkyRXUrZ6iB9441q4_0ndPsE.crl (hash: /dQkf19gS61W4/A2EDfm4vXCAXTIa1S5gkVfKBL09OE=)
2: KCo_EXF_kwXFBoy_-8g1vn9X4IU.roa (hash: 3gljbk7M1fRChLX3eXWg8UNcaSKjRzvlcThXCcbYJEs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b3:69:4d:25:c6:4b:64:d9:2e:07:89:4e:77:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Validity
Not Before: Jan 31 14:00:25 2025 GMT
Not After : Feb 1 14:00:25 2025 GMT
Subject: CN=37bd2689ac339497c7db2ed2b63792d6c33d3333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2c:93:9d:24:24:5e:62:0e:bd:9a:c3:41:7d:
98:93:3c:b3:ec:cc:d6:2b:ff:7b:cf:d5:7f:b9:d2:
9c:f3:05:35:31:31:9f:75:da:22:a9:47:c3:b7:3b:
65:10:4b:57:ad:35:c8:1a:9f:8c:95:86:11:7c:68:
c8:1e:b4:1b:1b:f5:9c:af:f8:74:0a:0c:b2:54:89:
f2:2c:fd:70:97:96:77:f0:ed:7b:d2:f1:ed:5a:fc:
94:d1:3e:66:1b:47:34:60:6f:3e:61:99:10:bd:a9:
da:f9:b3:cc:25:b1:a1:60:d1:df:1b:bf:61:dc:9f:
15:e5:85:5d:c5:86:ce:b8:89:b6:22:1b:77:41:1f:
b5:82:2d:db:2e:10:0b:66:8b:e8:07:d8:f9:fa:da:
52:b1:9b:f4:ba:3b:23:e3:66:a2:0d:c7:22:ac:70:
11:5d:86:7e:e1:b5:94:c7:b6:ca:c2:a8:01:62:b5:
bb:c5:71:c3:3e:b3:47:59:a9:37:0a:48:85:53:0c:
e4:9c:a6:e5:a7:7b:35:24:dc:e8:f8:8e:89:fa:7c:
26:b8:79:55:b1:a0:68:4d:32:e2:9f:da:08:3a:06:
cb:9a:9d:41:40:56:d3:a0:4d:0f:25:8f:0c:52:74:
cd:da:d4:52:98:1d:9a:1b:8d:74:06:ef:d4:e6:3b:
e7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BD:26:89:AC:33:94:97:C7:DB:2E:D2:B6:37:92:D6:C3:3D:33:33
X509v3 Authority Key Identifier:
keyid:03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:75:54:49:40:e6:b8:a8:16:cb:ea:4e:59:c0:95:7c:3f:9f:
66:c5:50:21:fa:80:19:81:4d:da:36:57:5a:e9:f9:d1:84:28:
ff:60:a2:27:e5:08:64:81:5e:c9:cc:c6:ac:1d:83:e0:e0:b4:
cd:a6:58:84:cf:2a:9d:12:6b:04:7d:91:59:f6:a0:73:02:58:
70:6a:4f:bb:b6:66:ce:6d:2d:ba:4a:25:1f:20:59:e1:6c:0f:
eb:a5:27:b6:fb:cc:f6:d8:19:e3:08:f1:cb:ed:92:33:b8:15:
92:6a:58:a2:b7:e0:74:57:df:ae:30:14:33:d4:31:c5:ca:04:
f8:32:6e:b0:43:a0:77:b6:ca:23:94:53:4d:22:e3:d2:f8:79:
3c:ce:53:7a:5c:26:11:0f:00:3c:17:24:60:3a:ba:f9:ae:b8:
35:cb:22:07:d0:11:fc:98:21:e4:31:f6:cf:9c:e3:55:6d:5d:
e2:9b:6f:c8:6a:21:38:83:79:b8:ae:5c:85:c4:d9:61:88:06:
d7:f6:80:93:9d:ec:c4:73:f7:ef:e6:ae:fe:86:75:51:84:c5:
82:e4:f3:53:c0:8e:d6:3f:ef:87:2e:7c:ee:c2:d0:66:ac:76:
61:19:d4:d5:5b:59:e8:e6:28:8c:11:e0:30:42:86:4c:0b:ba:
36:4a:4f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:31:25 2025 by rpki-client