Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
File: ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft (raw, json)
Hash identifier: JElyd9N2dcj9paraURT8OZKt9K94sOvvScYAaJXlJpE=
Subject key identifier: ED:68:F0:89:83:BF:8E:69:FF:F7:D8:53:02:D8:D5:06:AE:D1:0B:19
Authority key identifier: 93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8
Certificate issuer: /CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
Certificate serial: 0194BD853D77B05CFDD8935A9512AACD57B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:13 +0000
Manifest this update: Fri 31 Jan 2025 18:00:13 +0000
Manifest next update: Sat 01 Feb 2025 18:00:13 +0000
Files and hashes: 1: 3yYGs7gC6Yt8xSj2vfENPhVXFvE.roa (hash: BuidZ1GvGdKg7gwYd2Ptl6PuYSRGUATkT25l43mgSwk=)
2: MTEEbTxLhwcmIFVyPc3_83L2SWM.roa (hash: pPAVTHjE82w53qTWAl4KRukHgVB0WjzGZSXqRTGTWY4=)
3: gIOaHcti7t355LnXTtGCztKWtS0.roa (hash: Cn1RCEjcCDtykL3i8BWxXer7cpYHt86vURgQOr3lUzo=)
4: ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl (hash: +jIAymist83N4kNT5qeCqpSureFofmFhA8zCW1eG6FE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3d:77:b0:5c:fd:d8:93:5a:95:12:aa:cd:57:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
Validity
Not Before: Jan 31 18:00:13 2025 GMT
Not After : Feb 1 18:00:13 2025 GMT
Subject: CN=ed68f08983bf8e69fff7d85302d8d506aed10b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:92:6f:0f:63:26:70:b6:d4:fa:c3:5d:7b:
1d:69:53:5c:4a:47:1f:bf:b7:a0:68:e3:81:4f:06:
b9:04:65:f9:f5:24:2e:7c:d9:b3:56:47:ff:65:96:
12:1f:39:da:5f:9a:9a:50:5a:ac:67:32:b1:2a:43:
a6:c5:72:8f:01:9f:76:af:f9:b5:26:f8:96:3d:3f:
2b:ea:86:8a:9a:d8:97:fa:9f:1c:c8:e9:8e:dc:87:
18:62:e7:55:2c:b1:03:b6:85:80:45:67:3f:17:d3:
4e:c4:60:8d:89:25:45:26:84:82:f1:be:b4:4e:bc:
1e:da:9c:1f:21:2c:17:c8:65:66:a4:3a:00:f2:66:
86:ac:dd:06:fd:05:ad:bd:80:58:32:07:aa:2f:f1:
4f:ee:06:90:99:24:f0:a2:b4:32:6d:2a:ea:8f:2d:
5d:29:98:ff:c9:a4:e4:82:de:e4:bc:db:4c:fd:ee:
58:7d:be:94:8b:6c:ad:c1:6e:7f:c7:64:19:3b:77:
78:2b:b1:0d:4d:d9:5a:eb:f7:81:9e:71:5b:b2:3a:
2e:d3:7f:7c:81:a4:6f:28:e5:55:2d:0b:3e:ac:36:
46:94:f9:58:e6:ac:be:21:6c:8e:34:39:b5:2a:42:
b1:ba:58:f0:f4:08:5d:61:ed:0d:9e:e8:ab:ed:dc:
ee:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:68:F0:89:83:BF:8E:69:FF:F7:D8:53:02:D8:D5:06:AE:D1:0B:19
X509v3 Authority Key Identifier:
keyid:93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ff:72:a6:85:e5:53:69:4e:49:c6:a2:e9:34:6d:e7:27:70:
a8:b4:1f:d0:ac:27:c8:33:6b:eb:66:f1:2e:97:63:d6:af:9c:
20:9f:51:7c:88:98:a3:03:da:a4:c0:42:40:67:14:8d:d4:e6:
5d:f0:9d:5b:18:ad:f1:8c:5b:42:39:f6:46:5c:80:5e:90:37:
f0:39:b5:9d:df:a1:e8:b8:8d:79:b5:73:f2:58:63:64:30:5a:
f5:cd:ee:2b:a2:ee:c6:98:48:78:f4:60:1d:13:a3:3a:e4:8e:
23:50:b5:22:71:0a:01:78:f9:58:90:01:87:da:45:5e:c6:6c:
09:ff:4e:c4:21:d6:e0:b1:40:28:69:18:2a:81:22:1f:a3:b2:
92:5f:bd:2f:32:04:f4:cd:85:2d:34:61:6c:56:1d:2e:e4:b3:
ab:ca:59:d7:11:0d:53:6b:b2:5b:ef:c2:94:95:fb:8d:ed:7e:
00:5d:50:9b:0c:b5:c5:b6:aa:de:03:17:bd:f2:4d:a9:40:02:
41:30:4b:55:07:57:fc:f2:43:e1:3f:60:bd:51:d1:93:2c:da:
f7:06:42:98:5f:a3:3b:54:b9:d1:07:e8:1d:a5:55:16:12:3d:
70:29:c8:67:67:54:3c:4e:68:a0:9a:b1:f4:73:84:1b:e5:b9:
6e:88:71:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:49 2025 by rpki-client