Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier: V11VWYFAeZzNpD33qY74KKSmBTTn/FHSTzJc30Aruo4=
Subject key identifier: 3A:45:66:42:F0:45:B2:00:5C:5B:14:CD:8E:AC:96:71:C5:EF:7E:5C
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial: 0194BBCEFCB2E2673ADAF3F8717C8530EB2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:01:31 +0000
Manifest this update: Fri 31 Jan 2025 10:01:31 +0000
Manifest next update: Sat 01 Feb 2025 10:01:31 +0000
Files and hashes: 1: 4nT-1vcQu44Sr-GCt6E0ooWA0hc.roa (hash: 9TU/QChXgdZn/WcufvGJiX+DQZh8m5mR65S2JB7VAL8=)
2: 7t39UO78LeFsKwD7CJstzTknIXs.roa (hash: QthZq6ZVZqJtxtcGdDvDYL6VwA/yafoVzBmUfyLehqw=)
3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: ps/PmfxVD5ThBTAHjqPFCn41KIYblMX6bNqH2rpYu7o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fc:b2:e2:67:3a:da:f3:f8:71:7c:85:30:eb:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Validity
Not Before: Jan 31 10:01:31 2025 GMT
Not After : Feb 1 10:01:31 2025 GMT
Subject: CN=3a456642f045b2005c5b14cd8eac9671c5ef7e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3c:81:d0:82:0c:8f:53:56:f3:34:bb:4a:13:
ef:c4:60:e3:07:c3:91:cc:bc:73:3b:bc:2d:b5:85:
51:fc:80:c6:35:39:e7:e2:18:f6:3a:c9:06:51:76:
fd:87:0c:50:45:28:68:4d:65:37:b5:66:60:69:c8:
9e:20:1f:fe:4f:75:83:b6:30:99:a2:29:e6:38:d3:
09:a6:ec:73:e1:38:99:38:14:4c:9e:5e:ca:f4:a8:
20:b5:7d:6e:a8:ca:37:51:d0:b3:24:ca:e6:34:14:
cc:e9:cf:75:2e:24:6f:c0:71:f8:3a:8a:a9:ff:ea:
44:3f:36:19:20:17:93:72:49:6d:e6:57:7d:0a:12:
f1:5d:50:5c:bb:c8:e7:60:c2:37:3a:c9:d9:36:c4:
44:97:48:97:9b:f1:d7:b0:f3:8b:a7:bc:a1:d8:f8:
59:1d:f6:4d:95:74:82:d3:b3:53:4f:e1:d1:72:13:
fe:6c:fe:b5:5e:50:20:ec:5c:05:d0:3f:d3:fa:10:
af:d2:5b:b7:15:e8:3c:a4:c3:58:f1:a3:c0:29:5e:
99:67:64:23:b0:f5:32:6b:e9:e4:6d:cc:c9:e8:1b:
11:d7:2a:06:fe:fb:1d:76:81:18:39:8f:64:f3:1d:
84:b8:64:4d:b9:85:30:39:68:84:fd:da:18:0d:89:
08:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:45:66:42:F0:45:B2:00:5C:5B:14:CD:8E:AC:96:71:C5:EF:7E:5C
X509v3 Authority Key Identifier:
keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:76:ab:b4:c7:a2:3d:9b:a8:49:d9:b0:75:89:0f:6a:90:00:
d8:42:58:c5:24:80:97:42:43:7a:6b:55:5c:04:a2:a6:26:8c:
fd:bc:d8:bb:a7:27:2a:1a:b7:58:98:12:0b:5b:d7:1a:e5:a0:
d7:4c:e4:86:0f:2d:6c:59:7d:86:cd:73:4b:8b:3a:29:1d:b6:
bc:1a:24:3b:69:92:9e:6a:44:de:4f:c6:08:c1:7a:ad:97:ba:
77:69:2f:5c:ea:21:52:bc:20:fa:48:67:a2:a6:3a:48:3f:4a:
5f:06:b2:bb:39:ae:f5:69:e5:0d:28:e3:ac:eb:84:2b:e9:04:
ca:f7:c4:8b:d0:00:73:b1:c9:a1:d1:5d:cd:2f:64:5f:3b:a8:
08:c9:37:2e:68:dd:be:16:c5:c2:96:cb:d9:8d:8f:da:68:54:
ec:71:23:5b:a7:89:d6:75:41:18:eb:10:c9:d8:d0:84:8a:60:
fc:0d:9b:78:23:2b:2a:75:8b:bd:f3:82:90:82:96:4c:1c:b6:
64:4b:e2:5c:9b:a6:fc:c7:79:36:e5:59:57:9b:ef:28:6b:c1:
ef:00:a8:57:1c:f8:b5:f8:b9:6c:9b:25:45:32:fc:47:4f:c1:
8f:63:8a:77:3a:49:5f:90:49:0a:28:67:5e:48:bc:1b:f2:89:
f6:2d:29:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:05:19 2025 by rpki-client