Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
File: yNMivrfjY_TUV14eT-7lzLhOEnU.mft (raw, json)
Hash identifier: EU+zY7gfv0nI+b6iLrWM6940o2LAjakUv6nV5rqBDy4=
Subject key identifier: 99:DF:35:DC:40:32:FD:9C:4C:C1:FC:D1:E3:29:48:3A:AC:E1:CE:A2
Authority key identifier: C8:D3:22:BE:B7:E3:63:F4:D4:57:5E:1E:4F:EE:E5:CC:B8:4E:12:75
Certificate issuer: /CN=c8d322beb7e363f4d4575e1e4feee5ccb84e1275
Certificate serial: 0194BC3C196E179AAF00A616EB751D3D7D09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: nvq-TJNbL0ajM2TA5cfgJ-DqXBg.roa (hash: pDByD6dp3Va0k7qBPd8tHFheIh5zQKazx/nAE02gXa4=)
2: yNMivrfjY_TUV14eT-7lzLhOEnU.crl (hash: B+LZEGjtfwpz/83tdwKD/jvW/TCiyx4/OsvntwCkSrs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:19:6e:17:9a:af:00:a6:16:eb:75:1d:3d:7d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d322beb7e363f4d4575e1e4feee5ccb84e1275
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=99df35dc4032fd9c4cc1fcd1e329483aace1cea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8b:b1:14:7c:ea:6a:3c:87:5a:d6:c9:fa:9c:
fb:0c:98:c6:db:8c:2c:4a:fd:f9:b5:cf:1f:4c:a7:
0d:e0:a6:95:d8:2d:26:57:94:ea:92:0b:c1:53:d8:
57:93:59:3a:92:9f:ab:38:12:78:75:ef:95:e9:02:
a7:85:41:f3:10:7e:2f:30:e7:48:e0:b8:79:b4:a5:
18:19:82:f9:a5:f1:9f:06:b2:1d:fd:c6:ce:9e:77:
34:cc:8a:5c:37:56:fa:73:8c:94:4e:cc:6a:da:30:
48:32:f3:b5:7b:43:9a:d5:34:2a:7d:f4:ca:32:07:
0d:0d:49:31:30:bb:67:74:79:fd:b7:73:17:ad:f5:
43:e3:ea:03:80:29:c2:b2:69:e0:2d:44:5b:b3:4a:
fb:be:d2:d0:3a:e4:35:ce:84:9e:30:62:0b:47:af:
56:d3:0a:a9:51:f1:96:d5:2b:f1:5a:8c:27:3c:23:
77:e9:94:76:38:41:60:14:7c:68:29:64:95:fc:95:
9e:60:42:74:68:d6:74:f3:b1:72:ff:63:34:a0:a0:
f4:f9:eb:b4:42:64:0b:4a:2b:ef:0d:aa:8e:b5:fc:
a2:d1:06:8f:d5:f1:63:f9:a3:61:e6:24:c9:27:c1:
35:d8:b5:3b:76:7a:e0:c1:0f:83:f9:fb:64:00:4e:
73:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DF:35:DC:40:32:FD:9C:4C:C1:FC:D1:E3:29:48:3A:AC:E1:CE:A2
X509v3 Authority Key Identifier:
keyid:C8:D3:22:BE:B7:E3:63:F4:D4:57:5E:1E:4F:EE:E5:CC:B8:4E:12:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:08:c8:4e:ef:1e:2a:72:f7:50:d7:fd:38:65:9f:f8:65:a2:
c0:24:c1:a1:88:6d:07:95:cf:5c:6d:b3:8b:13:de:84:3e:43:
95:48:d3:ec:29:70:5f:b1:b9:49:d5:25:39:2b:77:93:4b:43:
33:67:cf:4f:4b:bf:8f:65:36:f4:c3:5f:88:43:76:62:fb:ea:
0f:45:97:93:ff:23:62:03:ec:e7:0c:91:ba:20:3f:97:46:67:
57:8e:a6:47:95:62:80:23:ff:e3:0a:44:46:d9:8d:dd:0f:b0:
34:4d:2a:35:a2:7a:a0:3f:80:b5:ba:c9:dc:f7:60:10:08:d7:
25:61:80:f8:51:98:83:0a:7a:dd:52:f9:ff:c3:af:89:f6:5f:
8a:ec:7d:c2:af:d8:fc:7f:7c:5b:33:31:94:ed:bd:48:38:9b:
16:6b:d4:03:8b:2f:43:31:f3:14:8c:0e:52:c6:39:3f:c4:c1:
e8:f1:ce:23:1a:f8:78:9c:ad:3e:a8:64:56:f2:93:81:d3:ea:
03:b7:19:d4:0a:2e:e4:e3:f2:dc:4f:6b:7f:08:e3:ae:65:19:
b4:dc:2d:a2:c8:0d:78:f9:46:bd:72:d4:ad:8d:f5:65:32:8b:
32:8f:9d:6d:c9:61:5d:f4:bd:ba:9c:3f:2d:f7:7a:c8:4e:c1:
2c:d4:71:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:14 2025 by rpki-client