Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
File: yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft (raw, json)
Hash identifier: AU15zsJdr867AsdV9Syt2evq4XEv546J1KB+S8DFb7k=
Subject key identifier: 77:F5:6A:90:2E:F4:04:C5:8B:9E:E9:15:44:B3:23:0B:4A:C1:58:68
Authority key identifier: C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5
Certificate issuer: /CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5
Certificate serial: 0194BD175CEBA44D720F1F641DB3D43FDC44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
Manifest number: 2E
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: llQmZ7ox31md1xrVsOBux0Zjo94.roa (hash: zilK3SjPa7if6qVjP4zB4BrLdTd+JnUFnl8CYZtGV0I=)
2: yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl (hash: p/+FOSmsPJ3Teh76VrBxTaDWKwunZjrKc7b/DsH1fBs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5c:eb:a4:4d:72:0f:1f:64:1d:b3:d4:3f:dc:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=77f56a902ef404c58b9ee91544b3230b4ac15868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:df:47:92:69:82:42:92:85:8a:6e:25:78:
73:84:80:ab:bc:fb:ed:62:00:e2:f9:a0:cb:6b:cd:
23:5a:ea:e4:5c:a4:83:99:d0:99:69:9c:f1:de:3b:
44:35:99:02:54:db:5d:5d:5b:62:b4:3f:f7:ad:f6:
3e:7b:50:5f:fa:67:4f:bc:ac:a6:29:fb:20:98:33:
0f:3f:53:74:e4:48:41:4f:2e:71:13:53:ed:96:af:
15:a7:9d:e3:f3:2b:c6:c5:c6:8b:ec:5f:58:17:e8:
f4:ef:a8:76:b9:82:96:17:9a:dc:9f:d6:72:c1:34:
f1:18:4b:23:ae:5b:4a:cf:2c:59:b3:48:f8:11:c5:
e4:d8:e8:a0:57:b8:7a:f7:07:73:b6:1c:ff:86:db:
25:85:1e:15:41:36:c9:dd:72:18:d5:08:56:e1:d8:
d6:c8:be:71:ad:82:cd:4c:96:0e:ce:89:65:06:68:
6d:3c:61:8c:e3:45:46:eb:67:cd:a6:fc:db:49:8b:
75:e1:dc:77:e6:17:3e:07:3e:e5:52:a4:4e:71:46:
ea:a5:f5:8e:46:e3:1b:4b:a9:33:11:4c:92:ab:0f:
27:1a:00:30:35:e5:3c:a9:7c:28:19:30:cd:d6:51:
3e:48:3d:4a:e2:df:57:c3:e5:1b:b1:ef:b6:04:43:
ae:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F5:6A:90:2E:F4:04:C5:8B:9E:E9:15:44:B3:23:0B:4A:C1:58:68
X509v3 Authority Key Identifier:
keyid:C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:76:e8:6c:ec:dc:8f:fb:ea:74:d9:7a:91:bf:00:e4:02:a9:
50:14:8c:e3:00:94:31:0b:2f:9b:f1:9f:8c:0e:e2:b9:66:d4:
7b:b3:6e:c8:c9:b3:bf:ea:0a:08:1d:1f:93:91:73:31:f6:dc:
db:47:67:8b:f0:57:f2:16:e6:f5:4d:48:25:92:75:8a:46:2e:
a1:3b:09:cf:66:6a:b1:53:22:f3:6c:86:20:cc:33:77:48:fc:
29:b6:5b:6c:a8:6b:da:98:84:27:25:f5:39:e2:6d:ba:18:f9:
35:40:84:94:53:9c:c9:92:a7:ea:6d:ca:04:a0:ce:0a:61:f0:
b2:4b:76:a4:b5:c0:6d:d6:cb:67:ce:af:85:ec:61:d2:12:64:
f9:ef:9e:7f:6c:7d:50:23:20:5d:29:4f:ee:32:41:ab:99:3f:
7a:a2:8e:ef:90:bc:57:a3:6d:b0:ec:53:32:04:dd:5d:eb:90:
93:ff:51:32:4c:50:e5:1d:cd:4c:f1:bb:1d:c7:8c:bf:c1:80:
6e:f6:50:8a:b2:77:79:4e:15:c6:32:73:71:c5:71:00:df:5d:
3f:06:dd:f5:c6:b6:ec:dc:98:c3:1a:b0:5a:cb:eb:9a:32:4f:
a9:9f:2e:24:2b:d5:a1:3b:3b:14:a6:2f:96:0b:24:e0:de:4e:
4a:ec:f4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:28 2025 by rpki-client