Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
File: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft (raw, json)
Hash identifier: QgylkTjPwK4hPcalTR/IqlubDoAC6MHMLKrSshlatek=
Subject key identifier: B2:2D:92:75:19:4B:50:69:E7:1B:13:AB:25:8D:EA:07:A1:E9:82:30
Authority key identifier: 63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
Certificate issuer: /CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Certificate serial: 0194BCE0C67A258211A44B3877562C807F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
Manifest number: 0A0D
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: 2ATvNbnGawNlZZ5eknfDSbXFIzQ.roa (hash: tXSd9lU5fCgD64Z/fTQv/A1ZJJrB3ZcLdqsIZET5sKI=)
2: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl (hash: cpIDJIBq0oNkCXCkET2NWCbvnkUjumfpBNFmGW9KYeU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c6:7a:25:82:11:a4:4b:38:77:56:2c:80:7f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=b22d9275194b5069e71b13ab258dea07a1e98230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d7:6a:f0:65:48:08:4d:5f:c4:f0:d3:67:a1:
05:d8:53:3a:96:77:e1:f6:4b:15:9a:75:b1:7f:55:
c7:0f:c4:4f:a1:17:c7:b1:1d:7c:e9:58:1f:55:72:
60:6c:63:64:21:06:30:97:1b:9f:58:65:be:67:9f:
9c:0b:a3:dd:0a:36:4f:0d:59:73:a2:49:27:47:70:
5f:8c:7e:56:07:95:04:62:85:c6:b6:58:2d:7b:04:
ab:82:7a:06:64:21:a2:0c:10:88:7e:fa:75:5b:05:
3a:07:c7:72:93:ce:82:9c:a5:54:65:0e:04:fd:02:
be:d3:42:b5:7f:07:4f:0b:05:88:bc:bf:93:ed:bc:
c0:ed:65:b3:66:df:93:48:a9:a5:74:c9:8b:4a:31:
54:21:2d:96:af:a4:3a:7f:43:fd:72:1c:b4:dc:14:
fd:1d:ce:4e:db:9c:64:3f:6b:a6:ed:e3:bd:ca:7e:
a9:69:47:be:ec:53:80:86:95:2a:83:00:aa:0f:ae:
cf:3c:63:f3:90:61:33:84:f7:4a:79:1e:5c:c5:1c:
2a:c4:f9:16:d8:79:7f:4e:c1:e0:c8:d8:f0:06:35:
d0:22:14:da:1b:95:52:6d:b1:c3:7f:60:5d:04:e4:
17:21:07:f5:0c:ad:6b:ef:71:00:dd:ca:f2:53:0e:
55:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2D:92:75:19:4B:50:69:E7:1B:13:AB:25:8D:EA:07:A1:E9:82:30
X509v3 Authority Key Identifier:
keyid:63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:20:65:87:78:52:bc:72:13:51:6c:ff:62:d3:87:54:d3:92:
72:81:51:df:81:91:7b:fc:f1:e7:21:d6:9b:85:d9:f2:dc:cb:
7f:ac:7b:38:85:7b:77:28:4c:57:42:8f:35:f0:fd:ba:4f:6e:
e9:18:61:16:eb:b0:e8:fe:a1:de:1f:1d:01:ae:ac:44:cd:68:
f4:02:35:0c:d2:6d:be:5a:d0:6b:8c:d5:8d:3b:1b:03:99:f4:
fa:f2:9d:ae:51:74:05:26:e7:d0:7c:d3:ed:2f:03:cc:46:a4:
f2:59:16:dd:4b:e8:6e:2b:1e:29:c4:03:8a:4c:b6:84:41:23:
00:c7:75:5c:28:3a:e7:0d:76:ae:f6:fe:51:c7:3c:03:8f:fb:
b0:1d:f1:9d:07:9e:a4:04:e3:1f:e0:54:29:9d:eb:c8:11:38:
68:5a:0f:4f:11:6f:ae:06:05:ff:b0:51:fd:70:c0:0a:1f:68:
c9:8a:0c:55:2f:98:41:bc:7d:77:87:af:33:4f:1e:35:fb:fb:
3f:36:75:61:8b:7c:f9:9e:12:37:4e:a8:16:61:8b:62:7f:d3:
36:1a:8c:9a:34:18:4c:6b:d4:b2:c9:75:52:9e:1b:81:13:dc:
5e:14:fc:02:79:2a:bf:d0:b8:b5:a8:cf:7d:6d:8e:28:b4:d2:
94:97:4c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:25 2025 by rpki-client