Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
File: Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft (raw, json)
Hash identifier: DzKdJBeZueXTRWezjUFylFb0OQMwVqzrAhM6qKksCdI=
Subject key identifier: C2:A0:03:B0:3F:61:CE:9E:12:FF:87:AD:84:7E:17:90:9D:B0:F7:58
Authority key identifier: 63:B4:98:B7:7A:D9:9C:D3:6E:87:6F:0E:2F:ED:69:98:19:2B:C6:12
Certificate issuer: /CN=63b498b77ad99cd36e876f0e2fed6998192bc612
Certificate serial: 0194BCA98DA81CFE43B2BA68ED29AFE681ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl (hash: QaqUMw3zuKvjALSiZPClbbB3/YFZFFh31fmdnQ2sOOU=)
2: sWYhGXeqyssjSaIBaIHXBsJLaf0.roa (hash: kaXrbIabkDodddf746vh0MWQpeqh3LiJ27zAPi60XKM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8d:a8:1c:fe:43:b2:ba:68:ed:29:af:e6:81:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b498b77ad99cd36e876f0e2fed6998192bc612
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=c2a003b03f61ce9e12ff87ad847e17909db0f758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:27:9c:23:ab:e4:5c:a2:9b:78:d6:d0:87:d9:
04:c7:89:6a:92:b7:5e:aa:51:d8:28:b0:f0:c0:64:
b3:8d:91:e5:a0:f0:42:73:35:a6:a2:a5:eb:24:41:
8e:a6:83:78:2d:ca:0c:91:51:5f:cf:84:58:35:63:
6c:54:77:ac:db:50:08:b5:cf:27:c2:ae:e8:f0:14:
21:99:21:32:28:78:45:80:77:a7:78:01:67:9f:e5:
f1:1d:a4:6e:6b:76:97:49:7d:37:62:49:0b:13:9e:
89:0b:44:9b:47:2b:79:53:1b:c7:ec:e0:1f:a5:a7:
2e:c5:c4:e2:88:1d:35:d1:c8:26:94:87:0e:e8:49:
14:f9:e1:e7:a5:cf:bc:53:b5:a6:77:06:10:c0:3d:
71:27:2b:72:2a:2d:4b:af:08:ed:47:48:73:44:ff:
66:d5:69:c5:78:6f:12:9d:46:fb:98:2b:ed:a2:06:
93:b6:90:99:1e:ba:66:a7:e7:73:bf:16:98:4f:7b:
5b:d6:95:a8:4a:01:46:2f:ed:3a:01:be:7a:51:2f:
e8:0c:97:c4:d1:95:b4:4c:f8:fc:e5:57:61:e0:2b:
cb:c4:0d:be:37:a4:30:81:fb:96:79:8e:17:b9:38:
5c:b6:e4:8d:d1:bd:f1:6e:3f:08:fd:ba:3c:f7:59:
b0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A0:03:B0:3F:61:CE:9E:12:FF:87:AD:84:7E:17:90:9D:B0:F7:58
X509v3 Authority Key Identifier:
keyid:63:B4:98:B7:7A:D9:9C:D3:6E:87:6F:0E:2F:ED:69:98:19:2B:C6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:23:5f:51:9a:4b:7f:83:b2:f6:52:c5:c8:24:e8:b6:ce:5a:
57:fa:b9:4d:d7:75:80:57:64:15:24:f4:4b:b8:bd:e3:7e:5f:
f5:4d:3a:c6:04:55:b4:66:78:9e:e6:8d:e8:13:bb:08:5a:e2:
2b:b9:c3:2c:ee:34:f4:4c:24:ef:60:ff:29:8a:e9:de:87:22:
3d:41:ef:b1:44:ee:f8:97:37:44:09:62:82:ad:a2:b1:10:df:
d7:76:0a:45:4f:77:32:45:0a:68:cc:1a:42:48:fc:bf:eb:10:
66:52:c0:d2:2d:0e:e6:6a:de:86:20:64:a5:3b:2c:13:0f:e0:
fd:79:24:3d:24:1b:3e:bc:cc:01:87:26:21:2f:f7:53:0a:7f:
c6:e6:12:29:4f:8b:22:9f:17:e0:db:18:30:c7:f1:44:35:ab:
c1:cb:1e:2a:f8:4f:ba:d8:bb:ea:f6:9a:07:73:d8:35:e4:b4:
2a:1b:90:31:09:29:51:74:15:6f:41:4f:29:79:a0:ee:dc:db:
be:8c:9e:77:ee:6a:f4:95:71:b5:ef:65:aa:c5:3c:b2:16:2e:
31:55:72:70:87:36:d3:54:85:6d:d7:1e:bc:5f:58:3f:e2:60:
64:f3:6b:7f:dd:18:9c:a2:a2:e0:e7:41:75:20:9c:6b:a5:ce:
8f:d2:66:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:24:23 2025 by rpki-client