Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
File: YDgxphvIqPTLhYhwIvtvhjlzRdw.mft (raw, json)
Hash identifier: pqqtTwlr0idORJU0pqKD/HjEnZI+88JE+EM9GE1hDRo=
Subject key identifier: 4A:03:C0:46:95:D1:4D:2A:53:CB:8A:64:73:BE:5A:C2:B7:B3:26:35
Authority key identifier: 60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
Certificate issuer: /CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Certificate serial: 0194BC04BB9C096CB4F23EABD44A4F420DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
Manifest number: 0B3B
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: YDgxphvIqPTLhYhwIvtvhjlzRdw.crl (hash: KWokXWQHf47UrRIK4cIiMMIFqZp377tc3QzxUtqPLrU=)
2: _mYolmt2fF0wabxHp1kAcOpFjJQ.roa (hash: Ni2pHhwSkaVczL8tsRRH+ZM9PBph4eSrgcYZ18OoRUY=)
3: ucZk7RPUTaIeSxLkQGWFeSNWVec.roa (hash: 5rWJbfTjArOhmwmwJF8k3Fgre3TIPFtEAx1ngBb1v5c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bb:9c:09:6c:b4:f2:3e:ab:d4:4a:4f:42:0d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=4a03c04695d14d2a53cb8a6473be5ac2b7b32635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:54:4a:c8:41:5c:5f:59:12:40:a6:3c:c5:cf:
c9:d3:ec:ca:ca:1b:50:75:75:3d:b9:e7:c6:d1:4e:
13:23:0f:3a:de:70:2b:82:11:15:09:3a:f9:01:95:
b2:98:bd:47:00:cd:eb:c9:0d:c8:8d:5c:28:eb:ae:
9b:69:20:20:56:2e:b0:2b:c8:fa:3f:fa:79:96:03:
8a:98:d6:45:2d:6b:04:db:5f:f8:ed:04:40:d4:e0:
d5:74:8d:36:16:d2:1c:ad:ec:06:76:ee:5d:dc:56:
16:c3:0a:87:e1:c8:2d:17:ad:24:bd:37:c9:33:5f:
eb:9e:d4:bc:6d:64:c9:40:93:c8:65:09:cf:7d:ee:
f9:68:de:52:24:ac:4b:c9:96:ef:08:05:e7:06:d9:
d0:08:f9:80:dd:b4:66:fe:08:f8:31:5a:b4:a6:40:
a5:4d:1e:c8:82:53:d8:37:7e:48:59:3f:e6:42:47:
17:9f:45:43:e8:0a:3a:4d:5a:62:65:ef:75:1c:55:
b2:fe:2d:1e:2e:f8:9e:15:c3:88:f7:75:0f:f8:0b:
5f:8a:fe:b7:10:0b:59:eb:5a:74:9c:1f:2a:1c:b6:
4c:79:58:42:58:62:4c:c7:9f:f9:31:ce:95:97:cd:
54:48:af:03:34:1a:8d:a0:85:5d:c4:a7:24:35:57:
6e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:03:C0:46:95:D1:4D:2A:53:CB:8A:64:73:BE:5A:C2:B7:B3:26:35
X509v3 Authority Key Identifier:
keyid:60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:47:bf:d7:fa:a0:10:40:bb:61:43:b5:72:f4:01:0e:b2:d3:
c8:b2:14:2b:c2:c5:50:7d:3a:1e:f0:7d:38:1e:cb:ef:c6:a0:
f0:9c:a7:e8:b4:d5:66:65:b1:6b:ee:3f:19:29:d3:c7:5f:5a:
6c:46:6d:65:bc:c4:f3:07:c4:ae:c4:9a:9a:22:2a:fe:e6:32:
18:e6:5d:b5:ed:55:0d:75:fc:86:9e:7d:65:f2:06:b8:ed:a4:
5f:88:96:14:aa:33:09:5b:63:f4:ec:e8:fc:87:20:62:f3:d1:
ad:86:b7:6d:b9:f4:8a:2f:fd:b9:49:34:fc:2a:15:bc:10:bc:
46:56:24:1d:ae:51:88:13:1e:32:23:ee:a3:31:54:a5:7a:d1:
ce:71:12:a2:16:e1:db:3e:73:ea:f7:e2:44:a7:6e:08:a7:7c:
8f:5b:d6:04:c0:7e:3c:85:5d:a9:07:f9:36:79:78:5d:cd:9f:
c5:91:4f:2a:7a:d8:08:90:0d:d0:fe:55:94:cb:6d:8a:6c:97:
b7:49:78:b2:aa:d6:75:04:1b:ee:4f:42:8f:06:53:a5:4d:9a:
5f:bc:22:16:f1:4a:be:0d:6c:6d:89:9f:39:50:a4:8e:dc:32:
3c:fa:5c:87:47:18:67:2e:20:44:2e:6a:f4:3c:74:36:9d:fa:
00:2d:33:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:47 2025 by rpki-client