Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
File: yIxTtHfDv6cLYfQntHmUwtF4NFg.mft (raw, json)
Hash identifier: cPVAz7UaJ1djfvFa0HazK4VdXFXXVl3D48yvWAJSvVY=
Subject key identifier: 19:45:03:5C:E3:69:7D:D5:BF:8B:26:78:C6:84:76:D8:4D:53:32:2A
Authority key identifier: C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
Certificate issuer: /CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Certificate serial: 0194BC731B8D46D806BC52ED8396D6D1D46A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
Manifest number: 1413
Signing time: Fri 31 Jan 2025 13:00:47 +0000
Manifest this update: Fri 31 Jan 2025 13:00:47 +0000
Manifest next update: Sat 01 Feb 2025 13:00:47 +0000
Files and hashes: 1: m58bu936joBld4DytknROe5jx80.roa (hash: NrLcVOqSqVsHWkNiV+l2TPI8nTmNKxpp0ie7MxAwGUE=)
2: yIxTtHfDv6cLYfQntHmUwtF4NFg.crl (hash: xKYLN4Vuy6qImBaN+OcQ6uJMnmTU0X8XtrCGHfY+Res=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1b:8d:46:d8:06:bc:52:ed:83:96:d6:d1:d4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Validity
Not Before: Jan 31 13:00:47 2025 GMT
Not After : Feb 1 13:00:47 2025 GMT
Subject: CN=1945035ce3697dd5bf8b2678c68476d84d53322a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:74:8f:b4:f4:3d:c8:22:2f:8f:1f:16:8c:
b9:0d:79:88:a0:91:d1:43:13:cd:f7:7b:3c:c0:47:
8f:c2:77:ee:aa:fd:38:35:44:20:3a:27:7b:48:92:
2c:cb:b9:70:2a:7c:63:94:ae:d4:69:6d:56:00:bf:
de:b6:82:59:17:a6:7d:1e:e6:86:2f:30:3e:b5:3b:
27:de:03:3d:6a:19:f9:4e:eb:e5:a2:f3:aa:d8:79:
cf:73:d8:30:e5:ed:56:9a:78:bf:36:98:19:32:df:
ce:f1:af:4b:e0:3d:79:56:a5:f2:a5:7f:69:8c:ef:
36:02:ab:33:d5:be:e7:8c:33:54:08:2e:3d:a9:b9:
34:f2:c9:07:2a:58:33:e6:03:7f:2c:a7:99:c3:72:
52:88:d5:cf:17:c1:95:bc:83:82:cd:5f:59:c4:d4:
74:d6:20:1e:87:1b:1b:d4:19:6a:fd:3f:b3:d5:5e:
37:bf:fb:b3:07:c9:b1:06:7e:37:7d:0e:b1:90:89:
82:f1:fe:75:f9:48:3c:ad:70:30:41:68:94:9b:2a:
19:00:19:97:ad:84:8a:49:fe:24:9b:ac:4a:ad:5c:
60:12:1b:26:0c:8a:c3:27:dd:0d:cc:a9:81:e1:6b:
85:e6:05:5e:0b:22:53:9f:fd:5f:02:67:e9:f2:52:
f4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:45:03:5C:E3:69:7D:D5:BF:8B:26:78:C6:84:76:D8:4D:53:32:2A
X509v3 Authority Key Identifier:
keyid:C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:10:12:67:ab:b2:2c:8c:e8:63:df:44:b9:b3:12:4a:68:4b:
f8:ad:81:17:3c:bb:b2:8b:92:30:8d:fa:76:21:4d:52:c2:22:
c5:c3:c6:67:5f:60:11:c1:7e:cc:d7:dc:e7:fd:d5:24:db:c6:
73:52:df:c0:20:70:f3:84:f9:00:49:e4:86:3c:e9:2f:a5:2e:
96:31:09:39:7d:66:69:3d:09:75:44:6a:bf:42:6d:7e:b3:ef:
d4:27:c5:72:cd:55:21:b9:6b:ad:8b:be:f7:3a:c3:44:09:d2:
ef:c6:ee:e1:b8:03:61:26:1d:d1:6e:52:89:1d:16:d1:4e:52:
47:4c:81:da:79:40:98:57:df:3f:88:5e:84:61:3d:51:e1:57:
f5:c7:a5:6d:e8:b6:c9:8e:95:8b:d1:ca:74:a0:ab:ba:69:21:
df:c0:93:e0:0e:3b:be:2e:55:1f:57:9c:4d:a4:94:ef:3e:7e:
f4:11:ce:0a:f8:05:c3:f3:09:01:f3:d9:8e:4b:05:1b:6c:fc:
4c:90:15:61:aa:34:e5:e5:ab:6e:f0:96:1e:8e:5a:2c:b2:96:
c4:b4:33:cf:42:36:06:bc:0a:b2:22:a8:c7:82:63:7d:4c:91:
07:f3:5d:e4:9c:94:90:78:3a:7e:f4:c7:81:28:e0:91:67:af:
00:dd:70:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:54:18 2025 by rpki-client