Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
File: Y0laTOy-r7Pq327QNJuwuW2kZO4.mft (raw, json)
Hash identifier: ahe3W9l8AcpNU2/sztl1n252fN0qHrt+FiY7UU3FtBg=
Subject key identifier: 1B:BD:74:64:71:C4:F2:9A:42:B4:7C:D8:42:46:F4:FF:24:23:0B:F3
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Certificate issuer: /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial: 0194BD8560DFD335A0640E7018146DFBA8C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
Manifest number: 0ABD
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: GHhiTWJIrRnBFMlK6xuYQ1nDUn8.roa (hash: MsTf0syszxTszc8q1axFwJFUrUTMc1YgfxQY+NXxD28=)
2: Y0laTOy-r7Pq327QNJuwuW2kZO4.crl (hash: Y37q6E0sP+2cVYVqZrvS7OpbtGMMg/PyZCKCRi8fYOs=)
3: r8SyFv2fzba2rsaAZpaSWzcngkw.roa (hash: nKMxn+pRmGytAQ++Vu6+D6lCb2MTuAqsH86iDcF9gs0=)
4: yLm-AHf2Wu1baGR2558SeGJ9vpc.roa (hash: /Bd5Eq0QqwLJoY4wAtUd+ZWldK7GG5PZ0zCSIxN6jTY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:60:df:d3:35:a0:64:0e:70:18:14:6d:fb:a8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=1bbd746471c4f29a42b47cd84246f4ff24230bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:74:64:e6:be:0c:22:81:81:9e:d0:03:54:ed:
a4:2a:4e:2b:0a:ca:99:55:f0:be:10:0a:c5:07:0c:
c7:b2:c4:4d:f1:a8:b5:35:6c:21:c5:8f:02:7e:d0:
3a:8c:7a:73:6f:f7:5d:ea:73:52:03:19:92:6f:5a:
71:d0:82:f5:10:b6:48:ea:1d:79:7f:a3:dc:35:14:
c2:91:ab:b4:2b:3d:36:c4:6e:90:a5:a1:9e:c4:f4:
91:fe:b3:83:e7:6d:da:f4:b8:43:8e:35:65:28:e8:
69:7b:a1:47:e0:84:41:ec:3f:de:7e:4a:ce:7e:13:
0c:91:86:c4:ff:07:74:4c:f6:4f:6f:01:37:3a:ba:
eb:01:3e:fd:8a:a7:2a:46:01:3d:55:11:b4:83:06:
b5:b1:be:b4:85:b9:c2:94:12:33:c0:5a:19:a2:d8:
03:07:3a:a9:6c:90:e1:c0:91:a2:fa:ca:01:22:97:
0d:de:4c:0f:72:7b:9d:15:77:b5:a4:0d:6d:71:a2:
5f:13:5d:f2:d2:9b:97:ae:f9:94:73:c4:33:75:29:
de:f6:c7:8b:37:8b:ee:27:ea:77:7c:f8:5c:58:1e:
66:7f:92:fa:9d:1f:4b:e6:92:3e:e0:9f:93:6e:50:
93:05:8c:91:31:99:4a:9a:32:37:84:8f:0d:ed:9e:
27:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BD:74:64:71:C4:F2:9A:42:B4:7C:D8:42:46:F4:FF:24:23:0B:F3
X509v3 Authority Key Identifier:
keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:87:2d:74:4d:fc:c4:f5:45:00:ef:8c:45:05:6a:80:1e:4f:
cc:23:80:50:8b:75:6a:a8:f0:f4:3f:f5:4f:8a:aa:cc:9a:48:
d6:a3:86:d6:65:80:7f:0e:9a:32:1b:f6:f2:24:3f:79:98:af:
f7:61:30:6a:3b:16:64:29:61:a2:2c:0f:e9:39:04:dd:62:cc:
e8:0c:0f:b6:2d:4c:a6:c2:c1:89:29:5f:11:9e:1f:0e:54:7e:
2f:a5:dd:6b:90:55:4b:8b:14:94:07:c7:53:60:34:99:3d:95:
d5:e0:cc:93:6d:bc:0a:7f:86:4f:ed:95:e5:02:80:12:4c:b9:
33:5d:8f:0d:3e:e3:23:82:14:de:12:23:80:34:52:3c:da:fb:
07:0d:43:dc:0a:bb:94:11:94:59:14:4b:49:ad:46:d4:29:92:
5b:87:0c:62:75:c0:f3:c4:0f:fc:1f:42:e7:c4:2d:17:04:07:
3f:58:6e:ca:5d:34:ca:de:3e:80:6b:15:ee:8a:67:7d:ce:3d:
ac:03:d9:78:3c:7f:0e:2a:7c:38:2c:a6:84:49:c8:26:55:15:
f7:3a:15:9d:42:96:ab:8c:45:b2:54:f3:6b:f5:48:c1:a1:56:
b7:28:83:c7:e0:dc:9f:96:25:06:da:88:40:58:d2:64:9e:ce:
a8:ef:c6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:52 2025 by rpki-client