Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
File: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft (raw, json)
Hash identifier: HG7ehCAUKKZBfzGujI1tHc+weGLYFycq3SGQDOXy7R0=
Subject key identifier: 95:6C:7E:D1:6D:9A:9E:7E:26:CB:13:6D:D2:A1:3C:F6:8E:F2:C5:BE
Authority key identifier: 63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
Certificate issuer: /CN=63b147f67e8795d959ed3530396d1256055b126e
Certificate serial: 0194BBCF0106E3F13A3167D0D456176F3998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
Manifest number: 01C3
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: TFa2ZOwxN7oGU3_kx6uIZniyCkM.roa (hash: HhfxSeGnWIjZES5ZMXYca+rgo27hAD/QZjezzNFWuIQ=)
2: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl (hash: ULoZ4ZK4vaKl0Sf2t5Z/JnLf8iTTcAE7cLFqj+kJtyA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:01:06:e3:f1:3a:31:67:d0:d4:56:17:6f:39:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b147f67e8795d959ed3530396d1256055b126e
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=956c7ed16d9a9e7e26cb136dd2a13cf68ef2c5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:10:67:91:4e:e6:54:c7:85:98:49:7e:bb:
20:3e:41:59:4a:a0:5e:66:19:39:10:ed:f0:f5:a0:
2e:47:b1:65:84:a0:77:ff:03:56:c1:29:e5:b3:43:
77:25:e8:69:80:d1:b8:ee:da:d4:6f:3d:99:41:d6:
96:38:ed:9b:72:1d:c7:10:98:4d:fb:46:19:f6:0e:
a7:50:dd:01:4d:2e:38:0f:3c:97:82:d1:75:37:77:
92:a1:98:1d:f8:cd:7a:ff:f0:6d:ed:3e:59:49:13:
15:16:83:f7:0e:57:c7:ad:84:3c:90:55:cd:76:1b:
0c:d0:12:21:43:ad:57:99:e0:83:78:5d:1c:28:83:
ef:8a:2a:41:6b:42:dd:0d:21:f8:59:f0:fd:1a:22:
d6:ea:c6:cc:1d:c2:c4:f3:08:b1:2d:88:20:de:08:
bd:08:db:16:c9:62:1e:cd:e2:55:0c:7d:94:5e:0f:
e2:94:a7:32:30:b9:15:a7:59:50:2a:39:7d:9a:45:
a6:57:11:46:14:d4:c7:c6:7d:9f:2e:ba:7a:9f:b7:
39:26:6a:79:f7:e7:80:1c:6c:92:e3:57:ec:cc:a2:
ae:c9:32:f5:1c:14:62:0e:54:e9:10:0f:38:bd:47:
9c:cf:db:4c:91:50:c2:fc:a9:2a:57:5d:bc:cc:29:
f9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6C:7E:D1:6D:9A:9E:7E:26:CB:13:6D:D2:A1:3C:F6:8E:F2:C5:BE
X509v3 Authority Key Identifier:
keyid:63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:55:d2:54:7b:e4:69:21:d9:4b:7a:15:c5:a4:2e:c4:08:d6:
61:88:71:51:24:97:4e:40:2b:74:28:cb:82:8b:e5:56:ff:fa:
10:0f:62:f2:6a:1b:f7:96:e1:96:91:f3:41:a4:37:a6:68:b2:
e2:ec:70:39:ba:e8:cb:4a:78:5b:d2:16:eb:75:8f:48:db:68:
59:05:6b:af:0c:fb:2a:b6:20:af:d7:f6:25:66:2e:9c:bc:db:
f8:99:e4:aa:03:b7:47:95:25:55:1a:9d:c8:df:84:20:23:fb:
f8:cf:da:b5:65:b0:78:31:de:ab:ae:b1:d2:1b:bf:32:e4:69:
57:89:96:b8:fd:90:44:72:d5:a2:89:62:9f:26:92:bd:52:90:
02:ce:05:fa:60:24:35:05:43:cf:bd:6d:ec:41:0e:aa:0f:b5:
bb:d4:0d:88:c6:eb:91:e9:55:38:09:f2:84:f5:91:da:b0:54:
31:1b:3a:ed:8e:1d:79:5e:b1:65:21:f9:b2:c4:54:e7:2e:db:
24:9d:91:e7:80:2f:ba:e5:52:8d:f2:86:93:09:ab:65:2a:b2:
ee:96:ad:22:2c:d7:ef:a6:89:b7:ac:f6:af:71:b5:ff:c3:fb:
76:f4:47:95:8d:4f:97:aa:ac:2e:b9:a3:de:c1:d3:56:c9:60:
1c:af:48:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:02 2025 by rpki-client