Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
File: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft (raw, json)
Hash identifier: 1lsQLjlUHPmWJsRDK9ABy2L8dK7fpJr4oUw1nRbM4Gc=
Subject key identifier: 1E:16:7D:90:E7:C9:97:60:AC:32:CB:AE:81:A1:12:9F:27:2B:2A:C2
Authority key identifier: 61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
Certificate issuer: /CN=61041121ccc6e65d933961fd572d59e261f21a31
Certificate serial: 0194BC3C34E3D01D2F1BAEC02069DF4170A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:49 +0000
Manifest this update: Fri 31 Jan 2025 12:00:49 +0000
Manifest next update: Sat 01 Feb 2025 12:00:49 +0000
Files and hashes: 1: EwMUoWYW4dc0tRkkx15ciptmQak.roa (hash: IxyoruIJ2PWmvP6nW1K1qsmgYgo96Vwp6Gm5YCkQlWE=)
2: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl (hash: Q7a9KYqpMKZlpn2Z4t6VC08ZcTXmzbC4+5a/ITDksWE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:34:e3:d0:1d:2f:1b:ae:c0:20:69:df:41:70:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61041121ccc6e65d933961fd572d59e261f21a31
Validity
Not Before: Jan 31 12:00:49 2025 GMT
Not After : Feb 1 12:00:49 2025 GMT
Subject: CN=1e167d90e7c99760ac32cbae81a1129f272b2ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:52:eb:e9:e7:f7:6d:c5:87:d9:0d:3a:fc:d8:
f7:aa:98:c0:8e:35:cc:62:24:0e:b2:0a:7d:d7:ad:
da:01:f1:ff:43:3a:13:0b:b6:84:9c:d9:dd:ec:f1:
bf:ea:d5:8a:f7:12:ec:f1:4c:6a:38:cc:db:21:58:
7a:82:30:f6:fc:45:51:22:12:95:7e:ee:44:8a:b6:
05:22:bf:48:b8:77:db:73:33:49:4f:f3:39:1b:a9:
6c:ce:e4:ba:df:03:f6:c4:cd:38:3d:6e:45:c9:45:
01:49:e0:a5:ef:82:c0:77:48:9b:6b:5a:3b:97:4d:
5e:3d:eb:c1:15:0e:92:8b:98:26:6d:1d:50:33:10:
1d:7b:1c:c7:35:cc:2f:f0:f8:60:c0:03:52:c4:77:
04:91:99:6a:bd:cb:29:26:d5:d2:38:bf:09:cd:a4:
56:e2:95:88:e0:29:d5:83:16:4a:17:d8:8a:d3:56:
33:24:6f:28:d3:e3:56:38:3f:0c:06:9b:76:d6:98:
f9:79:64:50:82:ce:3c:63:8e:6e:43:1c:d9:99:71:
9b:76:f3:d0:d3:f8:c2:1d:b3:d4:2d:67:00:6b:b9:
a6:d7:99:a5:b0:1e:c1:fa:61:6b:a5:a9:23:2c:ba:
85:5a:bb:14:5a:51:80:7f:ed:fe:63:1d:7f:0f:bb:
33:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:16:7D:90:E7:C9:97:60:AC:32:CB:AE:81:A1:12:9F:27:2B:2A:C2
X509v3 Authority Key Identifier:
keyid:61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:7a:0b:54:62:68:35:cb:11:c7:8f:aa:b9:5c:7d:e2:61:71:
18:88:8d:94:dd:cb:af:2c:3d:1d:38:2b:4c:07:a8:9b:99:96:
7e:97:ca:10:bf:59:20:4b:40:76:36:d3:c2:75:8c:5c:61:b6:
d8:c3:b1:42:8d:87:98:e9:ef:62:d7:09:54:d5:25:19:cc:9c:
30:5f:7d:17:25:89:8f:d6:38:0f:96:11:4b:2a:63:68:85:fa:
0f:3f:80:dd:45:f6:05:d0:32:a3:5a:c1:c7:6c:b2:ee:93:13:
29:ec:21:d2:80:30:09:f2:5c:ae:cd:65:72:97:51:14:b9:76:
da:74:1e:01:85:48:dd:a5:34:4a:52:4c:f1:c7:c8:f5:ef:51:
15:77:bb:30:cc:08:c9:ed:3a:ee:bd:2d:f1:74:84:5b:d7:27:
f1:a5:71:d8:ee:5d:bc:f5:9a:87:0a:bc:a5:91:c3:82:b9:a5:
31:ee:d8:de:17:15:35:1e:2f:8e:c8:dc:8f:e8:85:ea:16:cc:
60:14:08:2f:06:1a:73:fb:a5:58:4f:c9:26:6f:d8:d3:a1:a9:
e0:8c:1f:2a:23:39:ea:45:8b:46:38:a1:87:9b:41:cc:15:83:
c2:40:ad:40:d9:e2:32:46:ea:f6:6f:44:83:2f:de:73:12:37:
34:7b:11:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:42 2025 by rpki-client