Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: bO7ZmOdAqlAn7vh/ELJ5DmIgcqonCf56xqbQY6kUmoc=
Subject key identifier: 6D:F2:E2:B1:45:D6:D5:27:D7:B5:04:6E:AB:BE:AD:6C:2F:83:B7:98
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 0194BD17D0FF8283A31A44CDC87D4586BE82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: 0UbqABxvR9Kqt-i2oDJKBmEOIcY.roa (hash: sOBF/jnuYbPKw9b4UfAAmGDCy2JYvqAzi0krYUHoJ4Y=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: Ztw18tzCGwQF3SfDIMxiquZaRJJm8nv4PhT1hmzafTE=)
3: _wI9dgfN1p8T3ArXyq7NUMinHsQ.roa (hash: zHVbZrPjByz7ecEstvck1XG+KadlzRwYPNhhpEtqQfI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d0:ff:82:83:a3:1a:44:cd:c8:7d:45:86:be:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=6df2e2b145d6d527d7b5046eabbead6c2f83b798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:7d:6e:d3:38:9f:ab:2f:22:d2:13:92:18:
02:81:ab:7b:1c:a7:ca:36:a6:50:51:63:ce:5a:63:
ed:4d:e2:18:6f:3f:75:4e:cb:a2:20:3a:7d:05:8b:
b1:02:5a:54:cd:57:d3:dc:66:a2:0a:c1:a7:bb:34:
12:de:85:69:72:18:7a:d2:ef:a0:41:07:1c:6b:a7:
39:12:9b:16:7a:b9:46:34:0b:89:2e:ce:d1:c7:62:
63:c6:00:cf:50:4a:b7:b2:93:c8:ef:f3:b4:79:63:
69:f3:db:e3:43:06:83:6d:c7:f4:b2:05:a3:9a:af:
14:8b:8f:03:d7:78:37:fa:ff:32:45:66:64:b3:37:
56:8f:74:da:33:71:24:04:6b:1d:b7:3d:80:b8:70:
48:54:35:1f:d3:d7:ae:48:57:24:03:90:d7:65:73:
4f:be:d4:bc:6a:f0:97:9e:00:9c:ef:10:8a:c8:f2:
e8:02:aa:69:2a:3b:db:07:13:0c:16:53:ae:32:34:
50:d9:f7:a1:16:8f:80:25:40:4d:af:9c:93:6c:bf:
b1:a0:c7:95:32:f1:4f:09:7c:3f:13:6b:d7:e3:a5:
e3:f0:00:e2:04:aa:89:cb:8c:af:83:ae:d4:5e:07:
89:a9:ea:90:9f:7a:73:81:06:07:1e:85:80:06:95:
f6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F2:E2:B1:45:D6:D5:27:D7:B5:04:6E:AB:BE:AD:6C:2F:83:B7:98
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fb:93:9b:52:e1:80:07:50:87:44:64:5a:6b:53:fc:dc:a3:
f8:94:9e:f4:ff:95:95:cf:c2:54:be:c4:10:9f:ea:40:fa:c5:
f0:a7:82:49:03:1c:02:af:72:de:d4:dd:2d:e7:40:5f:10:c9:
fa:44:cd:31:66:39:ed:81:61:c4:42:d7:66:39:5b:1d:de:79:
39:08:30:ae:56:d5:1d:2e:46:2d:43:9e:f2:b3:80:ef:3f:96:
05:3f:c4:c4:bf:be:3b:ff:97:2f:d2:16:15:35:d1:fd:75:86:
a8:c7:6a:58:38:bb:dd:17:3a:e9:60:56:37:d5:e2:00:21:61:
10:1f:12:45:1e:a1:67:3c:03:b0:bd:ff:38:3b:be:09:01:4c:
85:45:fa:e7:03:c7:88:b1:81:b2:1a:92:59:18:40:a4:f3:e4:
b0:2c:2b:88:19:99:e0:9b:ad:d0:b4:8a:d7:56:d5:5e:f3:50:
a0:0d:13:26:0c:90:d5:34:b2:1a:25:61:0e:eb:ba:b5:32:0b:
53:dc:7a:67:be:ca:5c:0a:09:44:6d:69:f4:92:5a:d0:4f:8f:
02:51:18:0d:cd:ef:0f:93:87:2d:48:a4:a9:d1:40:5f:c3:92:
ab:4e:1c:82:8a:55:18:96:ac:51:6f:66:97:09:93:03:66:0f:
80:ab:e9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:07 2025 by rpki-client