Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
File: yHR0zrha8xEi7eWG1NZbD1tNl_A.mft (raw, json)
Hash identifier: qe9r0MLnD/lLaHKdF0T5sAcUshsPR/IFeVkVKnAHbPo=
Subject key identifier: 8C:FE:67:3C:B3:A7:97:86:26:74:6F:A9:41:F1:45:41:4A:B4:D1:91
Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
Certificate issuer: /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Certificate serial: 0194BC04A5E8D8B793E263D0AA6D000B8C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:08 +0000
Manifest this update: Fri 31 Jan 2025 11:00:08 +0000
Manifest next update: Sat 01 Feb 2025 11:00:08 +0000
Files and hashes: 1: JDEgNxAB09AUh6owQNZeZtBtGuM.roa (hash: mbF3wS/KwnnaSKoNDphyfrKVcXZhcSZyXmhtgyyil/4=)
2: h9QHPHPgriAH9IrwluwQdT3LGdE.roa (hash: Tqsnz0XXMc5csYtxxzDh5cjERR+4yLVbUs/Q+m4fJwI=)
3: yHR0zrha8xEi7eWG1NZbD1tNl_A.crl (hash: hNZ4sopNAGHZRjjN7VRXDi73tecGz+SBSxUce6uEz70=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a5:e8:d8:b7:93:e2:63:d0:aa:6d:00:0b:8c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Validity
Not Before: Jan 31 11:00:08 2025 GMT
Not After : Feb 1 11:00:08 2025 GMT
Subject: CN=8cfe673cb3a7978626746fa941f145414ab4d191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1a:1e:5b:0d:2a:19:2d:5a:9c:70:7f:d6:32:
8b:fa:1e:22:70:02:69:6c:91:c9:f2:af:62:32:f9:
51:ab:88:4d:fb:ec:85:ba:0a:64:b6:7d:4d:a2:1a:
ea:3e:f2:fa:ba:4a:bf:fe:4e:08:28:a4:1b:e4:b3:
58:27:83:00:a2:6a:7e:62:71:06:20:38:41:d0:d8:
7f:12:5f:40:b4:d0:14:27:e5:35:14:6e:9e:d2:77:
5b:ab:59:64:2b:2d:66:ef:5c:5a:17:12:d3:93:eb:
59:8d:e7:86:31:bc:ae:55:0c:35:8f:fe:c5:18:85:
96:a9:e7:aa:fc:6e:0c:dd:38:f5:63:6e:6d:56:8e:
a5:c6:7b:e0:6c:56:ed:ac:04:2c:07:ad:8b:11:fd:
b2:f3:77:11:15:df:e6:9a:f7:68:21:a4:67:b0:aa:
37:6f:09:a6:cc:b7:5a:a9:a9:a4:35:89:f6:5b:07:
5d:46:2b:df:39:4f:dd:19:e1:36:25:6a:98:26:4d:
0f:e0:34:42:dc:fa:e6:d5:aa:0c:d3:6c:4f:85:16:
d6:a1:5e:91:21:5c:05:35:81:21:59:de:37:fb:0e:
b5:72:34:dd:ca:02:d1:26:34:00:24:a3:b0:f2:93:
af:1d:10:47:14:aa:b1:fc:2b:80:1a:40:bb:7c:d3:
80:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FE:67:3C:B3:A7:97:86:26:74:6F:A9:41:F1:45:41:4A:B4:D1:91
X509v3 Authority Key Identifier:
keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f0:75:f1:c6:5a:e2:18:73:ec:be:f7:f1:df:48:59:50:59:
88:34:2c:e5:7f:35:59:c6:cc:84:cb:3f:73:c9:3d:98:09:b8:
db:06:40:af:99:27:ba:44:84:7d:d6:fc:be:ba:e1:d5:2f:c4:
83:a7:9c:be:41:fb:7e:6b:ca:50:cd:2e:fa:97:f9:d0:73:78:
62:a2:9c:25:a5:f1:a8:4d:b4:b0:54:d9:3d:fa:60:4f:39:ef:
40:de:8e:17:18:97:a4:ea:59:5e:d9:f7:6d:f4:84:fa:66:ec:
1b:28:7b:02:9e:50:85:89:68:63:62:d9:9c:91:07:fc:c6:35:
59:4d:d3:c2:f3:98:67:f2:4d:03:ab:76:e9:75:75:79:92:ac:
92:4b:ca:dd:8a:8a:c8:6a:93:cd:4f:ab:90:df:03:10:5d:3a:
09:61:e8:cd:95:c5:df:04:03:37:f5:a3:e6:99:d6:48:61:81:
9f:73:83:1a:ba:3d:9f:94:d9:06:4c:a3:d6:e5:49:ad:a5:7e:
e6:4f:0c:04:04:3e:90:ce:0f:c1:78:bf:91:ca:bd:16:c1:3e:
52:0f:b2:cf:3d:6c:45:c9:81:bb:4e:ac:3f:6b:88:bb:36:6b:
da:04:84:f6:92:78:dc:19:a3:df:41:2f:e5:78:99:13:4a:14:
ce:00:36:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:34:52 2025 by rpki-client