Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File: Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier: DUgMREbERJLcI5rQKAaB1zrecy+tXYeC0gitxmOlTuU=
Subject key identifier: 4B:05:A8:98:4B:08:BA:8A:F0:9A:72:E9:40:B5:A1:D5:CB:9E:97:CE
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer: /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial: 0194BBCE148B60CD702D599DBEE2D6DE0A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 10:00:32 +0000
Manifest this update: Fri 31 Jan 2025 10:00:32 +0000
Manifest next update: Sat 01 Feb 2025 10:00:32 +0000
Files and hashes: 1: XVpCVjKP_Ci3PBb-SDD9rEF23jc.roa (hash: fb/E1ZjjaeELkfBCLdUXpvrP74l6BqHMfdZ9UTlkuWc=)
2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: 1bNRv1D0dDBEH89h3mRkLAz/sOFEg5slJxm1Nj8CSn0=)
3: Ygr-d1fsjv6D-0-qsUYAE5I_CT4.roa (hash: jcx2vm/E34fLSi/zBhEY8LVOd5D4GVaLPMNLqe0cuM4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:14:8b:60:cd:70:2d:59:9d:be:e2:d6:de:0a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Validity
Not Before: Jan 31 10:00:32 2025 GMT
Not After : Feb 1 10:00:32 2025 GMT
Subject: CN=4b05a8984b08ba8af09a72e940b5a1d5cb9e97ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:25:58:d7:22:e0:aa:cb:1b:bf:fa:a8:29:
7c:fa:80:7d:a0:f2:91:69:3b:8a:f7:f1:b6:71:f5:
ce:bc:5d:98:b6:6f:44:59:58:9d:94:a2:fb:77:f2:
ab:25:b3:a9:24:a9:93:8a:d0:91:bf:f7:34:e7:f3:
9c:44:c2:ec:5a:f3:ec:17:5a:73:59:93:44:b6:ad:
80:6c:47:ad:4b:0d:3e:dd:aa:2f:b3:3b:ec:a4:ed:
ec:48:61:34:10:62:82:9d:a2:24:28:2b:3a:6c:25:
82:b0:56:7e:d4:b8:24:a7:49:81:e2:e8:a5:72:45:
db:59:85:e7:d4:e8:0b:59:5e:66:78:82:b6:8a:3a:
5c:5d:fa:a8:cd:2d:80:52:71:74:51:cc:5b:97:27:
6d:11:ef:d2:07:02:83:39:47:ca:da:b3:e7:b5:e3:
17:e0:1c:1d:ea:00:42:9d:5f:be:ef:c3:cf:7d:d2:
18:07:05:17:e5:de:32:0a:2a:01:4c:6d:49:9d:9a:
7d:bc:19:d3:05:0c:7d:c3:06:d8:12:45:da:e6:39:
62:84:8a:fa:45:d0:d6:f3:15:ef:94:50:15:dc:4c:
1c:8a:b1:30:a1:60:13:c2:d4:cf:73:90:9a:9b:b2:
c0:42:3b:4a:08:de:2a:44:d5:75:0e:57:34:fe:a4:
b9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:05:A8:98:4B:08:BA:8A:F0:9A:72:E9:40:B5:A1:D5:CB:9E:97:CE
X509v3 Authority Key Identifier:
keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e6:ed:3b:83:9b:b8:dd:63:5c:3b:c9:c0:b7:ab:a8:e6:7f:
64:4d:d6:04:4e:a8:57:41:eb:36:b1:c3:85:27:04:91:45:30:
83:cc:26:61:0c:d8:34:88:de:0b:33:9e:72:b3:86:e0:0d:8d:
b9:18:94:50:2a:c3:f2:c3:76:c3:be:84:66:b5:e5:dd:cc:ce:
a5:7d:db:a3:c5:0d:6d:06:e8:51:9a:2f:92:53:84:5e:c5:52:
6a:c7:c2:e5:a2:f2:78:83:10:ac:77:5b:1f:2e:a7:99:e8:95:
1a:1d:b5:02:7a:11:3b:02:d4:a6:e3:86:04:77:3d:e2:b9:fd:
91:11:39:e3:92:b1:a1:89:c8:68:d2:5c:5e:f5:7d:be:87:a7:
15:a9:fb:06:22:ac:23:3c:74:74:4e:87:80:e6:bc:a7:ff:15:
b3:ca:65:5a:ab:a7:a9:e7:36:e8:7b:78:5e:cc:d1:21:15:2c:
72:00:e4:2d:3d:1a:8d:4a:61:8f:7d:5f:59:1c:dc:be:67:4a:
cc:2e:01:d1:a0:c6:64:2a:4a:89:e1:0f:60:23:e8:37:33:0d:
97:20:c1:cc:47:f9:65:4e:aa:2f:17:9e:55:f9:64:a0:24:d4:
f1:2e:3b:1f:e4:53:49:04:cb:68:70:c5:40:20:bc:e1:6d:3c:
6c:7e:25:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:28 2025 by rpki-client