Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
File: f_yCWF32m3yUsWphky_8i24zUVY.mft (raw, json)
Hash identifier: xjrj3hF+bFfsQZu3Gg/zqg8Ru3Prd0CcdLr/3QoRMYc=
Subject key identifier: 8B:9C:23:F2:3F:30:0C:06:23:8A:ED:36:F1:8D:31:84:DF:E0:41:57
Authority key identifier: 7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
Certificate issuer: /CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Certificate serial: 0194BBCDE81B03C0A3252FB954548BCA2E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
Manifest number: 1001
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: bycUBAAoDdbd3Ywhozb1CxrNJmI.roa (hash: gkAbagnCg3V8VsJYqOkif+2HaGxRFUxkzvPVmQ5dGYs=)
2: f_yCWF32m3yUsWphky_8i24zUVY.crl (hash: v9122S0O7AmLZiTKFL2Ia4apKUFfFTyR64viEdMn8MA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e8:1b:03:c0:a3:25:2f:b9:54:54:8b:ca:2e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=8b9c23f23f300c06238aed36f18d3184dfe04157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:59:d6:75:b5:7e:44:33:bb:09:65:f8:37:
05:9c:ba:fb:3f:bc:d8:38:76:35:81:b1:99:13:56:
1a:aa:96:53:9f:e1:be:c3:a7:40:77:b1:85:be:ca:
24:a7:bb:ce:25:39:1a:eb:35:51:7f:d9:a0:0a:45:
94:70:65:c6:93:39:67:df:25:39:3f:75:42:70:ce:
7d:2d:f2:c0:89:62:90:29:78:24:6e:ae:3b:26:e6:
f8:a3:6d:fc:fe:00:10:4d:85:30:7f:ce:c4:fe:85:
4b:41:31:25:6b:87:71:ee:1c:dd:e9:28:ef:be:b7:
38:82:6e:14:0a:54:ef:80:15:cd:39:ae:1a:60:39:
d5:72:7d:3f:38:e3:7e:e6:89:61:e7:14:d1:73:a0:
cf:d7:d3:57:a8:b6:0b:b9:b2:e0:94:eb:88:54:e9:
03:e0:95:34:34:c5:97:40:17:26:01:96:6b:46:62:
9a:63:92:84:61:1b:ee:4f:04:c4:2d:21:f9:a5:86:
d2:bb:d6:29:0e:86:26:3f:7b:37:4c:13:15:e7:fb:
d8:06:3a:d2:85:33:d8:b3:20:45:4b:78:97:a7:5a:
f1:1d:0d:1d:c9:de:e2:53:d2:33:99:d2:52:7e:0b:
66:b9:59:0b:d4:e3:0b:2d:2c:a0:9a:8c:39:8a:9b:
eb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9C:23:F2:3F:30:0C:06:23:8A:ED:36:F1:8D:31:84:DF:E0:41:57
X509v3 Authority Key Identifier:
keyid:7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:16:9a:b9:68:b0:40:18:56:3b:f9:0d:42:10:c6:7c:f2:92:
16:60:b9:5d:b1:51:f9:37:0e:f1:2d:03:8e:0b:d4:48:8a:e7:
9c:5b:86:ef:4a:7f:f4:67:46:fb:33:87:b0:66:e2:c8:bb:fc:
94:94:a4:80:4d:4e:cd:5b:03:da:ef:7d:a4:e4:11:52:87:b8:
ff:7e:d5:3d:b0:16:92:c2:fe:3f:a6:d9:47:49:5d:15:f0:9a:
93:ed:a6:a1:ac:67:1f:ea:72:4d:a4:9b:e9:69:67:f9:77:3a:
9b:d7:df:93:59:48:37:e4:e6:b9:da:9c:23:a8:9c:4d:53:6e:
fe:68:f1:58:6d:9a:5f:f2:71:57:f7:4a:49:eb:99:a3:66:a1:
b3:2d:96:8c:95:31:5b:2f:63:95:96:af:56:ae:cd:96:a8:6f:
ff:6c:2b:41:81:3a:24:61:56:1b:1a:92:16:52:f0:2d:e7:9e:
dd:a6:4f:81:e1:af:5c:4d:8e:4c:e3:00:d4:99:c3:58:38:54:
ea:3b:c7:07:8e:71:95:79:3b:95:69:b5:cd:f1:a8:50:85:24:
d5:a4:4e:3d:95:f0:98:ee:e3:df:18:5d:10:46:27:ec:17:cc:
6b:a7:a5:5b:14:96:83:4c:43:b1:43:a1:85:8c:4b:12:ac:cb:
cb:8f:45:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:47 2025 by rpki-client