Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
File: yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft (raw, json)
Hash identifier: WSG/C9aOppRCtmTNWaK9VW24mx3reJCViExYSHEajuk=
Subject key identifier: A9:B4:BD:79:78:1A:84:A9:74:DA:DE:13:FD:F1:6A:22:D6:DD:E5:18
Authority key identifier: C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
Certificate issuer: /CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Certificate serial: 0194BC3BD41875F95417CB050654F313A3D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
Manifest number: 0BD7
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: n0pJCaUiRCl5Ps5_Vu5R9Y3I9qU.roa (hash: yrWbMC7j+dM+coJf76N3ZfAw2TV7juT6B31o0/J59Ds=)
2: yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl (hash: KXpfubbEVmmy33mpFqMlnDo02iPlu4UrtL74+3m5Tsg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d4:18:75:f9:54:17:cb:05:06:54:f3:13:a3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=a9b4bd79781a84a974dade13fdf16a22d6dde518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:4b:1c:fb:8f:00:2a:59:18:75:47:58:92:
45:54:80:e2:6d:00:6c:c1:52:dc:b9:59:0a:dd:8f:
42:4e:ef:38:64:08:36:27:44:5b:6d:79:02:3d:fd:
6b:c2:5b:62:77:02:b9:1f:13:10:04:87:e5:ee:02:
e8:e7:16:b3:bc:47:2c:fc:15:a6:c7:93:73:65:03:
dc:64:61:21:51:40:9f:19:d7:d3:c9:27:61:41:28:
f2:3b:81:49:3c:af:c3:bc:c6:fd:2f:12:e6:0d:ca:
c1:7e:6a:49:34:3c:45:1e:61:bc:e8:0e:73:d8:03:
6f:6e:9a:6c:79:12:7f:6c:68:d7:86:c7:8d:2c:4f:
29:36:fb:74:11:7f:5d:3d:ec:a9:61:54:4b:ff:78:
dc:ad:29:3c:f0:d6:ec:89:34:0b:f9:3b:73:ff:00:
e3:86:2e:ec:68:fd:aa:eb:bd:21:3f:0c:78:90:fa:
75:7a:7f:99:e6:95:93:48:9d:b1:59:13:13:b2:b5:
63:55:aa:7c:fb:03:25:6d:83:00:26:c0:fa:19:e5:
57:a3:c9:67:b8:3c:7b:35:c2:07:fb:87:31:1e:67:
31:cc:75:95:11:a9:17:de:e5:a0:82:b0:2b:2d:35:
96:39:23:06:36:39:31:5c:35:61:b1:01:98:fe:f0:
f6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B4:BD:79:78:1A:84:A9:74:DA:DE:13:FD:F1:6A:22:D6:DD:E5:18
X509v3 Authority Key Identifier:
keyid:C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:41:7d:98:26:a7:c1:31:6a:e7:57:50:85:65:28:e7:4a:c5:
ab:d8:a2:14:fe:d2:8e:35:0f:5b:c9:4d:71:cb:1a:91:08:52:
f4:d1:ef:6e:2c:92:38:45:08:74:4b:6a:b9:7f:03:b3:7e:72:
fb:ca:35:a0:25:ed:a2:6a:e1:6b:97:26:75:49:b6:b8:69:1b:
ba:cc:97:a6:10:3d:07:26:02:10:0f:4d:d9:94:70:87:b2:d7:
2d:6f:2d:18:01:24:13:5a:81:4d:6c:6e:94:33:22:95:5d:16:
5e:a9:bd:70:3b:b6:26:c5:f8:53:77:fa:16:b6:84:f1:6f:aa:
8b:76:29:86:3d:2e:ab:74:e0:de:84:10:df:15:0e:69:b6:07:
a2:c1:d8:b1:c4:11:b4:7e:fc:07:c6:41:6a:6c:87:38:7b:c9:
6b:ed:91:09:0b:94:d5:74:95:b8:62:13:dc:63:7d:5c:d5:5a:
fd:ba:d7:e8:6e:b8:e4:55:95:b0:c3:83:66:65:94:97:89:0c:
b9:1d:73:fa:a5:35:2d:ef:57:a8:bc:fa:83:3e:83:9d:98:fb:
ee:5f:a4:8a:c1:94:02:f5:26:a8:47:09:1f:76:c0:e1:27:34:
cb:d6:e2:64:c2:22:13:d7:fd:18:ac:ab:3d:84:a0:70:65:d8:
5c:c9:db:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:54 2025 by rpki-client