Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
File: ydSf722tJmGevuBl0fIxwaJ2198.mft (raw, json)
Hash identifier: 0r8rfeVAWvSalbNHgjjvohXcY8FBBfb8d96vFuR82aU=
Subject key identifier: 85:60:10:F7:F4:A4:ED:40:D0:28:4E:79:E8:33:0E:6E:7F:D5:80:98
Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Certificate serial: 0194BCE0AA7AD3CEC657F478D1194575B673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
Manifest number: 034C
Signing time: Fri 31 Jan 2025 15:00:27 +0000
Manifest this update: Fri 31 Jan 2025 15:00:27 +0000
Manifest next update: Sat 01 Feb 2025 15:00:27 +0000
Files and hashes: 1: Rxg5b8TVQSPFdWFOKvBN85kybDA.roa (hash: UtF92U/9meAF41tjwSEGw6eGscll7EeWN/zVkMTCT2M=)
2: UZjE-GQgoU3nRLnq0ZWQAXM992o.roa (hash: Ph8txzTNR1zk2KVvrV6FeKKiPwZkYzUc7t042+8KNcY=)
3: ydSf722tJmGevuBl0fIxwaJ2198.crl (hash: T9b4d1Qp50mJuEc5hwqRXS9yjPsUu+Iun2EZlMYsZe0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:aa:7a:d3:ce:c6:57:f4:78:d1:19:45:75:b6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Validity
Not Before: Jan 31 15:00:27 2025 GMT
Not After : Feb 1 15:00:27 2025 GMT
Subject: CN=856010f7f4a4ed40d0284e79e8330e6e7fd58098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3d:67:4d:18:3e:43:f5:99:8b:e7:f4:cf:ad:
8e:9c:73:75:a0:cb:6c:28:63:7b:d0:f8:2e:04:76:
95:51:11:c7:1d:4b:41:73:2e:7d:da:70:c9:da:fc:
84:64:d7:5c:0d:32:d0:26:fe:f8:bf:68:dc:8c:b9:
d6:44:c4:2d:86:76:cc:88:ba:e3:27:41:b9:23:ce:
0c:55:63:98:9a:19:9d:89:40:73:5b:11:f6:1d:94:
42:f7:d0:0d:00:ab:b3:c2:12:5c:59:9f:22:79:43:
ca:ab:00:4b:f3:ee:f1:ed:21:e4:8a:51:53:72:3d:
31:4d:aa:94:ed:30:18:ad:8f:e4:8a:16:72:52:d1:
6f:2a:69:c3:87:a5:27:1b:30:6e:d3:d2:4a:d7:d4:
0f:e2:bb:00:09:7b:c9:a3:30:76:6c:7c:3c:36:2b:
ad:0b:68:0b:58:f5:c0:f9:62:76:c0:c5:a1:e4:94:
58:24:5b:88:7b:58:9f:e0:c8:47:e8:44:5d:56:6e:
20:52:9c:ef:6f:7f:2f:ad:bc:59:8b:fe:80:c5:f1:
6d:39:11:51:8e:e0:e8:ed:66:49:2b:b6:12:57:69:
3b:b0:3e:62:1d:6d:7e:cf:ea:21:1e:53:b6:c8:d2:
08:b5:0c:9f:f2:ab:94:8c:df:2f:85:51:ea:c2:26:
af:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:60:10:F7:F4:A4:ED:40:D0:28:4E:79:E8:33:0E:6E:7F:D5:80:98
X509v3 Authority Key Identifier:
keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ba:1c:1c:bb:64:85:45:1d:76:9e:f9:58:44:5e:f6:d7:21:
70:7c:27:7e:1d:55:d0:71:dc:bb:78:e0:50:92:3f:fa:90:76:
0a:1d:61:ce:06:98:00:d6:62:61:41:44:cf:3b:54:82:6a:8f:
a2:16:ec:cc:b6:02:43:16:65:41:cb:05:7d:8d:79:6b:c2:ea:
84:b0:96:a1:91:3b:af:77:f6:c4:03:ef:10:bd:4a:13:03:da:
67:de:f6:e1:0f:a7:5a:d9:0a:bd:39:ce:b9:61:bd:5f:2f:e7:
f1:2d:c2:c0:ab:e4:50:35:d1:9a:b2:29:c1:b7:22:31:6d:1d:
97:f8:ce:c4:08:67:66:f8:d2:31:62:ad:ee:64:d6:fb:69:80:
81:81:55:61:93:ed:26:00:83:95:fe:3d:bc:18:58:4d:86:51:
b6:7e:39:65:e4:cd:15:15:f0:34:77:34:f7:0a:3f:4f:a6:5e:
d8:c1:69:b0:ef:95:95:b7:38:2e:f6:2f:43:ac:ba:67:ca:ac:
c7:cc:3c:53:af:5d:32:95:2d:0f:ec:66:f1:1d:7f:52:bb:8c:
d3:a3:37:69:3d:b0:55:13:7c:ef:34:62:c4:5e:fd:7e:4b:4f:
50:d9:ee:2f:df:0e:dd:85:dd:44:c4:68:45:40:eb:73:67:d0:
f4:d8:b1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:15 2025 by rpki-client