Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
File: Y11bZE4i-0iOTWwAErCqvyOOYeU.mft (raw, json)
Hash identifier: 3jHLS7o9+yHtZO2u6XcnxbvLEmY+OMQm9pNUkTNZK0g=
Subject key identifier: 82:AB:8A:C8:17:9C:CA:F9:A0:AB:13:31:6C:35:EE:66:0E:CA:E6:3D
Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
Certificate issuer: /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Certificate serial: 0194BC0530947C3921176C03F318B3C5DDC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
Manifest number: 04A0
Signing time: Fri 31 Jan 2025 11:00:44 +0000
Manifest this update: Fri 31 Jan 2025 11:00:44 +0000
Manifest next update: Sat 01 Feb 2025 11:00:44 +0000
Files and hashes: 1: UfQPCCjVZ9who8V_2ydTobai7pY.roa (hash: IBJI/ZiBDqZiCgT1tzzy136SyaAPb6KafOn0fl7ud1w=)
2: Y11bZE4i-0iOTWwAErCqvyOOYeU.crl (hash: vUl5+AamxCDgjLSEJna6BqIKOaL8MpDWiVOTxRpRSl4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:30:94:7c:39:21:17:6c:03:f3:18:b3:c5:dd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Validity
Not Before: Jan 31 11:00:44 2025 GMT
Not After : Feb 1 11:00:44 2025 GMT
Subject: CN=82ab8ac8179ccaf9a0ab13316c35ee660ecae63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:07:4b:dd:d9:ad:0d:f6:21:85:ac:20:34:6f:
75:93:b6:1f:a7:76:20:f1:1d:de:3a:a1:11:b2:39:
60:b6:b6:09:c1:bc:42:c5:b2:ad:4a:4c:bb:25:16:
eb:9c:28:c1:17:13:ee:d7:65:a2:97:90:5d:49:11:
65:30:de:6b:ba:67:32:9c:8a:b7:2e:2d:e6:31:f5:
d6:b9:93:44:90:83:57:97:85:d8:9d:b4:30:33:ed:
1d:79:a9:f7:6b:11:2f:74:00:f9:ea:e2:a3:95:eb:
1f:6b:a9:ac:93:66:30:78:20:b6:ff:52:5f:2a:76:
bf:1b:fd:a1:df:b1:75:3e:90:50:51:70:e5:e4:8b:
06:c6:39:59:a7:a0:51:d0:4e:11:e1:ae:c9:ee:16:
6c:8c:2a:71:bf:8d:be:be:5d:36:0f:b0:8d:65:97:
6d:62:57:de:a4:c4:97:b6:04:ed:e9:3a:65:92:8e:
b8:cc:6b:16:a1:10:03:92:03:22:7a:19:b8:ad:b4:
61:6d:8b:a3:77:5b:cc:7f:60:d1:85:49:bc:88:44:
97:39:20:96:7d:19:22:cc:23:55:dd:b4:c7:63:97:
12:0d:49:5f:49:b7:8e:c8:8b:60:2f:6a:bc:2c:fb:
79:d7:e0:24:30:b5:8a:d3:48:8e:ce:8b:9c:2d:8b:
17:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AB:8A:C8:17:9C:CA:F9:A0:AB:13:31:6C:35:EE:66:0E:CA:E6:3D
X509v3 Authority Key Identifier:
keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:cb:7e:2f:27:bf:ed:0a:10:fd:db:c3:c0:e6:16:99:6c:5c:
2f:b0:84:04:10:59:ba:ff:a7:21:ef:a0:ef:fe:0e:5c:c6:4d:
08:25:f8:6b:2a:80:4c:13:19:e5:6d:41:f1:12:ee:32:71:19:
97:1d:5a:c7:25:b3:07:d3:69:21:2c:a6:96:91:85:b1:f1:61:
59:12:ed:0a:9e:eb:4e:a7:49:e7:17:b3:10:95:01:d6:b5:ba:
0c:e7:1f:51:29:3d:8c:46:44:84:b0:db:4d:b4:0f:d6:f4:17:
35:4e:61:27:5a:c0:5c:a0:c5:07:8f:93:cb:b8:bc:86:f7:bf:
ab:83:0f:2e:12:40:39:66:e4:e5:a7:0a:f3:43:22:df:bb:9c:
c5:0d:3e:fe:cd:cf:83:4c:18:a8:68:f6:44:14:8d:75:d4:f2:
b9:ab:df:aa:3b:5f:27:cd:eb:4f:f5:02:60:5e:79:38:df:34:
d9:8a:dc:d8:79:06:ed:ec:9d:4b:dd:a0:07:17:0f:ef:b9:0a:
74:e3:85:d0:85:b5:62:47:ae:ae:23:0e:a9:94:3a:4c:62:f0:
eb:9f:bd:12:5a:49:d7:74:66:51:a1:f9:2e:d9:66:b7:fd:55:
af:89:e7:e2:ce:91:24:5a:d4:b5:99:0a:53:05:d8:54:b5:b3:
24:84:4f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:21:10 2025 by rpki-client