Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
File: Y3bCUtsJvoF7hypxepWe3KxEJms.mft (raw, json)
Hash identifier: DGTOzwKm49t/0NdcCljbJkOERzKdPtxU7UztR21zvfU=
Subject key identifier: A7:34:1D:A0:5B:78:C0:9A:35:1D:AC:79:B9:5D:20:D1:F8:CC:BA:D4
Authority key identifier: 63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
Certificate issuer: /CN=6376c252db09be817b872a717a959edcac44266b
Certificate serial: 0194BCAA2B0999A9F86027DD81D38055B02C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: Y3bCUtsJvoF7hypxepWe3KxEJms.crl (hash: 3+BKl4MntNb/EDjPyt/1kLf/WtzRVxE9//A56kNtt4U=)
2: apB7016k1B8Xf8viYBYRSP8KhJw.roa (hash: xN1tgc1phNLRWfyHfJRqbKwJVFPPcIp9VBD24KOqkzQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2b:09:99:a9:f8:60:27:dd:81:d3:80:55:b0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6376c252db09be817b872a717a959edcac44266b
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=a7341da05b78c09a351dac79b95d20d1f8ccbad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:00:8f:e3:1f:8b:71:f7:72:f6:91:d8:53:28:
ef:c4:a1:47:12:8c:50:3e:da:26:6c:a4:e1:88:b8:
94:4e:7d:1e:ec:57:13:d0:f9:3f:7f:32:2e:83:4d:
62:58:81:e6:8a:af:74:2d:09:36:96:1a:d5:63:1b:
87:7d:92:3f:cb:85:8e:24:af:58:63:ed:33:a5:c7:
45:ae:18:3f:74:71:21:94:55:8d:39:50:6b:25:8a:
da:79:99:bf:4e:54:b5:7b:40:b1:05:7d:1f:43:80:
ac:5f:c5:e3:c0:1c:bb:12:50:36:14:8c:bf:da:1d:
47:30:8f:d5:3b:ac:a9:58:4d:48:b4:a2:c0:90:b0:
84:3e:01:e5:eb:32:e3:75:b5:e8:80:80:f5:66:0d:
21:9a:65:ab:57:07:8e:30:9b:ee:5d:df:ee:98:a5:
e8:94:c1:fd:41:7f:58:cf:d3:ab:e9:34:8e:6e:06:
92:bc:a3:79:a9:5a:a0:9e:21:c2:cc:5c:c7:c4:0e:
14:fb:14:5f:0b:4c:8c:23:bb:4b:53:db:06:10:99:
d2:e9:02:94:1e:a5:97:01:76:2c:46:a3:16:b1:69:
82:85:2e:e8:d3:9c:5c:a2:e5:ec:db:cb:77:61:37:
fd:07:4f:54:10:62:d6:cd:97:ff:0b:28:e1:f5:43:
6f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:34:1D:A0:5B:78:C0:9A:35:1D:AC:79:B9:5D:20:D1:F8:CC:BA:D4
X509v3 Authority Key Identifier:
keyid:63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:1f:2b:ec:1a:f7:2a:d4:93:10:b4:57:e2:95:ee:07:15:89:
04:5a:4b:af:4c:86:3a:c8:64:c1:a1:46:05:eb:61:52:32:08:
00:d4:c3:8f:44:53:67:1d:49:bf:09:fb:46:01:1b:47:ad:78:
86:24:c7:ec:b6:4b:4d:77:39:82:a5:e4:85:5e:9b:4e:a8:08:
de:e5:ae:65:62:32:3d:9e:90:d1:33:f1:8e:22:a2:58:61:f8:
72:f0:aa:f4:4b:e2:df:f0:3d:e5:11:50:20:1f:5b:b6:f2:80:
5d:86:2a:c6:cb:03:67:25:14:44:2c:54:a5:aa:d2:bd:a8:c1:
04:f3:f9:92:98:45:fa:e9:e8:b3:2b:b0:4e:cf:87:2e:b7:06:
c6:fd:03:a0:d7:b6:f3:d3:2c:9d:74:49:6e:c2:c5:5f:53:d2:
e4:9c:2d:40:08:24:8c:b7:5e:78:7e:07:73:6c:ea:88:8b:48:
91:23:59:f3:9a:50:45:e8:1f:0b:c3:65:3c:be:fa:53:49:77:
e8:2d:ae:3d:98:2b:cd:86:16:ab:18:4c:c1:de:99:4e:85:c9:
6e:bf:1d:b9:31:56:39:fb:5c:91:72:6a:e1:9d:ec:9b:b9:90:
82:71:3a:73:be:4e:86:91:dc:6f:42:96:77:d4:9e:53:36:48:
74:f8:e1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:12 2025 by rpki-client