Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
File: Ym0k1r81OWP-WvolsKWWZxUqhtA.mft (raw, json)
Hash identifier: 14+b7WhPf6uKLtWSJJFZxqtWwmjZPM3GLpHY+T5q+YA=
Subject key identifier: A3:7B:89:47:AE:AA:5C:DD:BB:1F:A2:6E:21:E1:02:29:4E:1F:9D:DE
Authority key identifier: 62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
Certificate issuer: /CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Certificate serial: 0194BD4EA16083266DCA1B8E782F50CA314C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
Manifest number: 0BBA
Signing time: Fri 31 Jan 2025 17:00:34 +0000
Manifest this update: Fri 31 Jan 2025 17:00:34 +0000
Manifest next update: Sat 01 Feb 2025 17:00:34 +0000
Files and hashes: 1: XsLpmpu2xvBP4JjcplMw-4A56mY.roa (hash: zDQ4NxbIV24C02r59jK+8GO4r9TIoUq4yC6lv1rRxf0=)
2: Ym0k1r81OWP-WvolsKWWZxUqhtA.crl (hash: 5kamCubtkKkHmXZD2C5riCWcI14noyjLHwfyB0bhHVs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a1:60:83:26:6d:ca:1b:8e:78:2f:50:ca:31:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Validity
Not Before: Jan 31 17:00:34 2025 GMT
Not After : Feb 1 17:00:34 2025 GMT
Subject: CN=a37b8947aeaa5cddbb1fa26e21e102294e1f9dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d1:7f:be:b9:d6:a7:87:d2:f6:4b:ec:ca:6c:
81:9e:c3:3d:32:54:bb:e3:41:e2:1b:08:ca:10:e3:
68:d0:db:4d:04:62:92:5c:26:a7:3b:2d:4b:13:91:
dd:fb:2d:fe:35:ff:db:53:08:ad:c8:55:2e:2e:a3:
7b:02:b6:4f:44:dc:07:67:39:fd:9d:2c:2e:46:72:
b2:56:5b:5b:0c:eb:38:7d:42:65:30:9b:69:26:e5:
8e:ce:ba:61:89:d5:12:42:fa:87:85:56:cd:6c:ae:
b2:59:c9:cd:f9:9f:9f:cf:ad:dd:33:cf:9c:2d:bf:
a5:8c:c7:de:fa:a8:ff:03:7b:ae:03:98:3e:21:46:
9f:48:3d:f4:96:91:d8:5b:59:88:02:65:84:3b:6a:
92:a6:b6:39:27:c1:6f:13:a8:35:51:3e:9e:c0:84:
65:30:34:1b:f4:4a:ce:43:9c:35:98:f1:22:6c:69:
d7:98:28:82:f6:54:3f:37:35:3f:97:1a:f0:81:88:
f4:34:96:c1:8a:4a:b5:56:26:34:2b:4c:aa:4a:a6:
f7:c1:2b:dc:fe:e5:02:9b:4d:73:b0:f1:6b:38:1c:
57:50:9f:60:2b:7c:50:e9:c1:78:44:24:34:37:07:
c4:ea:b4:9c:06:c4:e9:c1:f4:79:be:7f:7f:0f:b5:
c4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7B:89:47:AE:AA:5C:DD:BB:1F:A2:6E:21:E1:02:29:4E:1F:9D:DE
X509v3 Authority Key Identifier:
keyid:62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:77:0f:8d:cc:f7:d9:e1:68:ac:ad:c1:67:4b:2a:2b:96:2f:
ad:0d:1f:34:0f:d3:73:e5:aa:a5:fe:0c:fa:34:f8:c1:d7:28:
c8:10:8f:e6:5c:70:c9:34:b9:f6:d4:20:46:f7:07:a6:77:c6:
4c:94:ca:88:31:53:e0:30:2d:00:13:ee:8b:8b:d3:be:32:90:
2a:e7:c3:fc:d3:0c:64:00:73:47:26:36:b4:e8:e0:5b:0b:f9:
78:09:51:33:98:59:71:a4:35:52:be:56:37:5b:0d:90:24:c1:
11:92:f2:b4:d5:c4:ed:14:0f:fe:5a:ee:3a:d6:6e:4a:68:a6:
7e:22:ad:52:8b:b5:2e:47:20:1c:8b:bf:58:9e:8f:3c:e3:3d:
e1:8f:71:b7:62:87:d8:b0:df:33:4b:9a:b0:75:b1:8c:e7:7d:
5a:d3:8b:d3:4d:14:c1:63:cd:c3:55:2e:bf:99:96:dc:b2:86:
a9:4b:ee:52:b8:4f:bb:f0:46:4e:5a:e1:31:9d:7d:dc:2b:bb:
50:dd:04:41:7b:7d:c4:13:64:7e:ed:b4:a6:64:12:8e:75:9e:
5d:3f:f3:74:48:31:52:a1:b3:29:36:ff:09:bb:e9:00:c3:fb:
00:9a:5a:20:5a:fd:ca:ec:f9:e4:dc:a8:03:95:d8:02:12:9b:
c6:b7:ab:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:52 2025 by rpki-client