Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
File: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft (raw, json)
Hash identifier: VeXURsvnP29hW43Tmg74HKMn6rVvU2tAAwi9mrgmx8I=
Subject key identifier: AD:05:10:A6:BD:50:7B:8B:8B:C2:19:47:E8:7B:6E:02:33:C6:2C:57
Authority key identifier: 49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
Certificate issuer: /CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Certificate serial: 0194BC3C529DB331539BF2326F3E492C75A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
Manifest number: 0DC1
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: Exo16zEYgO3PueRCaRsMKkkEhy0.roa (hash: kH5z+KdUp6OrMDZjKD02kQC0jLALZ4m/6if0eLS0ZaE=)
2: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl (hash: xqdCjtzglvTgnScAk9Aa4sX/2ONh/nCHK5L2QjCkxn4=)
3: eNexU45z9hsg8uDVbcM1xgFPzmA.roa (hash: lxTKbrWjdwK3UVl5lIUje+cFbf9AlxZL9yRVio/psAM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:52:9d:b3:31:53:9b:f2:32:6f:3e:49:2c:75:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=ad0510a6bd507b8b8bc21947e87b6e0233c62c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c6:7a:35:b3:c6:16:4c:ef:49:c8:00:75:94:
36:0b:e4:e7:7e:30:95:61:80:02:d2:cb:5a:fa:47:
cb:f9:09:77:f5:2d:08:c0:8b:a0:4e:fa:6d:24:8a:
a0:97:3e:d1:da:c7:f4:20:a0:6a:54:8b:12:2b:77:
c2:2b:cd:e0:7d:03:a3:d7:13:45:88:b4:00:ad:47:
e9:17:df:35:28:c0:f2:fb:a3:a2:34:ba:ad:6d:e0:
c2:5d:93:02:8f:b7:39:3e:1f:49:be:6e:e2:ce:7c:
a9:44:11:6e:96:ad:6c:d4:09:81:64:f7:f0:4c:54:
ce:e8:13:7f:5a:aa:f9:2d:90:85:ce:6a:9e:96:5e:
98:37:55:af:ed:7c:57:bf:25:89:61:b4:c6:53:c1:
22:58:a2:0b:18:14:9d:11:5e:58:85:6e:52:2c:0d:
49:e4:2d:3d:55:96:3e:ac:a1:7a:0c:f7:cd:32:ad:
92:c3:c0:6a:20:0d:7f:a9:b4:99:5f:95:de:3e:58:
75:04:d2:9a:66:07:33:12:a1:89:55:6b:91:00:7b:
39:3a:7f:16:81:6b:b9:a2:aa:78:46:20:fe:85:48:
ee:ce:7e:75:d6:f9:82:dd:e2:b8:3f:a5:3c:bc:85:
d4:ff:1c:f8:ea:f9:7d:33:21:f8:58:c4:1f:d3:e6:
57:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:05:10:A6:BD:50:7B:8B:8B:C2:19:47:E8:7B:6E:02:33:C6:2C:57
X509v3 Authority Key Identifier:
keyid:49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ab:7f:02:3b:5b:57:0a:c9:73:4c:fe:a4:e2:42:ed:1f:ec:
af:b2:e6:5a:83:88:01:89:5e:d1:04:69:38:67:8f:0d:d2:a1:
c5:41:ad:f8:27:8b:f1:b6:5f:48:ed:b6:f6:0f:44:ba:7c:55:
31:7c:ae:87:63:32:f9:22:3e:d3:2a:24:6c:ef:b1:f0:22:fa:
35:5d:b9:b8:67:21:70:83:37:e6:a6:9e:6d:27:cc:e1:36:5f:
4a:ae:7b:8e:97:4b:cc:8f:d3:a1:c8:3b:1f:26:8d:9d:97:6f:
ad:00:e0:86:cc:21:f3:ac:49:91:0d:a6:d8:4c:ee:d4:38:7f:
ef:49:f2:bc:18:f2:71:bf:56:31:ed:f0:da:15:67:ac:9d:62:
3c:b4:3a:65:0f:30:8a:26:db:83:ab:88:11:6a:5f:8b:52:45:
58:2a:26:f3:6a:23:c9:43:b5:93:6b:15:58:66:32:b8:3a:4b:
3b:70:8d:ce:80:80:8a:8b:4b:90:01:e7:dd:40:b3:fd:40:ab:
4f:b9:a5:a5:c0:c7:eb:87:b1:28:3f:10:d7:6a:8e:c4:37:f3:
99:af:21:9e:31:b9:15:21:ef:a4:54:0a:db:dc:2b:ea:bf:0d:
71:c7:d5:5d:64:d4:e6:4a:c3:60:25:4a:75:ec:b2:70:8d:ec:
be:25:57:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:38 2025 by rpki-client