Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
File: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft (raw, json)
Hash identifier: jk/BgAIZN5kIFOmYuhEgagJSsT6iDI3w7cu3+ALHYHQ=
Subject key identifier: F9:66:49:55:18:D9:97:6B:94:9A:71:1E:E8:B7:2C:53:82:B5:94:98
Authority key identifier: 63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
Certificate issuer: /CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Certificate serial: 0194BD4E4B3D296115512DF6F44C2A6566C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
Manifest number: 10EC
Signing time: Fri 31 Jan 2025 17:00:12 +0000
Manifest this update: Fri 31 Jan 2025 17:00:12 +0000
Manifest next update: Sat 01 Feb 2025 17:00:12 +0000
Files and hashes: 1: 3q5cMH_JMDPWbBWsvj1oSnffC60.roa (hash: PsjJWV+kYSf71t9/bKVlp3KCFoEso5Ik+VCJED3EfZo=)
2: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl (hash: KYZqJCYXheKvetFCFcB7dYHYt0wESCwlCIncg0MKY+E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4b:3d:29:61:15:51:2d:f6:f4:4c:2a:65:66:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Validity
Not Before: Jan 31 17:00:12 2025 GMT
Not After : Feb 1 17:00:12 2025 GMT
Subject: CN=f966495518d9976b949a711ee8b72c5382b59498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9e:70:e0:72:27:64:42:30:1a:ea:08:c2:b0:
12:a1:36:d1:98:fd:a4:c5:b0:94:59:03:d0:af:72:
0a:ab:86:1e:27:4e:98:40:d7:7b:77:7e:05:76:bf:
98:94:33:d5:cf:39:96:c7:eb:a3:e8:62:14:10:79:
ee:a7:47:e5:e2:84:17:89:a9:8f:70:29:55:8f:98:
40:da:1e:c5:c4:48:43:45:2c:51:95:d4:9d:e6:cc:
8c:58:a4:66:48:3a:be:81:70:64:8a:5f:ba:69:58:
51:ad:11:34:88:63:2d:72:df:ee:d6:b2:4e:e7:44:
2a:bb:e5:8c:30:c0:67:3f:e6:76:32:05:ce:12:94:
8c:c7:97:9f:ab:0c:37:db:a8:91:e6:82:bf:ff:5c:
ec:dc:1b:dd:ce:11:f9:c0:d6:85:b6:f2:46:54:76:
3d:c7:f6:bb:6a:6e:46:98:b9:5a:22:26:4c:f7:24:
97:96:5f:2d:8c:60:dc:2a:4b:44:b7:c4:4c:ca:3a:
47:a8:94:14:38:dc:b4:1f:da:2d:50:c2:4c:b4:c2:
4c:40:ba:63:2a:48:d7:0f:69:c5:52:08:9b:ac:ca:
b9:9c:de:e3:27:16:86:82:53:73:4e:00:d1:5b:1c:
2a:9d:3d:78:56:1f:2a:d2:7e:ae:81:d4:58:a8:3e:
7c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:66:49:55:18:D9:97:6B:94:9A:71:1E:E8:B7:2C:53:82:B5:94:98
X509v3 Authority Key Identifier:
keyid:63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:41:bd:4e:d2:dc:5e:14:77:ee:25:7e:63:fe:5e:1f:63:0f:
8b:c1:19:b1:6e:8c:d3:ac:63:bb:64:c5:33:c7:96:1e:3f:76:
c4:eb:4b:08:ba:1c:12:e2:d7:d4:74:32:87:cc:29:37:db:a4:
7c:77:ef:9c:a8:cd:e8:c2:5b:d7:b7:a0:00:89:38:95:57:de:
46:5d:da:35:fb:00:f2:45:3b:43:c8:fe:19:85:c3:77:07:dd:
30:2d:5b:f8:a5:77:d8:5b:a3:69:16:f3:b0:d9:b7:b0:d8:71:
1c:00:11:81:18:fd:21:f0:31:78:d4:5a:4c:b1:8b:d2:93:e2:
49:7c:dc:ac:31:fb:ae:cc:ae:6b:c1:85:9b:7e:d6:5a:43:8f:
4a:00:b3:a3:a1:a9:b2:6d:73:27:f3:a9:b2:25:e7:d1:f9:6d:
56:46:66:eb:51:28:d7:10:b7:a0:44:ba:1c:aa:71:06:83:71:
99:37:14:27:b9:2e:46:11:10:07:ab:a4:69:85:58:f0:37:9c:
4e:d6:42:d8:73:36:79:16:05:45:9b:10:bf:61:2e:bf:80:00:
0a:b7:31:3f:2d:c2:64:05:93:0e:50:ae:f0:82:ac:be:1d:3e:
14:b7:52:d7:44:e3:5a:d1:99:25:06:20:4a:fc:bf:f3:0a:69:
40:33:aa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:13 2025 by rpki-client