Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
File: Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft (raw, json)
Hash identifier: C2W2abPEw/fdt/7yaEMB7KFxhj82hlifwCdo7VbU2gw=
Subject key identifier: 47:60:89:EF:86:1A:CB:CD:32:60:AB:42:3A:91:23:CF:90:3C:41:B8
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial: 0194BC3BCBECB89AA64A5664F15F2881E045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
Manifest number: 0657
Signing time: Fri 31 Jan 2025 12:00:22 +0000
Manifest this update: Fri 31 Jan 2025 12:00:22 +0000
Manifest next update: Sat 01 Feb 2025 12:00:22 +0000
Files and hashes: 1: U47KHWtk8fl1zeBfptx2dxwuW-0.roa (hash: MCpZ0AwLfoDIQ9+ASI13wQUEawZmPsd+gtRUPbEtBbI=)
2: Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl (hash: QL0XNKPidupVKeJHL9dc3lxh2iIAts2RymT2kcuiNjM=)
3: yMbSdUOBKCqn_NswdvutijlK684.roa (hash: K0IjYQFHztO8K2x6H3KgphHn4JSijnZlB4Ox3bR44Pk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cb:ec:b8:9a:a6:4a:56:64:f1:5f:28:81:e0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
Validity
Not Before: Jan 31 12:00:22 2025 GMT
Not After : Feb 1 12:00:22 2025 GMT
Subject: CN=476089ef861acbcd3260ab423a9123cf903c41b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:a8:0d:a6:23:a4:57:07:8c:c8:25:2b:4b:
62:18:7c:49:6d:84:2b:df:ed:4d:ff:fd:66:01:55:
1c:ab:1f:e8:15:c3:23:4d:6a:14:55:f6:ba:22:10:
b9:8b:bd:34:09:fa:6f:31:f5:1c:e7:9d:97:c8:53:
40:c2:af:85:e5:aa:a2:45:59:3a:71:56:65:af:ad:
61:fe:b1:16:4c:d0:72:bf:18:08:83:45:25:de:53:
af:d9:75:95:7b:61:05:9a:8b:5b:df:a9:02:e1:4d:
d9:2c:fd:8f:2a:b8:c4:5f:35:9e:5a:ef:63:52:d4:
fa:f0:e2:fe:89:fc:79:1d:5e:66:83:98:8a:f3:97:
3b:38:31:af:45:fa:89:e1:5b:b0:8c:9e:c1:27:ba:
70:12:2d:94:69:b2:7c:0c:4d:5b:eb:3f:75:c5:94:
63:10:8d:7b:f1:1d:50:f1:43:77:6e:c5:43:34:16:
23:8f:92:41:3a:1c:06:7a:7f:41:b5:e5:12:8a:53:
bc:a4:10:14:86:1e:ae:44:38:9e:71:dc:fe:57:a6:
d3:9d:ef:71:9f:ac:df:bf:38:85:82:e2:27:c3:69:
61:c4:9b:1a:c7:e9:ab:0b:f9:bf:28:ec:c4:1c:ec:
90:cf:d6:b5:2e:ee:c0:95:7a:b3:39:c9:e2:92:e6:
ae:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:60:89:EF:86:1A:CB:CD:32:60:AB:42:3A:91:23:CF:90:3C:41:B8
X509v3 Authority Key Identifier:
keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3f:99:37:7b:b8:cc:7d:40:02:c1:f0:58:d4:bf:0f:ba:62:
98:0a:38:11:78:e7:d3:f3:07:03:16:d2:b1:02:95:8b:00:e9:
88:29:a5:1d:d2:08:43:f6:26:8f:06:ee:c3:2c:81:67:16:4e:
13:eb:40:bc:f3:6e:29:aa:a6:b8:22:30:3b:97:22:0d:27:67:
61:d3:23:79:82:67:e4:ed:98:a4:8a:73:55:70:93:d9:a1:8e:
49:6f:ab:36:0e:58:bb:1c:a5:75:22:57:1a:d4:0b:e5:18:67:
3e:b5:62:b1:c4:f5:98:8b:10:4d:c0:6a:ab:11:53:03:8f:bd:
04:8a:d5:e8:64:a1:d6:21:9b:77:83:47:14:44:86:2a:bf:01:
fd:c7:3b:1c:42:75:52:af:25:1d:ca:75:fa:ac:80:b1:c3:94:
40:49:36:a4:23:b6:d9:1d:a8:57:a2:8c:d0:4e:0e:b3:90:d1:
93:dd:f5:c2:5c:74:6d:fd:da:26:f5:82:98:58:ff:9d:6a:8e:
d7:a2:f1:67:b2:27:38:f2:c8:00:0f:f7:29:7e:a9:5e:dc:66:
73:cd:14:68:bb:32:09:1c:bf:ff:f9:af:6b:8c:ee:af:d8:ec:
97:47:fc:a6:c5:22:48:57:bb:10:a6:f3:e2:da:24:d8:a6:ef:
57:25:af:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:49:32 2025 by rpki-client