Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
File: Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft (raw, json)
Hash identifier: GmZcO4W03tafVoUBPrAtj61EtU3UqGmmMBdOqu1ATrE=
Subject key identifier: D8:70:BE:BA:21:26:3C:C6:24:E3:BE:8A:82:40:E4:3F:DD:B3:16:BA
Authority key identifier: 62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49
Certificate issuer: /CN=620dd5186de65a646dda4b89dd48ed44873af149
Certificate serial: 0194BCA98B1A9E3DBA25FC6C9C1728663E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
Manifest number: 0AF4
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: O93JDHLkYyTPbBWqOf_Tjm6Csj4.roa (hash: +gEwwbOSwfP86nIPB3Wi8wpxpGPoq4z6Qo3YWsrmtuQ=)
2: Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl (hash: 5LWlQI2YjVMPNJu0PRwL68MD4RvjWzA3t2WpHf50vP4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8b:1a:9e:3d:ba:25:fc:6c:9c:17:28:66:3e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620dd5186de65a646dda4b89dd48ed44873af149
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=d870beba21263cc624e3be8a8240e43fddb316ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f0:1b:c1:e5:90:01:32:62:fb:d0:20:6d:37:
b6:31:97:19:b9:c7:75:e5:85:98:53:71:11:19:08:
1d:54:3b:df:c3:8a:3d:6a:98:d7:97:1b:36:c8:d6:
bc:b7:cd:2b:08:45:bd:59:b9:fa:e5:73:9c:3a:91:
c7:63:e9:da:c9:9b:3b:09:c6:1f:2c:04:2a:66:1c:
ad:10:25:fd:f8:f9:6e:14:4c:05:10:29:ca:44:63:
91:2b:ad:da:cb:f2:7a:99:60:9c:6d:a0:56:96:e2:
58:a4:90:4d:18:41:f5:ad:c4:76:b5:2b:d5:fa:63:
e2:1d:0b:06:3e:43:4c:75:15:71:58:41:d6:21:e3:
85:aa:a5:b2:37:d8:66:60:23:9b:2b:ae:46:90:f2:
37:36:72:57:42:1f:b0:2f:a5:19:d3:d7:53:77:4c:
1b:77:e0:66:70:6e:a4:b2:70:d6:48:fc:ad:b9:90:
9f:01:8b:50:76:78:c1:ae:b5:ec:97:4c:60:83:3d:
4d:0c:5d:df:79:45:80:a6:4c:ce:58:f9:fb:d8:4e:
a6:ae:1b:32:02:ec:83:c2:b6:45:32:fc:99:51:42:
4d:37:c3:71:bd:6f:ef:f1:d8:61:dd:e8:f6:c1:c4:
3d:d8:a0:cf:c2:dc:c6:ca:4b:d4:dc:7e:a9:16:83:
74:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:70:BE:BA:21:26:3C:C6:24:E3:BE:8A:82:40:E4:3F:DD:B3:16:BA
X509v3 Authority Key Identifier:
keyid:62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8c:eb:54:57:a5:a7:b8:a3:92:a8:94:fb:bb:3f:8a:5f:16:
7b:63:0c:90:af:de:a2:3d:95:85:0d:61:47:47:32:c7:42:0d:
da:ed:ab:c7:8d:f1:2e:6a:86:d9:a0:8c:28:0d:b6:02:a5:7e:
b8:0d:94:3f:66:1e:f7:ff:48:a8:65:5a:dd:32:d2:88:46:72:
6c:21:a1:0d:d0:75:71:07:f6:70:3e:29:b3:2b:d5:42:e2:37:
ee:86:be:bc:1d:96:ff:85:08:3a:8f:1a:be:d5:97:90:ee:a5:
ce:88:8e:7f:48:d5:8b:61:91:14:98:f4:37:f3:9c:ae:1e:ac:
18:41:fc:dc:6f:4f:ee:4f:80:93:19:4a:85:ea:25:74:ae:a0:
79:2f:0d:db:8a:4e:9a:bb:e3:1c:91:c8:6f:51:f8:74:60:6a:
87:87:c7:de:e4:3e:84:a5:82:b2:d4:f3:a0:35:79:f0:38:b6:
5c:33:83:ed:b8:01:68:a4:71:d7:81:9d:3f:d8:20:5d:e2:4f:
c3:fa:c3:e8:2c:2b:9d:19:c6:d1:0d:dc:52:aa:f7:4e:05:21:
10:d3:51:b9:ee:5d:de:7f:ae:bb:84:c6:da:58:11:98:0e:92:
50:62:fb:5e:0f:4c:8a:5b:7e:0c:97:15:34:cf:e8:08:dc:f9:
e6:f7:ce:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:23 2025 by rpki-client