Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
File: Y4g6eXidn2WBUpLxjUmAupxe0iE.mft (raw, json)
Hash identifier: 4DnrA879Vx1k+/pIyXTBDUa7p+OCPyfY1rx+iBSf9xA=
Subject key identifier: 35:9A:1D:33:93:BE:52:E5:C7:F2:E2:76:0D:AE:5A:74:D7:E3:3B:D0
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Certificate issuer: /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial: 0195E1907AA2F7CFD90CC20BDC057F2AFF63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 11:01:36 +0000
Manifest this update: Sat 29 Mar 2025 11:01:36 +0000
Manifest next update: Sun 30 Mar 2025 11:01:36 +0000
Files and hashes: 1: AYWfSZfm3-m6tTmXQ7ScTVje9jw.roa (hash: jozIBgSrKgoY+kja8mOk3zf+5OHOQyudAHt7Y1IjLfc=)
2: Y4g6eXidn2WBUpLxjUmAupxe0iE.crl (hash: OQhcDTbrXxeIXd/UFfCX3rC/4fyXfK5lOp85/R4uQjk=)
3: biZ-PgxYb414M_0ExkvqodzdxpA.roa (hash: gdhB0S0OkmMjabrUiIcvLE6RonkDcPiASoyoHfZiC4s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:7a:a2:f7:cf:d9:0c:c2:0b:dc:05:7f:2a:ff:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
Validity
Not Before: Mar 29 11:01:36 2025 GMT
Not After : Mar 30 11:01:36 2025 GMT
Subject: CN=359a1d3393be52e5c7f2e2760dae5a74d7e33bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1a:f4:24:5c:c3:58:58:6f:d9:c3:db:db:cb:
3b:4a:eb:41:83:79:e0:51:95:a4:3d:b5:74:2f:0c:
fe:9a:16:25:4a:0b:bc:40:4a:1e:bb:27:67:e2:de:
48:eb:2c:a2:e1:9a:45:5a:d6:a5:f7:e6:23:9e:36:
f5:d0:c8:3a:ac:41:22:6e:60:61:1e:36:9e:5f:1f:
ae:47:4b:ba:1d:8b:36:ce:ef:8e:3c:75:3e:c6:c4:
fa:bc:27:fb:58:a4:a6:80:f2:90:24:26:7b:7b:27:
d9:56:ff:19:50:7f:61:73:62:3a:9e:8f:bb:8d:58:
08:ff:1f:9a:e0:83:fd:ed:cd:03:57:aa:63:65:51:
64:07:44:61:e8:05:c9:cc:c1:7c:f1:f1:dd:e1:da:
3e:5c:8b:46:68:11:4a:98:10:85:8b:da:8a:32:8a:
00:b1:38:fb:68:42:6a:6f:8a:cd:86:2b:f0:85:11:
c5:a7:78:d2:22:21:3c:09:ab:f9:f0:82:3c:e9:35:
ca:f2:95:d3:5a:61:ce:1d:e1:8f:88:07:13:67:05:
13:b1:84:6d:5e:84:8c:f3:07:9c:80:80:72:13:d4:
0c:9a:3b:bc:e8:e8:c4:33:d9:66:36:c2:c1:1c:42:
d7:59:fa:70:0f:5b:b3:98:82:67:2e:13:6c:6b:4b:
b9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9A:1D:33:93:BE:52:E5:C7:F2:E2:76:0D:AE:5A:74:D7:E3:3B:D0
X509v3 Authority Key Identifier:
keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b3:70:d3:05:21:50:35:0d:02:dc:3e:3a:97:10:99:7a:37:
86:35:2d:74:95:df:e1:8a:1f:18:7c:dc:82:77:08:6e:1e:e8:
f8:02:37:03:72:3f:7e:05:e5:d8:fc:be:20:34:1b:b5:06:ce:
e3:cc:ce:2f:ce:b7:da:37:04:da:e2:66:41:d6:e0:de:6b:23:
eb:8a:64:06:b3:be:5c:53:e9:8f:a3:43:29:b6:66:84:51:d6:
15:f9:cd:cb:54:30:c7:f3:e8:5e:d3:e0:2e:5c:39:4c:b6:6e:
68:06:52:2f:e8:d7:79:dd:e0:a7:d0:19:a6:dd:6d:c0:0f:30:
a3:7a:f3:0c:8f:b4:65:eb:32:2e:9e:63:c2:c4:be:8c:96:a6:
4c:63:bb:e0:c4:31:06:00:9b:19:91:5c:63:f8:23:dd:0c:e3:
29:3d:15:44:1a:1e:b6:a2:78:0f:be:72:6c:74:57:86:1f:6d:
da:91:d3:41:66:69:79:0d:a9:ae:07:d2:bc:1f:7a:05:17:18:
fd:fb:cf:8d:9b:49:c8:3d:2f:db:f6:f5:3f:c8:88:1c:8d:81:
44:7c:9c:18:4a:bd:25:a8:ce:6b:39:83:c9:42:3f:91:23:ec:
01:4f:3e:81:32:3b:51:5c:18:ef:f1:0e:af:3a:f3:4e:bf:99:
e6:ee:b2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:11:27 2025 by rpki-client