Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
File: YmC2AROb4BNWnr-OG-taaUuch-w.mft (raw, json)
Hash identifier: tMCsDRUEgSi8HZ2Vm3yWNCUCadTXF1iDYrIkeSqmsVY=
Subject key identifier: 10:F7:F9:78:4A:06:9D:28:A0:78:B4:98:2B:8A:4E:1B:2C:75:BB:EA
Authority key identifier: 62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
Certificate issuer: /CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Certificate serial: 0195E159637D7678FB030CE3A90B79DAFF35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
Manifest number: 01AA
Signing time: Sat 29 Mar 2025 10:01:26 +0000
Manifest this update: Sat 29 Mar 2025 10:01:26 +0000
Manifest next update: Sun 30 Mar 2025 10:01:26 +0000
Files and hashes: 1: MJiykAn66BwFdDhRkjnr3vy7VBE.roa (hash: tqEplVJJxxtIvLa3DZXrZRwoIF2P6+ZYgv+UgpAXwks=)
2: YmC2AROb4BNWnr-OG-taaUuch-w.crl (hash: E9YIgcpmHncJ4F3vAmF3nYWKCi/9lPv8WdhWJMYX48Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:63:7d:76:78:fb:03:0c:e3:a9:0b:79:da:ff:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Validity
Not Before: Mar 29 10:01:26 2025 GMT
Not After : Mar 30 10:01:26 2025 GMT
Subject: CN=10f7f9784a069d28a078b4982b8a4e1b2c75bbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:04:8e:82:ae:53:2d:15:40:80:39:1a:53:19:
1a:b5:42:97:d9:6f:9b:c3:42:aa:60:3a:6b:0d:bf:
d2:3c:07:2f:1b:da:8b:48:8b:41:15:49:d6:75:8e:
70:3e:02:6f:1d:f7:4e:08:d2:05:eb:78:ed:c3:41:
59:15:3c:e0:7c:1f:39:65:61:cc:24:1e:6c:a6:85:
58:9e:63:7b:8c:6f:c1:90:e3:97:0d:1f:9d:e4:6a:
ee:40:00:0d:c1:86:6c:ba:82:0f:db:fd:7f:18:1a:
57:62:50:f2:2f:c3:cd:45:ff:dd:93:94:f1:47:9c:
13:92:4b:3e:17:81:d3:f0:1a:ef:7a:ca:88:31:5b:
04:9f:5f:c9:14:3d:25:88:b9:22:04:8f:f1:07:f5:
5f:30:42:ed:11:3c:eb:e9:2e:ea:c7:b2:8a:ed:b6:
30:b1:28:19:8a:aa:0c:1f:09:c3:52:49:c8:bd:be:
55:4f:77:eb:70:45:4e:b8:6f:66:20:dc:d2:78:20:
02:ac:bf:a8:71:54:75:37:16:d2:b1:c6:d4:e7:d0:
07:97:cc:39:e0:85:22:10:a1:65:c6:c8:0c:6c:c3:
f3:f9:9a:2d:0b:bc:5e:b7:43:72:8a:58:27:16:b2:
fa:27:d1:cf:73:fb:72:d1:13:e7:a4:ac:9d:07:af:
e0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F7:F9:78:4A:06:9D:28:A0:78:B4:98:2B:8A:4E:1B:2C:75:BB:EA
X509v3 Authority Key Identifier:
keyid:62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a0:4a:2b:8d:4d:f7:9e:94:c0:15:c7:ec:e1:a1:d4:24:d8:
68:a3:2f:c9:f6:c6:3d:46:ee:95:82:6e:2c:d8:b3:b3:0a:6e:
72:c7:20:97:93:f4:6c:f9:29:75:69:fa:f0:07:4b:ab:07:57:
2b:f4:46:14:73:4c:42:d8:c3:2a:09:2c:5b:d2:be:70:7c:9a:
49:86:35:ce:e9:ee:ae:06:01:62:22:98:ee:10:19:3b:ec:7d:
ec:30:61:2c:4a:32:31:76:06:49:ea:bc:f8:f1:93:c1:60:0d:
68:ae:80:11:9b:3c:e2:82:6c:9a:48:38:de:cf:ce:48:a7:31:
98:88:7b:5a:1c:7c:d0:f3:a5:7f:33:2e:05:81:88:a4:ae:aa:
82:cc:f7:13:79:bd:a0:7b:f1:f2:16:3b:c8:8d:cc:db:3d:96:
7c:b7:b0:14:10:14:9e:54:98:de:8f:cb:21:de:c2:11:cb:7b:
0a:64:6a:4e:cf:99:1c:fc:fc:4d:f2:e9:8b:90:dd:b8:76:37:
6b:a3:9c:56:c3:1a:a1:c2:22:44:ad:89:23:06:28:73:81:c2:
2e:b4:27:d9:65:5d:27:93:21:e4:94:5d:5e:f7:62:e6:03:39:
5c:ac:1a:e1:a0:54:d2:0d:fc:11:58:6b:0f:58:72:6b:d8:66:
ae:8d:da:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:56:05 2025 by rpki-client