Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/798745-e247-4a87-ba1d-b66d8664b09b/1/_yS3L1-QQNTSJoj16lEfYV8VAEw.mft
File: _yS3L1-QQNTSJoj16lEfYV8VAEw.mft (raw, json)
Hash identifier: 2zLPb9Jgt92mA3CQF9q3Ms39Wlqxn1Qkusoko+xZIAU=
Subject key identifier: AB:95:7C:32:FE:C1:D7:95:F7:76:A4:55:97:DC:C8:E9:BC:48:17:41
Authority key identifier: FF:24:B7:2F:5F:90:40:D4:D2:26:88:F5:EA:51:1F:61:5F:15:00:4C
Certificate issuer: /CN=ff24b72f5f9040d4d22688f5ea511f615f15004c
Certificate serial: 0193F7784B7041EBB079D38A71985911EDF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_yS3L1-QQNTSJoj16lEfYV8VAEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/798745-e247-4a87-ba1d-b66d8664b09b/1/_yS3L1-QQNTSJoj16lEfYV8VAEw.mft
Manifest number: 13C6
Signing time: Tue 24 Dec 2024 07:01:16 +0000
Manifest this update: Tue 24 Dec 2024 07:01:16 +0000
Manifest next update: Wed 25 Dec 2024 07:01:16 +0000
Files and hashes: 1: F2WEHd37tJPKXfKnNbCgfAL8xBk.roa (hash: Y++OIw5H6psqrbf44uHtn8kjnZcMNTHmN3OMMaBUxpo=)
2: _yS3L1-QQNTSJoj16lEfYV8VAEw.crl (hash: OrnGpcajZe0sh+M7QcjHkoz+Xl3pf7Thokw8m8fI7as=)
3: xGMiPELHN0xps6jTX2uaCpUA-Uk.roa (hash: nFXiZ/NZNvOmrGYayRVbxhA1gDDAZRPYjlCQaExjR0w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f7:78:4b:70:41:eb:b0:79:d3:8a:71:98:59:11:ed:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff24b72f5f9040d4d22688f5ea511f615f15004c
Validity
Not Before: Dec 24 07:01:16 2024 GMT
Not After : Dec 25 07:01:16 2024 GMT
Subject: CN=ab957c32fec1d795f776a45597dcc8e9bc481741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3c:81:5d:19:99:2d:69:9f:94:dc:30:30:01:
75:3f:45:36:a5:cc:1c:7e:63:af:18:7c:ea:05:d7:
93:2d:a6:03:8f:2f:59:d9:d2:aa:3c:5e:b6:65:7e:
c7:3d:7d:bf:65:2d:42:e2:93:ef:39:00:1b:3d:e9:
8e:fc:79:6d:8c:87:ea:dd:c0:02:ff:2e:ae:3a:99:
f1:91:e2:18:d3:6a:36:03:7e:80:b5:00:f4:24:61:
36:41:5f:0c:2d:bb:70:08:37:87:86:02:ff:cd:8a:
9a:e2:ef:7d:24:72:19:ef:f5:c0:b3:b1:31:a5:44:
3a:87:ed:28:8d:7d:da:df:25:ec:38:21:52:7e:00:
b1:44:ff:a1:bd:a3:74:f9:e7:0b:6f:e4:6b:00:ff:
48:61:ae:31:ed:6f:63:d7:9e:54:ba:48:15:81:94:
d9:0e:9b:2c:c7:a1:b8:cf:79:f2:f2:65:c0:5c:45:
26:c1:8a:01:1d:e2:78:ae:c9:5c:fd:3b:1d:6e:69:
a5:e5:f9:71:35:a7:5e:e3:9c:d5:c2:93:7b:55:d6:
b7:1c:0d:11:67:22:ff:d5:40:ea:68:9f:19:e7:bb:
79:dc:a6:2f:ea:be:d3:e9:c1:bc:1f:50:e7:f8:d1:
4d:20:9e:a5:f8:7b:86:40:35:ed:4a:53:f6:3a:75:
f4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:95:7C:32:FE:C1:D7:95:F7:76:A4:55:97:DC:C8:E9:BC:48:17:41
X509v3 Authority Key Identifier:
keyid:FF:24:B7:2F:5F:90:40:D4:D2:26:88:F5:EA:51:1F:61:5F:15:00:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yS3L1-QQNTSJoj16lEfYV8VAEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/798745-e247-4a87-ba1d-b66d8664b09b/1/_yS3L1-QQNTSJoj16lEfYV8VAEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/798745-e247-4a87-ba1d-b66d8664b09b/1/_yS3L1-QQNTSJoj16lEfYV8VAEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cd:b3:9b:cc:87:3f:2b:2a:40:b5:1f:4e:03:0e:18:7a:4c:
33:c4:ef:7c:99:be:1f:eb:b8:04:18:0a:c5:a3:83:12:57:70:
96:01:99:2d:07:84:ca:32:23:43:d7:3e:06:cd:96:ca:63:ed:
1a:71:83:b7:c7:0f:f7:94:73:48:62:57:51:d9:0e:cb:9a:d3:
8d:5c:dc:93:e1:80:6b:7a:92:2b:69:cd:48:f0:4f:e9:00:57:
66:ac:a9:f7:59:e9:fa:02:03:7b:1f:38:b5:7b:59:f7:ec:ac:
84:6a:c6:e8:f0:c4:3b:a9:99:2d:b8:98:63:33:ca:58:e5:e7:
64:5e:a1:be:de:44:ff:2c:1b:31:8f:a8:12:7f:c2:2f:fa:59:
28:be:82:4c:86:aa:4d:4c:46:32:86:be:99:3c:ed:9a:3c:82:
fd:ae:78:c7:e0:12:57:23:d1:29:d0:a7:36:fd:0e:a5:74:39:
89:82:ba:53:16:22:82:11:09:99:52:cb:31:33:d9:d4:46:93:
ef:63:2f:fc:05:21:ee:76:3a:28:7d:61:97:6d:fc:5a:c7:72:
28:88:7f:bb:8d:02:f5:61:dd:59:bd:40:8c:fc:11:b0:c1:23:
87:1c:84:4e:db:3d:14:04:3b:41:36:62:6d:6f:05:f8:04:c3:
ef:5d:73:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:56:50 2025 by rpki-client