Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a96877-301c-4792-9b04-ccaa0c2a7720/1/ySo0INjwnOUgyFomlPGjwwcgE04.mft
File: ySo0INjwnOUgyFomlPGjwwcgE04.mft (raw, json)
Hash identifier: Sx6UPW+TczMibyuZvWX3E8zwjaLxpDsdPGnvD+x3ybg=
Subject key identifier: 63:24:9D:A3:65:7C:4A:9A:A0:9E:AD:F9:0D:00:6A:70:8F:BC:8C:49
Authority key identifier: C9:2A:34:20:D8:F0:9C:E5:20:C8:5A:26:94:F1:A3:C3:07:20:13:4E
Certificate issuer: /CN=c92a3420d8f09ce520c85a2694f1a3c30720134e
Certificate serial: 092C50AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySo0INjwnOUgyFomlPGjwwcgE04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a96877-301c-4792-9b04-ccaa0c2a7720/1/ySo0INjwnOUgyFomlPGjwwcgE04.mft
Manifest number: 08DE
Signing time: Wed 06 Apr 2022 00:59:35 +0000
Manifest this update: Wed 06 Apr 2022 00:59:35 +0000
Manifest next update: Thu 07 Apr 2022 00:59:35 +0000
Files and hashes: 1: _IQi30s96NObdByECAWR7s9f8FU.roa (hash: dF03B+68D35CxRBALaEetzRbSwfcOZ/TexBJhf2pZS0=)
2: ySo0INjwnOUgyFomlPGjwwcgE04.crl (hash: bpBkM7gt4kkPzAABrtuTFgBo1ZDM/+Z3OPUfnndpGn4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153899181 (0x92c50ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c92a3420d8f09ce520c85a2694f1a3c30720134e
Validity
Not Before: Apr 6 00:59:35 2022 GMT
Not After : Apr 7 00:59:35 2022 GMT
Subject: CN=63249da3657c4a9aa09eadf90d006a708fbc8c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:23:ba:ff:7a:01:6b:d4:c0:8a:e5:20:52:44:
a3:70:d9:c5:57:62:f8:88:1f:ef:01:00:3d:c0:b9:
da:a9:21:53:51:5f:ee:e3:c8:65:15:4d:30:3d:ea:
61:56:a9:cd:a6:3b:60:70:81:36:5c:64:f5:6e:cb:
16:55:6c:f9:7d:a9:59:c3:f7:5f:4d:a1:15:cf:48:
41:d4:eb:a4:87:0f:2a:10:81:0c:e1:d2:a6:78:cd:
1d:51:12:a0:f1:3a:98:d9:7c:3d:a3:82:16:e7:48:
fc:70:ee:c0:6a:af:53:ad:ec:b2:15:87:df:a0:89:
9f:a2:9f:1c:0b:87:ff:98:f6:65:6b:dd:e9:bf:cc:
10:71:ae:cd:21:69:ea:db:d2:33:96:85:5e:a0:52:
1c:eb:11:7d:59:ca:48:01:43:fa:c3:0f:de:ad:6c:
fa:a3:51:4c:71:5f:96:c3:ce:86:a6:97:e5:a4:f4:
de:de:09:c8:79:56:d3:59:a1:37:74:6c:f9:35:d9:
a1:37:8a:07:9c:33:b5:ab:c4:9f:77:c6:f8:9f:02:
c4:da:c1:ba:e6:f6:de:6a:94:21:6a:53:39:9d:73:
a8:06:10:25:0a:6b:7e:4b:68:a9:b7:7f:49:01:3c:
0f:13:89:20:3d:08:da:3f:97:d0:92:83:a7:a9:4e:
a6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:24:9D:A3:65:7C:4A:9A:A0:9E:AD:F9:0D:00:6A:70:8F:BC:8C:49
X509v3 Authority Key Identifier:
keyid:C9:2A:34:20:D8:F0:9C:E5:20:C8:5A:26:94:F1:A3:C3:07:20:13:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySo0INjwnOUgyFomlPGjwwcgE04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a96877-301c-4792-9b04-ccaa0c2a7720/1/ySo0INjwnOUgyFomlPGjwwcgE04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a96877-301c-4792-9b04-ccaa0c2a7720/1/ySo0INjwnOUgyFomlPGjwwcgE04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7b:6d:2b:6c:68:2a:62:f0:15:66:90:70:fd:1e:74:d0:18:
0f:36:3b:5e:c3:57:13:ca:3c:45:c7:38:62:e4:08:c5:fa:5b:
4d:e3:6a:b6:15:83:e7:80:5a:06:ee:83:5b:4d:97:e4:18:d3:
72:9f:5b:e1:1f:04:22:58:1d:29:f9:51:b8:4c:6b:73:01:cd:
18:dd:5b:5c:80:4d:03:cd:39:13:1f:bb:c6:59:21:c4:2b:68:
1e:c8:70:ef:d8:6f:4e:50:37:a9:f6:98:53:a3:70:27:fb:ea:
5e:2f:65:8e:97:8e:c0:d9:8a:45:2e:74:6f:37:a0:e2:3c:b9:
3d:b0:b2:88:13:0f:1e:76:d7:4c:1a:ae:a1:e4:ee:93:7d:8f:
7d:f4:01:77:5d:25:52:e6:85:e8:dc:20:10:67:26:8d:af:48:
02:f8:57:5b:f9:52:5d:25:a8:00:7f:a7:5c:de:6a:2e:5a:01:
56:c0:44:e0:87:a7:17:54:a9:8c:78:2c:10:7f:44:c5:7a:5e:
30:4e:97:e3:ec:c1:62:4c:82:01:16:fe:35:c0:8f:1f:b7:28:
f8:47:b9:7d:1b:bc:c6:d8:ab:78:2c:82:8b:d8:aa:03:53:1d:
5a:a3:db:76:ce:dd:c7:84:54:9a:ec:71:f4:7c:b3:67:f2:08:
ee:81:f7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:44:52 2025 by rpki-client