Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
File: ya74cWdYXSiYMVqjdT8_po2tLG0.mft (raw, json)
Hash identifier: irJ4O2x0j3PDKwFojr8S57/Ugi7KKRItSzGExFLVSUk=
Subject key identifier: 5C:27:A4:96:82:97:D2:6D:F9:7D:02:D4:62:AB:3D:B7:8B:22:EC:3D
Authority key identifier: C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
Certificate issuer: /CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Certificate serial: 0194BCA9713302F96F8E7E82D72B62751608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
Manifest number: E9
Signing time: Fri 31 Jan 2025 14:00:08 +0000
Manifest this update: Fri 31 Jan 2025 14:00:08 +0000
Manifest next update: Sat 01 Feb 2025 14:00:08 +0000
Files and hashes: 1: qHsglpTjaUy6D2wkWmdz8udPRn4.roa (hash: 4Um1Beu8aZnlezP4Me/VufAkyUkp19/FydjNRHcjoJE=)
2: ya74cWdYXSiYMVqjdT8_po2tLG0.crl (hash: 26LPoV8iuB6ejd+goOub8JKuq+avbR0RUe73Ej/DKIU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:71:33:02:f9:6f:8e:7e:82:d7:2b:62:75:16:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Validity
Not Before: Jan 31 14:00:08 2025 GMT
Not After : Feb 1 14:00:08 2025 GMT
Subject: CN=5c27a4968297d26df97d02d462ab3db78b22ec3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:6d:fa:ae:7c:81:df:4a:84:ca:bd:f7:e2:
92:01:38:ac:eb:5a:26:c9:ee:eb:55:cf:e3:cd:94:
46:04:25:f2:e6:d9:2c:21:df:f3:fb:a2:21:17:84:
7a:b8:19:50:47:82:d8:55:e5:6f:78:aa:75:ac:7f:
4f:09:b1:fa:97:dd:f6:a0:e9:35:ad:a1:ab:99:3c:
8f:8b:a5:58:f8:87:92:6a:56:71:73:a6:0c:5b:71:
98:0b:91:3c:14:15:d1:bd:f7:4e:bd:2e:67:f3:92:
eb:7c:df:19:05:ea:94:6e:85:9b:d8:6e:52:88:bd:
9d:14:9f:3d:dc:3b:a8:41:79:7c:53:a8:cf:71:e6:
0c:aa:ca:6c:93:e3:21:9e:ed:47:b4:62:ed:d1:d0:
40:db:dd:05:e3:6e:bf:12:a8:1c:8c:bf:c1:9c:90:
4f:9b:8a:9d:4f:8c:00:13:0c:73:e1:62:cd:8d:24:
64:69:74:92:58:af:23:b5:5e:23:83:db:94:c6:23:
42:dc:07:8b:22:d9:a2:74:cc:7c:4f:d1:94:af:28:
38:5b:5d:1c:78:1c:62:59:04:75:ef:ea:dd:50:a3:
b3:2c:db:8b:56:60:52:4a:39:9f:29:6d:58:1f:29:
12:1f:b5:4e:94:5e:4a:43:24:ca:bf:b9:87:24:92:
3b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:27:A4:96:82:97:D2:6D:F9:7D:02:D4:62:AB:3D:B7:8B:22:EC:3D
X509v3 Authority Key Identifier:
keyid:C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d2:f0:fd:95:a1:5a:05:e1:85:af:f3:de:40:d7:98:21:c5:
0a:6d:9a:97:c8:25:f6:86:67:d6:cf:2e:d0:22:2d:8b:6e:39:
d5:38:43:32:07:93:46:18:0e:1a:1b:38:7f:3a:e9:f1:ec:6a:
c3:45:10:08:c5:30:ef:08:59:b9:26:8b:5f:89:1a:a3:6f:c9:
35:67:89:d3:df:97:a3:f7:e1:d4:c6:8f:da:df:b0:47:3c:c9:
41:44:72:a5:e8:b4:0a:49:89:b0:a7:c0:3e:ff:e2:2b:01:da:
41:49:89:df:14:7a:95:b4:74:49:98:65:42:22:87:42:e6:4b:
a5:23:50:0a:64:51:f1:88:f0:fa:c4:de:8a:7a:76:c9:c7:41:
ac:e9:21:36:d5:c6:4c:59:6a:58:6d:e2:76:23:4e:f7:ee:64:
59:4f:78:a5:d6:eb:45:a8:0b:a3:73:26:21:bf:9c:2a:07:29:
fd:bc:c2:b5:0d:ea:ea:90:8c:08:c6:93:34:c5:a1:e3:7b:8f:
ed:d5:63:33:e5:3a:24:a7:53:89:25:59:86:d0:5f:fe:43:f8:
cd:16:99:be:d3:77:25:06:7a:8c:ac:a1:1b:4d:99:96:af:f0:
6e:7b:3c:bd:63:ae:14:e8:00:bd:8c:8b:7c:44:b8:64:c8:7a:
ad:31:93:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:35 2025 by rpki-client