Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
File: CYdvfc8Myud0IWBGOzjhw181bRI.mft (raw, json)
Hash identifier: +WWVFu81fDq3TLrDcH1P6nU7ungjdydaiYofuZzzw3c=
Subject key identifier: F2:C8:E7:EA:D4:39:1E:7A:92:D1:44:CA:F6:77:B7:FA:48:BE:0D:38
Authority key identifier: 09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
Certificate issuer: /CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Certificate serial: 0194BC3C0ABD8A7BC26781E210C7738F6C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
Manifest number: 0C9D
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: CYdvfc8Myud0IWBGOzjhw181bRI.crl (hash: YJkLEzoYJXoQG00Szy1ezilYNH3U3Aym2WgbLpomXpk=)
2: v1PRoA5ebsh_hlHI-WdJ9oH7RYY.roa (hash: g731f8Kk7ZRmBzHdANv/XJyJm7Gc4rKXDwNwW3MJnpw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0a:bd:8a:7b:c2:67:81:e2:10:c7:73:8f:6c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=f2c8e7ead4391e7a92d144caf677b7fa48be0d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:61:b4:3d:17:ae:29:6c:e6:b4:75:b9:3e:c6:
66:9f:1e:2a:16:76:f0:96:80:8f:c1:81:60:cf:ea:
37:a0:ba:4a:35:71:2b:72:e4:f6:47:54:d9:d5:ed:
c1:cb:60:30:56:4b:09:79:82:5a:2d:b5:29:35:d6:
f9:6b:cc:6a:a9:ac:ed:2b:14:e4:9a:a1:cd:48:17:
70:20:d3:2d:c3:fb:fb:0e:60:cf:7b:4c:da:06:aa:
cc:23:0b:9b:cc:30:c3:36:0d:14:f5:49:a0:18:d8:
70:84:b4:44:6f:c2:b0:8c:8f:04:18:e5:88:e1:92:
01:7d:d8:14:ee:87:c7:b1:b1:bb:44:6e:91:6a:7f:
f0:87:bd:15:74:c4:d4:25:e3:14:0c:c2:44:26:4f:
0e:a7:dc:12:23:0d:39:fc:30:76:0e:bf:d0:55:48:
69:3d:c1:0c:23:d9:e4:90:ed:9e:b0:85:14:4e:59:
75:26:36:6c:5e:95:85:50:e1:95:57:24:d9:12:c2:
11:01:ac:cb:67:c8:1b:22:e2:a6:c0:55:2c:c5:16:
58:d5:22:7a:b3:7d:66:1d:6c:45:71:16:35:6b:37:
2a:04:7f:72:21:d0:f7:9e:60:35:db:91:3e:82:a9:
08:70:e6:1c:02:aa:ae:a8:b0:cd:29:ad:16:12:65:
02:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C8:E7:EA:D4:39:1E:7A:92:D1:44:CA:F6:77:B7:FA:48:BE:0D:38
X509v3 Authority Key Identifier:
keyid:09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3d:24:c5:b4:57:33:12:2d:aa:bb:1f:63:4e:87:9d:c3:7c:
ac:c9:ff:a8:f9:b0:9d:c1:1b:f2:97:3e:4e:2a:ea:9d:d7:18:
ca:65:6a:68:7d:62:78:68:fc:bd:b6:c7:3e:d6:e5:12:9b:a3:
af:03:e9:a6:ea:91:66:60:a4:e1:d6:d3:0c:d1:59:30:ae:10:
a8:df:b0:00:db:42:f6:41:77:73:7a:28:aa:59:26:bc:ea:7d:
b9:bf:f6:06:60:18:80:e3:6e:60:b2:be:4f:89:7b:3b:ff:fa:
a2:b0:e6:88:f2:a9:a1:27:dc:55:64:ca:b0:21:c4:94:bc:aa:
09:03:dc:49:30:76:60:1e:3f:1c:ca:d5:3d:70:40:d1:40:1c:
cb:6e:c3:85:78:0d:24:38:1c:7f:f6:a8:01:31:2a:0d:65:a2:
18:cf:31:42:9b:52:ce:a8:cc:ff:c5:05:72:c8:1d:fc:44:b0:
54:5e:34:0a:cb:d6:b0:7a:3a:f2:9e:2d:4e:e3:60:37:31:72:
c1:f1:55:23:cf:03:c9:f7:d4:5c:69:4a:7b:98:74:d2:19:fd:
f3:e1:93:bd:cc:fb:5b:5a:66:8c:e6:d4:ca:6c:4c:3a:6b:bb:
86:6a:22:80:5c:b7:ed:2e:39:57:d2:50:3c:f6:d2:5d:a0:b2:
29:da:1d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:21 2025 by rpki-client