Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
File: yex331ntcqVFfezmpT0F7QrmAKo.mft (raw, json)
Hash identifier: 8rtVp5uiCfum84DgOHk3jDmDwE22HTvXxykBGrMnnlM=
Subject key identifier: 44:D2:81:A5:F0:D1:BC:29:C7:07:99:85:8D:B9:3B:E8:3B:65:7E:FA
Authority key identifier: C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA
Certificate issuer: /CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
Certificate serial: 0194BD17D510B8B738E65927FADD11528C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: usN8GZVfJ54q0l8hKewfBSWmGHw.roa (hash: IakOdZo+PiFdg1ApCygqDDOunMse1hhehFbuFFIfZ5o=)
2: yex331ntcqVFfezmpT0F7QrmAKo.crl (hash: 8i03vcCTTQuQLh5qqt3z4iHsZl2k10ey9oX6b5rxT0o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d5:10:b8:b7:38:e6:59:27:fa:dd:11:52:8c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=44d281a5f0d1bc29c70799858db93be83b657efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:14:4a:aa:81:cc:7d:66:bb:4d:fc:8a:5c:6c:
32:44:65:cf:65:b2:4a:9f:93:82:50:1f:19:cc:26:
e6:83:79:04:c3:e5:df:a3:6a:d9:3c:22:97:06:8b:
f4:73:ef:19:dc:15:cd:e3:97:38:8f:c6:1d:29:35:
8c:73:c6:8e:2e:94:72:dc:b2:44:d7:6c:dd:68:2f:
07:05:ed:df:46:1f:e1:5e:fc:bc:75:a3:1b:c5:a9:
b2:05:07:2f:0a:06:0a:89:ac:a0:96:e2:6d:58:84:
f9:a6:b8:fa:e2:a8:7f:9e:56:4e:cb:75:2a:a9:c1:
86:9b:79:18:82:df:a1:d1:34:01:40:56:44:85:59:
2e:a4:1e:bb:fb:de:28:32:e8:13:1e:90:94:6f:6a:
34:ce:cb:76:7e:93:c4:8b:c3:76:65:f3:68:49:b5:
16:3a:e5:a9:ef:9b:b5:05:ac:85:40:a7:ab:91:e7:
88:fe:bc:a6:e2:ab:ed:8a:80:60:71:53:ba:1c:96:
25:1f:13:bd:da:86:b8:bb:be:cb:81:59:a4:74:01:
44:af:c2:65:a0:ed:ab:b6:d4:35:41:23:95:b1:90:
71:36:d3:41:5c:fd:ad:b4:08:4b:e0:4b:d0:b7:22:
a5:18:1f:6e:42:27:92:70:1c:b8:8a:23:04:95:89:
75:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D2:81:A5:F0:D1:BC:29:C7:07:99:85:8D:B9:3B:E8:3B:65:7E:FA
X509v3 Authority Key Identifier:
keyid:C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:1c:fb:ea:46:90:f6:22:87:d6:a1:ae:37:73:57:b9:c9:3a:
e1:f7:95:79:fe:4e:3e:af:d4:e3:6c:f6:cc:8a:be:48:05:de:
fe:cc:f2:31:1d:40:53:98:c1:e7:88:09:0e:37:83:9e:7f:0e:
bf:96:01:85:5f:96:a3:76:5f:46:72:e1:56:1f:e6:f4:18:94:
a4:f6:a3:d9:4c:92:47:27:86:f7:6b:96:96:05:e5:3f:20:ed:
78:2d:0e:3e:ed:d1:d1:d0:69:73:4b:a1:29:79:24:0e:ea:f0:
9b:a7:52:4e:f4:6e:a6:8b:9c:36:af:84:4e:a3:f5:e5:3f:07:
04:b6:f5:19:0e:ce:f5:a8:17:5d:0f:34:cc:cd:d2:b2:47:71:
89:63:af:b4:88:f2:d4:b5:f8:96:1a:14:aa:18:6c:45:b6:1c:
d0:f2:d8:cf:f0:87:d7:04:5c:75:8f:ae:ba:91:6e:7a:fc:7f:
b1:fe:f8:f0:9c:38:ac:06:13:aa:23:3f:51:3e:38:79:08:23:
14:93:02:0f:94:4c:bc:ef:99:4a:23:bd:86:85:8c:8a:b1:d5:
7e:57:27:84:8b:13:2e:d0:2e:a8:10:f7:35:48:db:cb:b2:85:
82:0b:58:5b:93:29:fa:7c:22:ac:08:de:69:bd:26:8b:ef:c2:
a8:2d:67:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:18 2025 by rpki-client