Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
File: ypJvljURiT-k2fvV5k4PikODfkA.mft (raw, json)
Hash identifier: K+SVy59l1cKiq2NG8iqiPWAJPmE62x458fLJfm1GlB4=
Subject key identifier: 32:7C:32:9B:24:C0:8A:46:AA:A0:4A:BB:70:31:A7:C0:4C:BA:9A:B0
Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Certificate serial: 0194BBCE8666B95E08B1D1FFD464F762AD8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:01 +0000
Manifest this update: Fri 31 Jan 2025 10:01:01 +0000
Manifest next update: Sat 01 Feb 2025 10:01:01 +0000
Files and hashes: 1: GUCAqvQ0tMU-bensdtba-Wc3xJ0.roa (hash: WEDF5d5E+5ca0KR+0265vV9lQ4jW9zrbyE6qVfdzth4=)
2: ypJvljURiT-k2fvV5k4PikODfkA.crl (hash: p8hN8DYtNuaQVItt664Us/S0quo1iw7lk0K6wucQJmg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:86:66:b9:5e:08:b1:d1:ff:d4:64:f7:62:ad:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Validity
Not Before: Jan 31 10:01:01 2025 GMT
Not After : Feb 1 10:01:01 2025 GMT
Subject: CN=327c329b24c08a46aaa04abb7031a7c04cba9ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:36:24:61:97:83:13:4e:80:98:f1:bb:43:ff:
05:6b:f6:62:57:c7:fa:b6:62:fe:eb:34:fd:12:9b:
fa:3d:cd:f2:e2:c6:85:b7:8a:ed:8a:76:2b:c5:b7:
d1:ce:0b:e4:34:e2:75:31:cd:59:0c:fe:41:9a:ca:
32:cc:ba:03:37:ee:5d:03:48:75:51:f4:22:08:d6:
99:8c:20:a7:3c:49:df:ed:ce:60:8c:39:df:0f:30:
08:11:b4:5b:e6:e5:24:13:62:78:ff:7e:f8:d6:f6:
f3:cd:4e:a3:7c:99:0f:2f:a3:f3:a9:cf:97:da:fc:
9d:db:65:27:65:e2:d9:f7:48:0c:c0:93:63:73:b3:
bc:17:bf:08:67:70:83:1f:8d:ad:e9:02:3e:9f:96:
0f:b8:fe:da:11:2a:56:4d:fe:da:4b:1a:3e:23:e3:
09:e5:73:7a:80:60:f1:8a:52:6e:0d:17:dc:ca:21:
44:35:9e:23:bc:80:55:15:80:54:e7:18:5f:1b:97:
3b:11:0f:65:1a:29:47:5e:41:84:db:4e:17:e8:06:
ff:3d:bc:35:47:1d:9c:ad:e8:08:cc:4e:85:65:6c:
ad:6a:45:85:cd:30:b6:10:cd:21:b5:02:8e:c3:f5:
39:af:5f:5e:bf:94:c1:a2:86:74:f5:ad:95:de:17:
11:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7C:32:9B:24:C0:8A:46:AA:A0:4A:BB:70:31:A7:C0:4C:BA:9A:B0
X509v3 Authority Key Identifier:
keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0d:bb:55:8d:c0:15:87:8f:2c:3a:f9:42:b4:ad:23:bb:38:
23:97:fc:fe:40:e5:db:3d:6f:93:5f:f3:a0:7f:ce:f5:10:52:
76:03:e0:0d:95:46:ef:ff:22:ec:15:b1:8e:d9:7d:6d:bf:20:
9b:9b:58:f9:be:ac:c0:90:e4:0e:c9:70:03:ac:d7:09:9b:da:
f7:08:9f:3e:2e:8b:8a:fd:a6:32:a3:f7:0e:81:8c:58:47:57:
3e:7b:56:8e:d2:7f:73:2a:d6:d6:e8:45:47:eb:53:a9:1a:da:
dd:03:7d:8e:2d:3d:3b:52:e7:26:bd:96:c5:4d:3b:d0:28:19:
4d:c9:54:ae:75:d7:87:c4:76:13:75:44:7c:b2:64:a7:f1:73:
51:b7:80:2e:2c:b0:61:a7:34:89:ad:05:06:3b:93:c0:e8:a9:
fa:f7:80:6b:17:e1:fb:b4:a5:1a:05:79:9d:2f:49:c9:ad:fa:
1b:77:be:24:31:38:e3:39:3e:e0:79:b8:9e:0a:55:c1:49:f4:
9f:c3:58:ec:d8:04:e2:a2:3d:ee:e5:45:bc:62:59:0e:c0:40:
ac:f8:c3:27:c9:94:1f:b3:8a:93:51:03:0a:96:ad:6d:27:2e:
15:36:7b:5a:d5:f9:ba:af:cb:1d:06:4b:b7:bd:5c:b2:36:5a:
c4:4e:ac:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:49:36 2025 by rpki-client