Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
File: ymTavZvEZIX2qRY27edT2jjI82Q.mft (raw, json)
Hash identifier: Q1EwSAzC5D4f/EP1kSfODZhgEzXMdoGvX+kp6Zd+jG4=
Subject key identifier: 1C:BD:09:12:10:68:51:1D:FC:E8:94:A8:98:A8:C9:D6:C6:F9:7E:DB
Authority key identifier: CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64
Certificate issuer: /CN=ca64dabd9bc46485f6a91636ede753da38c8f364
Certificate serial: 0194BD179FD8E87972F6570233DCBD197CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:29 +0000
Manifest this update: Fri 31 Jan 2025 16:00:29 +0000
Manifest next update: Sat 01 Feb 2025 16:00:29 +0000
Files and hashes: 1: NA5mgzoDK6jbbKh48XeliWtbDYM.roa (hash: 9nIV3wU01lTdftDhSQVjEb+D2h3DXok24aEDQGNAM3o=)
2: ymTavZvEZIX2qRY27edT2jjI82Q.crl (hash: E6M583JUqWyy7G0KranjWBUwvSncDFLj1VtGD2B+710=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9f:d8:e8:79:72:f6:57:02:33:dc:bd:19:7c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca64dabd9bc46485f6a91636ede753da38c8f364
Validity
Not Before: Jan 31 16:00:29 2025 GMT
Not After : Feb 1 16:00:29 2025 GMT
Subject: CN=1cbd09121068511dfce894a898a8c9d6c6f97edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:70:06:c6:c6:da:e5:71:9b:3e:9a:76:14:8e:
a6:85:2b:bd:bf:58:22:5c:c8:87:92:5d:f5:24:82:
c8:de:86:90:bf:82:b7:c4:f8:2b:72:aa:be:47:b8:
fc:58:7f:8a:6d:ed:ff:ed:de:d1:02:7c:22:14:24:
e2:c9:d1:54:27:ef:fe:8d:5a:41:5c:af:ed:88:a9:
67:d9:b4:a5:d9:91:5e:00:9a:90:5e:19:9d:32:35:
53:57:7b:8a:9b:d0:45:ec:d5:5e:01:e9:54:84:74:
25:8b:50:35:59:66:dd:b2:9d:92:47:6e:e9:06:93:
93:02:12:de:93:5c:ce:7d:a0:cb:21:8a:4e:cd:96:
3e:df:0e:74:8a:54:c2:34:a8:0f:fb:c9:98:3b:51:
6d:44:96:d5:7b:93:bb:43:b1:37:66:a3:34:5f:df:
17:c5:3b:61:0c:b0:d0:ea:04:a0:61:1c:5e:68:a2:
98:e4:42:7c:d0:bf:20:ce:28:68:a9:53:77:66:af:
18:c1:0e:1e:9d:c0:91:80:c7:05:ff:0b:b2:86:a6:
3b:38:fc:22:19:01:bb:bb:62:1b:85:6c:6a:05:91:
05:96:5d:a0:c4:7a:c5:4a:8d:b8:4c:e3:2c:43:ce:
29:9d:78:86:1b:40:0f:d8:9c:b1:81:5f:a0:4f:8b:
7b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BD:09:12:10:68:51:1D:FC:E8:94:A8:98:A8:C9:D6:C6:F9:7E:DB
X509v3 Authority Key Identifier:
keyid:CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5e:f6:b7:6a:94:35:d0:c1:21:29:ce:25:4c:3c:59:21:15:
98:63:dd:4e:6b:f0:30:59:54:16:1d:71:45:e7:ee:af:4c:20:
c9:42:e6:8d:c7:a8:0f:72:c6:99:b1:65:e3:92:47:05:c7:c1:
b6:02:5d:96:cc:04:83:aa:9b:b3:cc:60:21:ef:01:29:4d:b7:
c5:0d:49:8d:cd:14:78:ae:bc:b3:af:a8:6c:3b:3e:28:a8:6d:
94:1a:0a:88:96:0b:1d:1c:fc:4c:21:5e:c8:68:e7:44:c6:32:
ee:ed:89:5e:ae:52:a9:31:f2:1f:31:e2:83:fc:96:04:2d:75:
79:e7:4a:a8:d9:04:1d:55:9d:59:17:4a:2a:51:f9:00:be:0a:
e8:9f:a7:3b:4a:4f:74:d0:8b:40:b0:b9:f2:d7:cc:7a:dc:03:
a4:39:88:6c:b1:cb:e4:9e:21:2f:61:3d:17:a9:c2:dd:ce:86:
24:9e:f1:2d:33:79:d7:86:98:d3:dc:c4:a9:bd:81:ee:41:f0:
1a:ea:e3:70:20:e0:54:2e:50:6a:00:f6:19:69:29:e1:b0:72:
42:4a:68:f7:4a:4e:8b:5e:29:c8:e2:93:50:d7:d2:05:57:f5:
b7:00:bf:21:05:b1:d5:57:9d:af:e7:71:59:e4:60:87:f2:6e:
4c:a7:18:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:15 2025 by rpki-client