Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
File: ydWxKeBvlSRoXnABAoQfctaRXDM.mft (raw, json)
Hash identifier: lvLW1SlBGD/f8EzUBo+8Y7tYk0KYwLnxFStDJKobR0I=
Subject key identifier: 02:36:30:60:CA:02:B0:9F:CC:4B:85:45:2A:59:45:B3:0E:F7:41:C2
Authority key identifier: C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
Certificate issuer: /CN=c9d5b129e06f9524685e700102841f72d6915c33
Certificate serial: 0194BD4E4AB4B05EDFDD18DF2441E41B7A78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
Manifest number: 020D
Signing time: Fri 31 Jan 2025 17:00:12 +0000
Manifest this update: Fri 31 Jan 2025 17:00:12 +0000
Manifest next update: Sat 01 Feb 2025 17:00:12 +0000
Files and hashes: 1: OpWpWHElMT6Em0cb46EU4-eZHBM.roa (hash: UkmgnvSBtnTTqSpYqYCCjTjePdoSg2sK2f+rfkHw/HY=)
2: ydWxKeBvlSRoXnABAoQfctaRXDM.crl (hash: TmQP86Fy4q3o0crn65kPQBN1GZ9eUd9uLqpitu1tNCA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4a:b4:b0:5e:df:dd:18:df:24:41:e4:1b:7a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d5b129e06f9524685e700102841f72d6915c33
Validity
Not Before: Jan 31 17:00:12 2025 GMT
Not After : Feb 1 17:00:12 2025 GMT
Subject: CN=02363060ca02b09fcc4b85452a5945b30ef741c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:74:3e:4f:54:bd:83:46:5d:93:23:cf:0c:
ed:bc:ac:13:70:d3:19:67:31:2e:6b:42:54:4d:ea:
88:16:3c:14:df:54:a1:90:66:76:82:8f:90:6d:61:
ea:7c:c3:b7:d0:32:28:1b:7e:57:84:13:69:08:c6:
2e:0b:66:0d:52:14:cb:95:7a:11:ac:b2:5e:7a:b4:
25:d3:0f:8a:a6:b6:8b:a8:87:1f:38:f3:c8:d6:84:
6f:8a:35:2b:bd:fc:31:41:89:f3:13:68:08:2b:73:
cf:15:03:04:eb:b3:0f:d3:3a:12:e1:41:d9:42:c9:
09:86:55:96:17:11:9d:5c:65:43:ca:96:ca:db:23:
ef:d1:9f:9c:df:cf:b6:90:66:d7:8e:1f:9e:1b:9f:
f9:30:7a:81:8b:6b:64:ef:17:1d:bf:f2:c1:17:64:
e3:b4:c1:60:15:4e:b1:02:03:ed:27:c7:c2:cb:cb:
b5:c4:b2:13:07:01:4b:af:6d:ea:31:56:a2:c2:23:
a5:56:8f:02:aa:99:b3:85:3f:22:b7:d5:21:30:70:
22:78:b2:a6:e6:c4:93:9e:ab:55:2f:cf:0e:88:5a:
27:4b:03:96:33:67:c4:71:30:f8:42:b5:76:8c:b8:
6c:05:ae:64:4d:b6:4a:37:68:76:da:58:c2:cf:70:
ed:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:36:30:60:CA:02:B0:9F:CC:4B:85:45:2A:59:45:B3:0E:F7:41:C2
X509v3 Authority Key Identifier:
keyid:C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c9:d4:2b:0d:60:44:65:e7:87:b2:65:9c:50:ba:f4:d1:fe:
b3:85:21:c5:11:69:4c:ed:0c:9c:07:e3:6f:be:8e:c5:e5:f0:
b1:f4:b4:83:df:67:fc:a4:87:99:48:23:a7:d2:40:c7:a8:4c:
ac:5e:24:39:e7:0c:5f:44:dd:a9:a3:59:c5:4b:d5:40:df:f2:
87:39:9a:93:f4:31:6e:c5:c9:9c:6b:9f:9c:67:dd:0d:a8:24:
d0:0b:0a:e7:08:d7:5e:b8:94:b1:f5:56:d8:e8:0f:37:53:3c:
2a:aa:1e:c5:a0:99:da:8d:62:71:d7:09:85:0c:b5:58:15:10:
0a:62:a2:cf:e2:59:12:3c:99:28:bf:d9:d6:b0:52:a4:9b:f0:
f5:10:eb:b0:5e:bc:71:8c:2c:cf:8e:75:64:60:92:2d:93:2b:
4a:89:20:04:f2:09:65:fb:ab:6b:98:af:c0:6c:78:cf:3d:89:
88:fc:97:6f:cd:9c:91:b4:e4:3f:5d:e8:41:e9:ca:1d:eb:ca:
df:ac:51:5a:c4:67:50:19:82:50:59:cc:6f:05:97:f6:bf:85:
df:6a:aa:ec:b0:6b:4a:be:73:05:fb:3b:cd:d9:05:26:71:06:
9c:af:48:da:ae:70:aa:9c:3c:a7:b2:a0:4c:90:9d:b9:3f:a7:
d3:ed:74:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:46 2025 by rpki-client