Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
File: yDOgOJWSdW5BXN40irvCQxKwLfY.mft (raw, json)
Hash identifier: x66EFCaaFZLNYK6B31L7Zu1IuOu1v8JSDvAFrwN6B8Q=
Subject key identifier: 15:00:CA:98:6A:94:09:23:C0:3F:32:3F:C7:53:2B:2B:CA:CD:60:45
Authority key identifier: C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
Certificate issuer: /CN=c833a0389592756e415cde348abbc24312b02df6
Certificate serial: 0194BD17F73E264805B5D10ECE16ED881A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:51 +0000
Manifest this update: Fri 31 Jan 2025 16:00:51 +0000
Manifest next update: Sat 01 Feb 2025 16:00:51 +0000
Files and hashes: 1: erRTM1_91VtMTpdLg1tFc8DEnKQ.roa (hash: igv5stthjArSt6knKlRkVvpjhTI9/bVwYZs5FEOn1NI=)
2: yDOgOJWSdW5BXN40irvCQxKwLfY.crl (hash: 0FjZfvpBUA47K8g2T+RfOzioF7B/SFhtiGBrE+2WgPE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f7:3e:26:48:05:b5:d1:0e:ce:16:ed:88:1a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c833a0389592756e415cde348abbc24312b02df6
Validity
Not Before: Jan 31 16:00:51 2025 GMT
Not After : Feb 1 16:00:51 2025 GMT
Subject: CN=1500ca986a940923c03f323fc7532b2bcacd6045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b7:4b:94:c4:af:8d:7b:e4:cd:88:1d:53:6c:
98:77:9d:1b:ef:e8:c0:15:83:73:4c:70:ff:d3:76:
6b:37:83:8f:76:db:76:48:56:f9:b3:d3:0c:c0:52:
57:40:1e:78:8b:34:4d:92:42:b8:7b:83:22:e5:7f:
5a:63:fc:c3:55:c1:ff:03:de:88:ff:51:64:4f:18:
b0:3a:a5:08:6f:08:26:0a:8a:08:74:36:b4:0b:3e:
24:d9:11:bc:64:19:4d:6a:17:84:f3:e5:c1:95:1d:
41:04:c9:42:92:dd:5d:24:2d:79:e3:cd:22:d6:4a:
6c:56:62:a8:88:64:27:08:2a:85:a4:a1:d9:fd:6f:
8d:09:e8:aa:b7:46:95:9b:4f:e7:6d:bb:c3:f8:86:
8c:84:12:5e:60:08:17:40:35:18:d5:3c:bf:c1:4c:
ee:90:4f:0b:9c:c4:79:af:9b:26:c8:de:28:f7:1f:
b8:9c:aa:76:7d:df:b6:c7:fb:56:e2:50:44:f0:49:
15:27:73:3e:1f:bb:b8:df:94:9b:1f:77:e8:ad:9a:
b2:8d:59:7b:ee:26:32:18:5c:47:c7:13:69:eb:89:
bf:d3:8c:64:dd:95:d4:c8:d1:b9:e0:37:87:5a:88:
1d:67:d3:9a:b3:14:f7:95:03:4e:c0:fd:29:d8:05:
03:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:00:CA:98:6A:94:09:23:C0:3F:32:3F:C7:53:2B:2B:CA:CD:60:45
X509v3 Authority Key Identifier:
keyid:C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:06:ec:f9:35:92:e5:70:c5:3d:5e:56:f8:44:f6:03:f1:9e:
a3:3e:16:c7:0b:59:04:64:31:e5:69:a9:4d:63:8d:33:38:fd:
8c:f3:ba:d8:37:f8:75:1a:e9:32:49:ff:c3:39:95:e5:eb:cd:
eb:96:63:7f:0e:4f:02:8a:f7:11:80:ba:09:fc:43:21:1c:90:
9d:1e:b1:a1:22:c3:e8:69:ea:ad:53:48:fb:7b:62:b0:be:d7:
73:69:32:e2:44:18:29:0b:97:f0:9b:39:78:31:4f:7f:05:7a:
a6:a2:e6:e2:c0:45:0e:0e:8a:2a:47:48:59:7c:61:9f:85:df:
c3:0d:39:a4:ac:3b:af:01:86:6e:e2:fa:55:59:0b:6a:6b:9c:
8c:32:ff:92:ae:c0:58:8a:3c:18:2c:0e:b8:00:7b:8f:09:a3:
7d:7e:6e:55:f7:40:bc:b2:68:4e:de:7f:7d:41:8f:ad:f8:31:
70:74:6d:5f:a0:10:84:c5:af:7a:a9:ca:be:9a:c1:54:fc:3a:
51:d9:9e:fa:40:2e:14:03:63:0e:c1:76:55:73:dc:b0:c6:f3:
ce:8a:78:79:a6:cd:8f:1b:bd:ba:e9:af:21:9a:99:b4:73:ff:
db:c3:1e:d6:2c:82:f2:48:83:92:ea:11:2b:a0:a7:cc:ea:7d:
c9:46:80:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:47:56 2025 by rpki-client