Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
File: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft (raw, json)
Hash identifier: lDGeiIBkt7EPj29AO9A1e34dNc83/2tAe7FtcCHviQU=
Subject key identifier: 1D:A1:81:DE:D9:0D:99:EE:18:92:4A:37:BA:D9:5F:5F:A4:B5:B1:4E
Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
Certificate issuer: /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Certificate serial: 0194BC728930AA13958FC404247E8F57AA3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
Manifest number: 0276
Signing time: Fri 31 Jan 2025 13:00:10 +0000
Manifest this update: Fri 31 Jan 2025 13:00:10 +0000
Manifest next update: Sat 01 Feb 2025 13:00:10 +0000
Files and hashes: 1: p-ZJ1P4FI04x2eM9uqiHkn3hI8I.roa (hash: AqpTiKP7a5JtH+C4uYjUrneVtWd73sQjp2S20QK+heA=)
2: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl (hash: 10W5VoOBRUPJoKX5sPUmCyLMw/f5333NsTqQSOCZPW4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:89:30:aa:13:95:8f:c4:04:24:7e:8f:57:aa:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Validity
Not Before: Jan 31 13:00:10 2025 GMT
Not After : Feb 1 13:00:10 2025 GMT
Subject: CN=1da181ded90d99ee18924a37bad95f5fa4b5b14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8f:07:3a:15:e0:27:42:b9:99:b3:35:a7:99:
51:89:26:86:1a:db:2e:88:47:0e:46:78:d7:69:e9:
2e:33:a4:e1:f1:f5:e1:ca:03:47:4b:ef:2f:8c:cd:
f2:e4:48:d4:dd:d6:0e:03:f3:3d:40:93:b6:86:99:
c8:a9:93:82:2b:3e:30:37:99:d0:91:af:1a:46:24:
db:d7:e4:c5:ee:6b:36:22:5a:f8:6f:e9:31:90:ea:
87:38:15:d4:b9:34:6e:00:0f:87:1b:6b:38:e6:12:
db:29:60:bd:47:15:c9:f6:9a:f2:62:5d:26:51:4e:
cf:68:6b:c9:d3:3e:03:ac:e4:8c:9b:6d:3d:71:4a:
21:17:59:c7:ab:7e:98:f1:14:66:e6:91:10:23:e6:
50:46:fe:f4:ed:d8:19:a9:a9:a7:bc:47:4d:f6:7d:
16:dc:fa:a5:47:09:c1:77:49:80:7b:07:11:b0:3b:
6c:64:4a:93:87:b0:76:12:fb:ec:a2:b2:b1:9e:9f:
ca:be:46:14:01:08:e4:8e:55:c7:e9:f1:dc:c9:6a:
87:7e:be:24:b0:46:2f:cb:83:e4:20:45:6a:10:a6:
d4:e1:ff:a3:a5:fb:fb:02:38:31:b2:63:ea:f0:8b:
b1:af:22:67:1a:1e:56:c5:21:52:37:e4:76:db:c0:
ad:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A1:81:DE:D9:0D:99:EE:18:92:4A:37:BA:D9:5F:5F:A4:B5:B1:4E
X509v3 Authority Key Identifier:
keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1a:e2:a9:0d:80:19:ac:0d:ee:c2:0a:01:9f:8d:9c:97:bf:
63:7c:8e:34:41:df:c0:10:da:05:27:a3:af:30:05:81:a5:21:
ce:63:43:14:59:f7:d4:a3:94:fa:1e:a3:b9:4d:62:30:f0:1e:
89:e5:c2:f0:f1:40:0b:64:75:56:17:45:70:bd:d9:b5:fe:e7:
51:f8:48:08:0b:cd:42:ef:04:4f:9d:67:76:83:d8:d7:a3:8d:
9e:7c:e9:00:36:4c:7f:cb:00:b1:71:61:91:2a:76:9d:1e:f8:
82:78:9d:1c:ec:b2:59:64:a7:16:d0:49:42:43:c6:bc:1f:89:
f0:f8:75:a0:52:0b:df:1c:c5:1c:69:60:df:25:93:93:e3:be:
24:11:0a:82:9b:f3:36:1e:e6:a1:12:90:a7:28:b0:16:d6:4d:
84:29:bc:00:6f:b2:99:89:93:31:e3:42:95:da:11:99:02:03:
3e:66:4e:91:37:25:e7:1d:da:36:c6:f1:da:e3:54:e7:2f:80:
fa:56:13:95:0d:ec:7e:97:0a:e5:b9:50:99:3f:0e:c1:2b:a6:
5f:ca:93:94:5a:41:c2:36:f2:6a:c0:a3:f4:9c:b0:e3:52:68:
2e:c8:78:f8:fc:4a:a6:a3:f5:85:56:1b:61:9e:eb:37:dd:78:
5d:d9:a2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:01 2025 by rpki-client