Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
File: ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft (raw, json)
Hash identifier: kSC2tbi7ZHoLSKItgI7yaO2tKLIyLcIq6K4CprTGu3k=
Subject key identifier: 9D:AA:AB:72:A9:12:6D:BE:BA:21:1A:88:AC:94:0D:B3:28:D4:44:F1
Authority key identifier: C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
Certificate issuer: /CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Certificate serial: 0194BBCE267DDCE8ECA19D2BD61DB1A2738F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:37 +0000
Manifest this update: Fri 31 Jan 2025 10:00:37 +0000
Manifest next update: Sat 01 Feb 2025 10:00:37 +0000
Files and hashes: 1: K21ypNssIjRXFOw0fmL843PpW-s.roa (hash: YKKmVgu8U+pfVl80ZWCnY8eOTJS6TtTJ/J+lDMSN7aE=)
2: ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl (hash: wd4zKo1KJcde9POOrathiEXF7yMVdSgBLQQChrH8w8I=)
3: z_DYGAISByZ4EYZLcYZm9xxTsPA.roa (hash: wyWaYpWMqLeJKfHtKjObHg0XG1oN2Hh8M5UrpYDjJyo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:26:7d:dc:e8:ec:a1:9d:2b:d6:1d:b1:a2:73:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Validity
Not Before: Jan 31 10:00:37 2025 GMT
Not After : Feb 1 10:00:37 2025 GMT
Subject: CN=9daaab72a9126dbeba211a88ac940db328d444f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4d:93:45:27:f5:c8:4a:89:df:9e:96:17:27:
1f:bd:8f:c3:8d:52:75:77:a8:dd:4f:9e:04:f0:e3:
b7:4e:c3:af:ee:29:c0:b4:6b:96:e4:da:6a:8f:82:
16:a0:e2:07:ab:a5:64:10:7f:dd:70:c4:d1:38:bd:
72:ec:bb:6f:4e:c7:e8:f5:54:09:cd:81:24:f5:25:
97:fc:3d:4e:30:0c:91:a5:2d:e2:06:95:e5:01:8d:
08:51:2e:76:3d:b3:ed:1f:22:fc:b8:b1:b8:f4:be:
7a:f0:a1:1e:5d:84:b5:53:45:10:6d:aa:90:34:3b:
ae:9b:dd:b7:5e:c5:59:95:52:47:ed:3d:0a:37:5a:
23:5a:52:aa:92:3d:96:03:ef:e1:61:92:b2:fe:7d:
55:ef:68:b5:e3:51:2b:17:2d:6f:94:63:ab:80:9e:
59:1f:fa:25:08:89:60:9e:8f:a0:7c:ae:96:0b:c3:
37:33:0b:0d:06:0e:fd:0f:64:08:67:a5:2c:bc:a5:
9b:3b:d5:02:9b:ef:0f:ba:f1:e0:fc:7a:e2:61:fb:
6d:78:6c:4b:1d:8d:fe:74:41:72:f0:bb:8a:e1:66:
ef:0a:5e:ab:b7:de:d5:69:8f:ba:c3:56:10:56:49:
5b:88:fe:b7:0b:60:10:c5:e9:cf:53:e6:db:31:1b:
5f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AA:AB:72:A9:12:6D:BE:BA:21:1A:88:AC:94:0D:B3:28:D4:44:F1
X509v3 Authority Key Identifier:
keyid:C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c4:e8:d6:44:d9:8c:a6:02:84:1b:28:11:e4:06:19:65:68:
f3:5e:13:46:63:9c:43:e3:63:d0:1e:b2:c4:a2:3e:6b:6e:60:
0d:18:3c:f7:38:78:42:b2:3d:3a:1b:cc:7b:7e:54:c0:52:32:
cf:e5:57:7c:ef:b0:e7:55:4a:47:6c:28:a0:ed:4f:f7:05:66:
ce:99:76:3d:b4:6e:94:0f:67:d3:4d:e2:2e:b7:a7:42:41:d8:
e5:f7:be:a9:78:04:cf:a9:9e:99:13:f0:c8:b1:1e:23:6f:c1:
36:a6:5a:24:90:f5:30:c7:c3:cf:7f:29:99:49:88:46:65:df:
90:d0:04:7f:27:90:ae:e9:eb:a3:9e:db:fb:8d:ed:c1:fa:c6:
93:eb:4c:b4:f6:61:91:1e:5b:de:12:e8:c4:e0:02:30:09:b3:
c0:a1:54:6f:32:b9:a1:de:fe:5c:9a:c4:3a:1f:91:5e:cd:b7:
c4:91:0e:cc:b0:50:05:1d:65:70:1f:fb:6f:e2:68:29:e4:47:
66:53:27:fa:37:ef:9d:fd:5a:22:01:f5:e5:5a:8c:74:de:cf:
8c:27:66:ec:ea:1c:27:27:ce:d0:64:82:14:d4:02:a6:9e:e4:
28:e9:23:f6:90:c3:20:4d:22:d3:3c:a5:44:e4:32:6f:60:87:
97:4f:69:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:30 2025 by rpki-client