Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
File: yAYJ8hhRvff3TtGPDwnfku23U1U.mft (raw, json)
Hash identifier: 1MyN494FHXnpUFpJ4LprDkGrrvr16wSFOLZZN+OzBiU=
Subject key identifier: 11:1B:A2:DF:3E:EC:8F:A4:E3:4F:22:F0:47:7F:04:05:11:BC:62:4A
Authority key identifier: C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
Certificate issuer: /CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Certificate serial: 0194BC3C32D250B3A2A41F59A75D5564A19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
Manifest number: 0BEF
Signing time: Fri 31 Jan 2025 12:00:49 +0000
Manifest this update: Fri 31 Jan 2025 12:00:49 +0000
Manifest next update: Sat 01 Feb 2025 12:00:49 +0000
Files and hashes: 1: Wg-bSrUatmukyH3xDDiSbozsSDE.roa (hash: +C5Ooc81ApTJACiPZcILtsd+XtVBtietyO7rZMjbj2I=)
2: yAYJ8hhRvff3TtGPDwnfku23U1U.crl (hash: M/iAZA7HJ4qLN51CM3kU08Gks2eqmcX8+LvyQL4SBA8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:32:d2:50:b3:a2:a4:1f:59:a7:5d:55:64:a1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Validity
Not Before: Jan 31 12:00:49 2025 GMT
Not After : Feb 1 12:00:49 2025 GMT
Subject: CN=111ba2df3eec8fa4e34f22f0477f040511bc624a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:35:f4:19:08:60:68:a5:19:d3:e7:17:66:fd:
25:3a:67:57:7d:3a:bb:3e:39:19:e8:48:c6:9d:ce:
46:54:98:b1:dd:5b:60:72:1b:bf:c2:36:ab:38:53:
d9:17:ef:16:7a:87:0e:3c:7f:01:21:b5:35:32:13:
2c:28:24:a4:3c:3c:a3:27:e1:d0:03:1f:a9:36:23:
92:89:d4:2b:c7:57:21:8c:22:e1:6a:32:db:0e:5b:
47:d2:66:6e:4a:98:19:79:7a:b0:16:78:10:5f:69:
3d:cf:b0:bb:dc:44:1c:5b:e4:0a:44:db:b2:5c:f4:
b1:1d:b2:91:8e:4f:da:a9:9a:ac:38:f8:13:41:68:
7a:43:1c:32:ca:3a:d5:3e:12:73:f3:d7:8b:7a:4a:
8e:58:82:c8:ab:fe:b1:49:ea:13:a8:47:ce:af:d4:
70:6f:75:45:00:77:0f:34:db:26:49:da:4b:cb:ce:
5a:2b:9d:97:f5:46:fa:22:86:17:ac:3e:8d:4a:97:
35:ca:0d:11:69:e0:ff:54:01:69:38:ee:09:1e:6f:
8d:9e:26:29:e7:16:0f:2a:a8:32:e8:4f:d0:f6:4d:
cf:a1:70:27:39:37:70:30:4b:4e:d5:5f:b8:3b:d3:
bc:84:73:ac:a4:a8:01:f4:e4:b0:0b:94:71:3a:cd:
57:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1B:A2:DF:3E:EC:8F:A4:E3:4F:22:F0:47:7F:04:05:11:BC:62:4A
X509v3 Authority Key Identifier:
keyid:C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:df:63:03:2f:d8:53:24:41:f1:35:77:9f:da:4b:67:73:54:
17:32:ff:b9:7e:4d:21:fd:44:15:53:90:64:2b:c8:d4:56:9a:
3d:ce:c7:71:c2:20:f7:f6:09:b1:c4:55:b1:fa:1a:1a:a2:f4:
70:cf:a7:f0:fb:9f:bc:1b:09:42:fa:2e:c9:a1:ec:37:c9:99:
3a:e8:8e:7f:2e:b8:34:ac:4b:60:1a:50:4b:56:8b:a8:15:67:
4a:03:a4:0e:d7:c9:41:62:45:81:ed:95:49:00:38:7b:47:ec:
01:2c:a0:d1:a9:22:59:1b:4d:30:1a:4a:39:3b:10:4f:82:ed:
fe:8d:04:c0:e5:70:7d:7d:92:10:ba:56:a6:6e:1e:4d:04:3b:
ff:c1:20:92:1f:97:78:2a:68:c4:f5:60:39:4e:e5:79:7b:2e:
ea:8b:d1:00:77:3a:4f:1a:24:78:22:2f:46:54:02:46:e0:47:
d6:1e:df:d7:5f:2b:cd:d3:f3:42:26:37:f5:29:94:de:ad:48:
9f:d9:b7:cc:4c:6f:05:f8:4e:3b:fd:5d:d8:c8:62:10:88:ae:
54:68:6d:03:46:43:90:04:ef:67:ed:75:5c:40:fe:e6:a1:67:
86:0c:a9:de:9d:b9:f4:d3:14:48:c2:ea:0b:ff:67:31:a9:fd:
60:5f:2b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:53:08 2025 by rpki-client