Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/yvRJQqKfrGEs1E-DrTF6HA9bjuo.mft
File: yvRJQqKfrGEs1E-DrTF6HA9bjuo.mft (raw, json)
Hash identifier: HUYsD8YdSzT8fErGloKqxr8Q4C+2G1la6JpJTmA79Xs=
Subject key identifier: 83:95:B0:13:D2:60:AE:21:05:BD:B1:8F:38:FF:EB:D1:CA:95:41:7D
Authority key identifier: CA:F4:49:42:A2:9F:AC:61:2C:D4:4F:83:AD:31:7A:1C:0F:5B:8E:EA
Certificate issuer: /CN=caf44942a29fac612cd44f83ad317a1c0f5b8eea
Certificate serial: 0194BCE083FE2E098BE3DF5A1A301869CFE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvRJQqKfrGEs1E-DrTF6HA9bjuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/yvRJQqKfrGEs1E-DrTF6HA9bjuo.mft
Manifest number: 0775
Signing time: Fri 31 Jan 2025 15:00:17 +0000
Manifest this update: Fri 31 Jan 2025 15:00:17 +0000
Manifest next update: Sat 01 Feb 2025 15:00:17 +0000
Files and hashes: 1: kubkTN8FMP9d-Mo63ocBIKQM-Lc.roa (hash: keKknVV6p3wikzpiPvb9HlIVLJ5zBFrwVTTK+JW8U4o=)
2: yvRJQqKfrGEs1E-DrTF6HA9bjuo.crl (hash: M7jfMKhwbfNGLIAWTeswhw6L9uJhPF6pkjioetjHup4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:83:fe:2e:09:8b:e3:df:5a:1a:30:18:69:cf:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf44942a29fac612cd44f83ad317a1c0f5b8eea
Validity
Not Before: Jan 31 15:00:17 2025 GMT
Not After : Feb 1 15:00:17 2025 GMT
Subject: CN=8395b013d260ae2105bdb18f38ffebd1ca95417d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1b:89:e2:5b:71:aa:ee:f3:fd:8a:f4:e9:dd:
51:cd:b7:ac:79:80:c6:6d:b0:03:3a:27:02:76:05:
e6:a3:09:c8:93:ce:99:0f:1d:55:de:58:e8:24:46:
29:a8:d2:e1:7f:7a:5d:ef:2f:73:f4:3b:ab:62:85:
f5:c2:21:63:13:79:cf:05:ab:84:7c:f6:a5:72:f9:
3b:45:4c:46:d8:e6:e8:35:f2:07:e3:23:51:2f:52:
a3:da:ae:1c:3f:e0:c1:fe:be:45:06:b9:54:5d:a2:
47:71:7f:00:54:b4:6e:83:2e:0e:17:22:ec:38:59:
1f:be:06:8c:bf:60:d9:9b:4c:01:be:ab:9e:28:0a:
b3:5b:6b:d7:26:c7:26:0b:e2:7b:52:cd:8c:46:27:
2a:93:39:f0:90:f8:90:88:f7:0c:78:09:f8:ac:76:
6f:e4:86:21:55:0b:22:21:aa:a1:6b:c7:d4:75:31:
9a:ff:b4:e0:bd:f9:0b:63:f6:fe:ff:60:bb:15:7b:
2d:d6:5f:92:f8:9d:38:c7:23:6f:c9:40:3e:b3:a7:
0b:ed:15:26:36:23:4d:2e:a0:67:13:75:9c:73:44:
7f:b4:78:a3:80:04:87:1d:a9:7c:0c:69:f2:22:a1:
96:e1:a4:5c:e0:56:fa:c3:46:51:4d:3b:05:d9:ab:
58:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:95:B0:13:D2:60:AE:21:05:BD:B1:8F:38:FF:EB:D1:CA:95:41:7D
X509v3 Authority Key Identifier:
keyid:CA:F4:49:42:A2:9F:AC:61:2C:D4:4F:83:AD:31:7A:1C:0F:5B:8E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvRJQqKfrGEs1E-DrTF6HA9bjuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/yvRJQqKfrGEs1E-DrTF6HA9bjuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/yvRJQqKfrGEs1E-DrTF6HA9bjuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ec:e9:2a:9e:01:7f:c5:c9:b2:31:cd:3a:5e:2f:2f:57:af:
bf:77:6e:ba:d9:41:db:c7:60:ae:fd:3e:08:9f:34:7e:9a:62:
08:9a:2e:66:36:89:34:4c:6b:77:a2:ae:14:fe:b0:13:48:29:
d7:f3:75:80:e6:55:81:2a:a2:e4:2d:08:7b:f1:5a:e1:5b:91:
c6:91:ba:f1:34:92:c7:85:d0:27:09:23:51:ac:c8:a6:fd:13:
a8:93:e4:71:a3:93:fa:e6:21:7e:ad:47:d1:36:dd:ca:0d:10:
36:c4:1d:15:77:99:33:17:de:6f:16:42:52:9c:fb:b4:6b:d2:
ee:fd:f3:91:9a:5c:e3:1e:60:9f:a0:81:db:d7:e9:9d:02:7d:
51:8f:a4:04:d5:93:ae:82:4e:0e:8d:29:97:c3:57:2a:82:06:
1a:c0:9b:fc:de:d0:53:d0:f5:0d:a9:5e:b3:3b:6a:a8:e1:ad:
06:09:a6:34:76:57:83:f6:8d:c0:80:89:c8:80:bb:46:b0:fa:
c0:fd:c7:d6:9d:f3:2e:eb:74:ec:45:83:92:13:62:d6:0f:9e:
0e:38:b1:65:76:d6:ec:33:63:6c:88:e7:56:fb:8a:0a:a7:21:
0a:cb:01:70:36:af:e0:3b:ad:d3:da:f9:9c:39:50:db:94:fd:
01:30:8b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:50 2025 by rpki-client