Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
File: yp6lFngHtwhbUTEMpg2_K5GYL8c.mft (raw, json)
Hash identifier: daTlJJpVaVIoU9Y9Dki4NPAngQDvLCaSMPMBaOBqGUA=
Subject key identifier: 53:7D:83:D6:03:BB:47:C1:72:A5:AA:01:26:5A:43:30:85:93:2B:5E
Authority key identifier: CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
Certificate issuer: /CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Certificate serial: 0194BD4EBF8A93EE085AE6670DDEE2458C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
Manifest number: 0930
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: xsFDhAZJurVFLNSpvCJf1kS8dwM.roa (hash: wMuwURUbdvicot2CMjliv2z3rDNvHfV1WIAmLSMG/Bo=)
2: yp6lFngHtwhbUTEMpg2_K5GYL8c.crl (hash: fqw5nTOLdlv51HC+bMLdRF1zlmBHFomzeUu+zqIYbgI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bf:8a:93:ee:08:5a:e6:67:0d:de:e2:45:8c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=537d83d603bb47c172a5aa01265a433085932b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ae:60:ed:14:f8:11:ed:84:1e:a4:1a:f6:3f:
7d:13:dd:56:2e:ef:a4:ef:15:bc:ce:74:90:aa:2d:
73:1d:4b:00:ad:f3:d5:94:c4:7a:a7:ce:08:31:b5:
3c:12:d1:5a:57:be:88:6f:1a:ad:71:c8:5d:de:1f:
3b:64:1a:bc:1e:83:31:5d:31:68:cc:b4:17:c7:33:
f5:26:90:4a:04:2e:88:bd:11:42:2e:f6:2a:85:71:
e8:c3:b9:23:96:a6:d9:00:d6:7d:50:f2:7c:80:d2:
36:67:65:c4:df:2f:7c:c1:fe:fe:55:e6:fc:44:ca:
54:c5:1a:78:14:ee:23:f9:88:e2:46:3d:a5:37:79:
39:be:7c:a8:4e:3b:83:76:1a:37:a0:ef:6b:bc:6f:
40:9f:c7:6f:02:da:74:67:aa:2d:b3:d2:5e:63:de:
85:61:aa:df:8f:cf:93:64:81:7b:d1:8d:15:4a:e7:
87:1a:99:6c:bb:ba:c8:87:54:53:9b:5b:17:e1:4d:
e1:92:fe:5a:70:88:b3:35:41:b9:8c:02:44:2a:41:
91:d4:e6:7a:9a:5b:9e:5a:69:ce:b5:68:31:fb:bb:
64:30:58:cd:55:ee:54:42:11:7f:34:ad:72:94:25:
0b:4a:a2:65:e8:4f:d3:44:67:c5:9b:92:ce:69:5d:
1a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7D:83:D6:03:BB:47:C1:72:A5:AA:01:26:5A:43:30:85:93:2B:5E
X509v3 Authority Key Identifier:
keyid:CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0c:63:4a:25:f8:8c:ee:ce:ff:05:bb:95:8a:7b:e8:0e:77:
9d:08:91:ff:9c:52:3d:50:fa:2c:45:bc:74:bf:12:e7:6c:9f:
ff:2e:1c:1d:bd:6a:66:97:fc:b3:07:51:69:45:88:d4:00:a3:
49:10:ea:38:e4:f6:71:b2:24:37:27:a1:ee:7c:c0:de:a4:b9:
92:e1:b9:1a:ad:fa:b8:3d:cf:f0:71:a5:a4:42:a9:42:ed:64:
57:ff:02:eb:fa:8d:3e:68:26:a0:18:ce:b2:75:89:96:c5:f1:
cb:3c:c3:93:02:64:36:74:4a:ac:ff:41:9f:96:1c:19:88:ee:
86:9d:9b:74:74:16:1d:4c:cb:39:eb:ce:bc:a8:16:1c:20:65:
5b:d9:df:70:9a:c6:e0:d9:1b:03:a8:19:90:cd:3f:32:06:b4:
cb:01:11:a3:37:1d:7f:97:72:17:d4:49:e8:5b:e8:d5:28:4c:
a6:d4:67:89:23:61:cf:52:c2:3d:47:3f:88:2d:c7:53:11:9c:
0d:d2:33:dc:ab:3a:ab:78:10:17:26:b8:a4:dc:5c:0e:9f:db:
22:d4:bb:36:b3:7c:5a:55:bc:1f:4e:2f:2c:90:4a:d0:f6:9f:
71:ed:e9:64:d5:a7:e1:15:df:c1:a2:c5:b2:85:f2:29:10:b1:
d9:0d:3d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:07:53 2025 by rpki-client