Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
File: yJwsxInr5I9JBYSshm_jYsQRfnU.mft (raw, json)
Hash identifier: 6L7kaSUQXcoVenpRBMOJkzSjkimXbPiUN6xfUjJlM0k=
Subject key identifier: 20:5B:B8:87:1B:8C:12:4F:0A:9A:37:6D:F0:CA:E7:CF:47:70:F3:9F
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 0194BC0520C9224F3E2944E1B539F4BF6EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
Manifest number: 1140
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: 1S5NGl_9XzrIZlMPmsHgEW4H8RI.roa (hash: ZQeIY/xttmXPutXEtut0kcab8CenHX3mGEuBNFgJJJE=)
2: DW7jRSnbY34hE_RIyO6FIl_U_i4.roa (hash: Bs5rd92ASGZAZDzYbnXm9tO9ObUBPqRSYN5EMjrMJfE=)
3: OHCA3vQMxG1d25xR7UuiUEeJ818.roa (hash: O5s8l0cJjmVTzrkVW/B/tmzvvxU5Y9LtP5126UUkQZE=)
4: VcjKNddvZkM3oUg77hjobEZD-v4.roa (hash: j2f1vP0hAJR3dBAkt/cdLLMXOKpHx4r5QIkrRuPhSCk=)
5: ikC3r3gDMRV7rzOGGg-rqokymXI.roa (hash: zgCMDOXPzxWDouvwv/WvFaJhABZR8ZFNubvE8NCbA04=)
6: lsoRvhBYP4BFjB3EPLYb5DfAt-k.roa (hash: 4aBF5aNmJAlF3RgZKlr2lhS8/MOTaZfHHnjAN6dRE6w=)
7: yJwsxInr5I9JBYSshm_jYsQRfnU.crl (hash: 2E+d1hDDpQFP/KFSkV0GFTfT8Kc7iI0kA9NC/sg1Oag=)
8: znIVaHKYkyKBEQBVptVbnSPMRT0.roa (hash: g4EHnnn85toCFef30TdaJ5KqFEtNZHscTK/ZYfzTE6w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:20:c9:22:4f:3e:29:44:e1:b5:39:f4:bf:6e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=205bb8871b8c124f0a9a376df0cae7cf4770f39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:29:1f:fb:ba:e4:f4:c2:0f:96:e9:74:91:f4:
eb:b0:ec:4d:30:9f:69:b1:0c:f7:91:40:99:c3:4f:
54:fe:6f:e1:c2:33:5e:83:ad:0f:b9:3c:fb:2c:8b:
4d:32:a2:0b:a5:f7:6d:92:17:98:69:83:50:d0:f6:
2d:f5:00:ee:0f:7d:7f:9c:84:28:cb:0e:fb:0a:47:
a6:88:e2:86:53:3e:74:7f:89:77:91:32:93:54:19:
36:ca:c1:41:1b:55:be:9f:5d:3e:14:4e:a2:0b:31:
9e:a8:70:71:5d:9c:02:8a:cf:ee:33:3f:6e:c9:d5:
9a:c8:51:b4:f4:f8:5e:24:45:0a:db:e1:62:3d:93:
eb:94:5c:ea:ff:bd:c0:87:ef:64:3b:13:e5:33:06:
42:b6:8c:29:db:26:b3:a1:84:ee:43:8a:e8:53:4b:
1d:ed:d4:38:e2:41:ab:a3:04:10:81:31:ae:f0:a6:
ae:1d:46:a6:6e:c4:e2:36:5c:90:08:83:c4:10:c5:
8e:0e:e1:b0:9a:fd:02:44:5e:e1:1e:57:60:f5:44:
7b:f6:0e:3d:a9:7c:74:02:c2:40:46:65:a1:5e:90:
a6:3f:5b:75:0f:8e:ed:85:85:8e:4f:38:3d:95:06:
e1:2b:5b:4e:19:c9:a4:e0:80:c8:a8:89:66:8c:a2:
9d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5B:B8:87:1B:8C:12:4F:0A:9A:37:6D:F0:CA:E7:CF:47:70:F3:9F
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:72:7a:75:7e:7e:e9:3e:37:15:92:33:6b:0e:52:04:d1:17:
c6:0d:10:ab:d8:47:1d:be:1d:40:fb:d1:cf:b3:6a:53:c8:71:
a2:2a:8f:df:6a:fe:43:fa:50:24:72:eb:b6:0c:b9:22:40:70:
d7:1b:d3:13:9e:6a:3e:8b:5a:e0:5b:ed:03:0c:9f:aa:39:24:
8b:a6:fd:86:87:02:b8:95:64:3f:a6:7a:2e:26:4c:96:2d:66:
1d:5e:97:7e:a3:fa:22:38:79:03:2d:9a:38:db:a2:ad:d0:1c:
fc:6f:2c:be:80:5d:e3:04:90:4a:fa:d8:d9:ae:d2:27:a4:55:
4f:f1:2e:29:ea:c3:7b:be:30:c9:01:22:b4:03:15:c5:45:c3:
70:70:dc:82:b8:d5:75:e1:e1:c6:6a:1f:93:a1:f8:53:eb:7e:
36:c5:12:c9:2d:44:4d:1e:f9:c2:ef:81:c2:a0:d1:8d:6b:72:
71:db:a4:34:fb:0f:64:98:5a:d9:77:e8:1b:36:89:c0:0e:68:
bc:7e:8f:cc:a3:95:53:29:e0:0c:d2:19:f5:52:64:d8:4d:04:
c7:47:0a:22:36:d7:1d:3e:10:7e:f9:f3:c8:63:f9:04:63:17:
8c:06:14:ed:1c:f4:1b:52:fe:5e:c9:b8:4a:c6:0e:55:08:07:
c4:47:ed:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:31 2025 by rpki-client