Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
File: yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft (raw, json)
Hash identifier: /Z3y0ojpYNI9mn3fD/has2QxMVZe3KpgcORG1WOLXzo=
Subject key identifier: CE:5D:F1:46:15:6A:21:33:58:C7:A3:DF:5B:CF:0C:1C:F6:BC:20:EB
Authority key identifier: C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B
Certificate issuer: /CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b
Certificate serial: 0194BC04C9BF622EBB47C2AA08E9E7ACCBF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: L3Ex1huYGbfFaIkjXL4KGjdWjh0.roa (hash: 8p4bAJw9gJuSHOeFBlOOJiJU9JXB0IkecShkQCCnZXg=)
2: yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl (hash: Sw1U+DWoYbIUDb5PMkJ8BB+BrwErbI0G2Uhv7yfKBcA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c9:bf:62:2e:bb:47:c2:aa:08:e9:e7:ac:cb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=ce5df146156a213358c7a3df5bcf0c1cf6bc20eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f8:16:76:74:29:0b:b8:bb:28:0b:1a:34:f2:
9b:d5:6f:c4:71:10:89:aa:06:55:2f:7f:a0:97:e7:
d7:1b:40:3e:ce:e3:ec:d2:a1:9b:29:09:a5:df:dd:
27:13:ec:78:50:de:1c:3f:5f:fb:1b:cf:46:7e:5c:
d7:c7:f6:45:94:9a:9e:98:0e:12:17:20:df:ad:73:
83:7f:5b:dd:59:87:61:40:df:9b:a2:aa:9c:34:3f:
68:ee:b4:2c:1c:2b:05:66:ce:ae:44:13:93:a8:dc:
a8:90:87:b7:ad:dd:21:4d:7b:ff:12:ee:5e:14:05:
fe:e1:b1:03:62:b3:e1:6d:04:56:f0:c4:ca:1c:6d:
79:f7:4b:62:43:0a:13:fe:db:58:52:81:31:be:9c:
c7:91:87:21:56:23:7b:3b:cf:92:59:02:f9:8e:cf:
41:f9:6e:5a:22:87:cb:a6:ba:15:b6:6d:98:91:3a:
99:75:6e:ed:57:80:b9:7c:57:55:92:fc:77:4d:4d:
80:30:32:5c:4f:b3:ee:57:0b:2e:76:96:96:c3:1d:
c2:9f:44:a2:78:d6:6e:a8:48:f2:46:ef:6e:81:3e:
05:e4:6a:72:97:5c:89:67:5d:e2:1a:d2:c1:f5:8e:
2b:91:7f:b9:aa:84:78:88:b6:69:4c:41:e9:ef:8c:
ae:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5D:F1:46:15:6A:21:33:58:C7:A3:DF:5B:CF:0C:1C:F6:BC:20:EB
X509v3 Authority Key Identifier:
keyid:C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5d:49:8f:1b:9e:52:d0:89:1e:44:4f:1d:23:5b:bb:75:41:
57:11:43:be:c1:c0:85:11:e7:80:59:be:19:1b:f8:fc:e6:86:
0d:65:cc:3c:1e:8c:b1:6a:75:f3:12:4a:38:65:61:6d:94:04:
c2:56:ee:d6:62:16:67:17:68:66:18:05:9d:bd:16:c9:c2:1c:
2d:a3:91:d8:a8:26:15:aa:46:a6:eb:c9:22:22:6c:3e:96:49:
9c:77:65:03:90:11:93:57:c1:bf:ea:c7:f9:e6:9b:a1:a9:d3:
47:8a:28:b5:96:d3:dd:d2:a2:3b:60:1d:37:30:93:5b:b1:6b:
cb:91:c4:00:e9:d9:4b:3d:b0:a9:cb:4b:b4:4c:10:39:b3:d9:
9f:7a:65:2b:9e:e4:34:82:30:22:64:45:78:9f:0d:ab:4e:42:
5f:a0:83:fa:43:d1:b2:14:52:90:9a:bd:54:c4:ea:73:94:29:
6f:0a:3c:fa:22:d6:4f:f5:de:4f:84:e0:5e:7c:e8:da:24:51:
97:b7:9c:2d:52:7a:81:f2:0e:5a:cd:a2:50:cd:41:3d:a2:c1:
45:be:46:f2:7f:8c:d5:72:76:66:32:d4:af:13:95:20:2b:07:
02:32:2e:31:83:bb:b7:00:4e:2c:13:e6:87:9f:b4:39:74:12:
5f:39:46:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:56 2025 by rpki-client