Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
File: yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft (raw, json)
Hash identifier: d1pJF8Q2qISo02GUjFHhsqHCv2hrV8UhAgxOhbxvUOE=
Subject key identifier: 67:9D:A2:A8:CA:35:1E:FA:2F:0C:42:58:7F:5E:00:0A:87:21:2B:F2
Authority key identifier: C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
Certificate issuer: /CN=c8df337cea56a083f46b799072e70da345cc2364
Certificate serial: 0194BC72C67F1BE4E540E746E182C117AE24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: yEMlFNYIo_7PBG15hC66LWSw4E0.roa (hash: 0NF8QaEpF30c3qMJTec6Bga4N+I8Ns4AqntJ51k9D0k=)
2: yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl (hash: Exy+Njr8k2JpL/jxzAvvWvr+fqfMhu0LEKxTx8pYqeI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c6:7f:1b:e4:e5:40:e7:46:e1:82:c1:17:ae:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8df337cea56a083f46b799072e70da345cc2364
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=679da2a8ca351efa2f0c42587f5e000a87212bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e9:78:15:41:9e:b6:eb:0e:2e:94:07:47:62:
d6:c8:aa:57:a7:15:9f:d6:21:d0:98:6d:e0:1c:04:
c4:47:a2:ff:d5:b4:34:06:5b:00:3b:e2:f9:46:09:
1f:11:8b:02:d8:ff:12:d3:c5:d4:2c:b6:4c:06:e0:
dd:97:90:16:b5:f9:f8:4a:7c:59:f7:12:40:21:53:
3e:ec:ad:ec:38:fe:04:e4:7a:71:e9:74:d9:1e:e4:
cd:bd:d3:59:37:d8:2c:ec:71:a6:f8:d3:a9:bb:fb:
1a:97:19:94:43:b9:c8:8c:21:03:be:18:2f:cd:b9:
4c:81:55:44:1a:85:61:7a:c3:3f:00:01:3d:66:21:
79:2d:95:3c:e3:79:38:16:96:4c:6c:50:bb:45:81:
a0:82:21:93:8b:6b:50:bf:59:cb:eb:dc:9d:4c:79:
66:ea:7d:da:28:45:d7:bc:80:ab:1e:ba:be:12:88:
1a:01:8e:d3:57:79:22:cd:95:fd:20:cd:22:88:fa:
14:30:ac:94:bd:79:cf:f7:db:57:fe:9d:a0:d1:67:
6c:73:3e:b6:75:c9:34:4b:73:90:90:85:11:74:d7:
e8:ba:6c:f4:f3:f8:bf:ce:97:6d:7f:be:aa:04:2f:
20:f3:bf:c5:50:af:f7:0e:26:ff:99:aa:52:0f:b1:
3b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9D:A2:A8:CA:35:1E:FA:2F:0C:42:58:7F:5E:00:0A:87:21:2B:F2
X509v3 Authority Key Identifier:
keyid:C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a6:11:e5:34:1a:fe:50:c0:1d:21:ad:88:af:f7:13:33:42:
10:95:a0:3e:1e:a1:ba:59:db:04:58:e9:4a:0b:45:7b:d3:ed:
a0:52:40:d4:2e:60:d2:13:31:2c:dd:fb:9e:6e:32:30:57:96:
f7:5b:5e:2e:0e:56:31:69:bb:37:0c:b4:41:61:dc:e3:c0:1e:
df:b1:24:a1:d7:53:80:2b:34:c7:c8:29:7e:b5:b6:f9:59:4f:
18:dc:fc:de:58:b1:be:db:77:f4:00:f6:3b:d7:aa:0d:5c:79:
cb:2e:74:30:a3:84:1e:cd:5b:c0:1c:30:94:01:23:4e:5a:75:
f3:6a:8f:39:f7:9e:ce:2d:4a:8e:ca:f3:64:63:24:31:76:d3:
18:81:8e:8c:bf:81:82:c9:b3:aa:6f:8f:ab:0a:bb:df:ab:e5:
87:e3:e8:83:63:db:61:60:24:50:78:d1:77:74:56:cc:12:0d:
07:01:68:06:77:b1:8b:f8:f6:c7:75:86:d2:74:c0:2a:32:f6:
ae:58:17:c1:43:cc:14:c1:f1:87:66:ed:6b:7e:e3:49:c6:c1:
79:d2:47:ee:e9:f0:9c:d0:76:97:2a:65:ea:b2:ae:ed:c3:c4:
74:f3:40:65:af:12:bd:ae:38:26:c2:33:21:b0:4a:48:a8:0d:
fb:65:15:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:17:50 2025 by rpki-client