Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
File: ypQrJwZ2HCunUyiXg-35heM48Xc.mft (raw, json)
Hash identifier: b1emXPKfRDDBONP2wOshibUx7bSGET06YuJDKg8OLz4=
Subject key identifier: C0:36:B6:61:75:04:E1:22:97:94:F8:8B:A3:63:13:98:71:72:6A:FE
Authority key identifier: CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77
Certificate issuer: /CN=ca942b2706761c2ba753289783edf985e338f177
Certificate serial: 0194BCE0E7D1D6C79DA88A970220A452BF7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
Manifest number: 09B7
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: T7qjUpuFek2HO0YlRj5-k5NdZXM.roa (hash: mMiY1pDTZBZHtZK+AEVkPiyRFIi1wbnQYRg+XFOmlGk=)
2: ypQrJwZ2HCunUyiXg-35heM48Xc.crl (hash: qs1xQKOvlHlRz8kiBsdcDjUo5ToRh7VuNSvcUpRBRoM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e7:d1:d6:c7:9d:a8:8a:97:02:20:a4:52:bf:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca942b2706761c2ba753289783edf985e338f177
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=c036b6617504e1229794f88ba363139871726afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:22:19:5b:0d:16:1e:96:46:63:34:2f:2a:
8c:d8:36:18:72:ef:70:eb:97:18:5a:dc:a8:4b:bb:
5b:2f:72:23:91:02:c8:9e:fa:26:a5:0d:0f:05:72:
5a:23:03:cd:78:17:60:38:f8:f0:f7:a8:2e:0e:93:
02:04:0b:88:ac:e2:5a:a9:95:1d:79:00:2a:38:08:
8a:54:54:41:dd:5e:d7:bf:3f:47:10:ab:d5:4e:34:
38:6b:85:d8:87:47:ad:f2:e9:75:73:5f:2b:a7:06:
eb:4b:39:bb:f0:b0:b9:1b:d9:5c:40:79:93:4b:f7:
a0:03:51:70:fe:d6:bb:ea:ff:7f:4f:1d:7f:2f:a0:
0a:d8:ba:b7:d8:42:7f:55:b3:20:48:aa:a6:ef:89:
c9:95:63:bf:99:ca:57:ef:86:ee:ee:3c:a7:1d:59:
63:9f:0a:07:e4:45:8b:40:8e:4f:e8:a6:53:58:b2:
fb:38:e9:a3:bd:0d:f4:5d:a5:0c:8c:82:b3:1d:9d:
ae:9a:37:8c:3f:8c:02:62:a4:bb:04:7c:37:ac:8c:
3e:d3:02:67:90:11:9b:01:58:e2:14:c3:2c:bb:49:
88:21:63:08:cf:7f:d8:be:7c:0f:dc:7f:52:40:c3:
1f:57:d0:e6:5c:75:cf:cd:28:18:e2:56:e1:a6:44:
df:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:36:B6:61:75:04:E1:22:97:94:F8:8B:A3:63:13:98:71:72:6A:FE
X509v3 Authority Key Identifier:
keyid:CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a5:d0:95:98:2d:1c:90:58:28:ec:b1:08:af:54:34:73:04:
64:ac:de:61:37:60:ea:ed:63:b2:62:0b:21:95:8c:89:a2:6b:
a2:92:5e:68:bd:b8:08:5c:b4:61:53:be:78:14:a5:db:ea:da:
52:35:98:47:0f:e8:a4:ea:23:8c:44:8f:c4:23:0f:ae:71:b5:
cf:9a:fd:b6:f2:a4:a2:63:bd:60:8e:88:f8:0f:d7:29:93:5e:
5f:9c:c6:55:42:25:5f:ea:77:0b:28:e6:e8:76:10:08:f0:b0:
66:70:79:8f:97:96:5e:9e:1f:58:1d:c7:c7:88:21:4f:e1:78:
3b:e8:99:3f:3f:77:38:41:18:94:83:34:bc:37:77:0f:76:35:
26:28:de:94:d9:9e:ad:6a:4b:a4:f8:30:c0:48:8c:d5:06:98:
34:64:9c:b7:af:bb:85:3b:25:ff:66:55:ef:0d:da:3f:00:17:
44:6e:1e:30:56:36:b4:27:0d:39:9d:fd:76:c2:97:13:51:73:
4c:c6:e2:8a:19:5c:1f:98:9d:4e:54:ca:1f:0c:ac:17:29:15:
22:2f:1e:61:85:d2:f2:93:a2:76:35:89:6c:d6:3a:37:b6:99:
6e:e3:56:45:0b:89:2e:cd:cb:16:45:16:f4:76:95:70:81:94:
94:3c:24:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:36 2025 by rpki-client