Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
File: yaOl5BHeryKE_9AVML-0H4Fsu6M.mft (raw, json)
Hash identifier: Cgu0Nskkk/DBzycE/oIMr0Wzglu9Qd99SPMS8JICbJY=
Subject key identifier: 6E:42:10:8E:97:E5:25:D8:82:B4:48:BD:C6:42:02:C5:60:00:F2:02
Authority key identifier: C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
Certificate issuer: /CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Certificate serial: 0194BC052091D31C63673A7A5C4602CD7009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
Manifest number: 0200
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: UVQQxsyFxE5G_GAZUd3A6ZXjkCE.roa (hash: zpm9oScjJUHtNk/CwO+EVZyjIHRYFCB8FAgH34Qnsvo=)
2: yaOl5BHeryKE_9AVML-0H4Fsu6M.crl (hash: eugOyGJRlkjWRdgSipDhsKNHpzb6McWbqVS6898Jv3w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:20:91:d3:1c:63:67:3a:7a:5c:46:02:cd:70:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=6e42108e97e525d882b448bdc64202c56000f202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:17:d6:79:cd:7d:88:56:53:cf:b4:5b:23:89:
71:49:5b:c9:31:2b:6e:1a:86:d2:59:cf:44:27:57:
b1:85:1b:f9:36:a9:10:e1:d6:04:26:21:a1:d1:63:
63:72:8c:e4:3c:03:b9:04:d6:56:14:9a:ed:9d:c7:
bf:b6:0f:64:c7:85:25:6e:fc:12:c8:77:da:65:c8:
67:b0:9b:f8:70:ac:74:65:9b:86:e8:60:bc:41:47:
0d:31:56:ae:1a:90:e4:ba:f4:d5:02:62:28:c7:62:
3d:0b:ad:6f:ad:fa:e7:3d:95:bc:8a:5c:f6:f3:f3:
c2:dc:8f:fe:c1:b6:15:89:43:33:1a:7b:e7:24:5d:
06:f5:2e:86:e2:66:d7:84:8c:36:0f:07:95:1d:ac:
cf:9e:37:58:1a:29:f6:12:f9:3e:45:6f:c3:12:48:
da:87:ed:6d:6b:3e:57:9e:7a:a7:66:91:dc:93:35:
1b:ca:cb:44:1b:31:cc:04:13:8f:e0:db:a3:7d:ec:
f5:36:3b:a4:02:43:5b:3e:55:c1:39:4a:22:3a:19:
8a:c2:5b:de:14:88:62:2d:94:53:2c:21:ba:86:61:
1e:af:31:cb:70:4c:64:2f:5c:ab:79:7b:ee:00:7f:
24:59:5a:2a:63:8f:05:2f:81:e6:6d:8d:3c:bc:b0:
4d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:42:10:8E:97:E5:25:D8:82:B4:48:BD:C6:42:02:C5:60:00:F2:02
X509v3 Authority Key Identifier:
keyid:C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fa:95:ef:dd:1c:c2:ee:60:02:38:ce:9e:db:03:f4:4b:d2:
6b:29:d8:1b:c4:dc:5b:80:da:84:d6:92:f6:4e:d7:aa:98:78:
b7:01:54:6a:5a:35:8a:0d:42:b7:ae:ac:da:c1:e1:23:3f:de:
66:b3:6c:b8:3a:66:2f:27:c9:7d:8b:83:9a:9b:ef:1c:10:28:
cc:60:9d:db:6d:a2:d2:b7:d1:82:a6:32:21:65:41:5c:39:98:
91:11:3d:80:13:c1:65:3f:78:89:87:13:a4:b0:85:d6:73:61:
2a:16:4e:d2:18:d5:8f:2e:f7:aa:26:1e:0c:c4:d9:ef:22:65:
8a:09:8b:0c:09:8a:93:28:de:9c:84:8a:f6:06:c8:6f:84:ab:
37:ec:da:dc:fb:52:a8:c4:63:62:83:fc:97:2c:96:05:fe:92:
54:7a:4e:cc:41:1c:d2:6a:0a:c6:f4:a7:cc:ee:16:ad:44:40:
d3:57:ee:8a:f0:af:fa:2c:5c:1a:5d:89:23:87:40:b0:6b:2e:
73:73:72:d4:8c:2a:5d:4c:ed:87:6c:85:a4:7c:8c:16:5e:b2:
40:13:8e:df:97:81:89:af:0c:22:0b:b2:91:fb:22:da:82:f4:
71:5a:b7:26:b4:bc:6d:5e:d3:f6:d7:45:0f:da:ed:57:47:61:
23:c2:cc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:02:06 2025 by rpki-client