Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
File: _ymks_Cjr4u-1gKaiyZdyTIE594.mft (raw, json)
Hash identifier: dlZUOE3MsCl1pRixU/EU336TKJ2pEEFx9wsWsXpTu8c=
Subject key identifier: 7D:7A:F8:41:06:21:92:C3:E6:34:FF:DF:86:41:B9:5C:D6:95:65:4E
Authority key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
Certificate issuer: /CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Certificate serial: 0194BBCE558541A36FEAF6614E9CF6FB9ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
Manifest number: 0235
Signing time: Fri 31 Jan 2025 10:00:49 +0000
Manifest this update: Fri 31 Jan 2025 10:00:49 +0000
Manifest next update: Sat 01 Feb 2025 10:00:49 +0000
Files and hashes: 1: Sz2bdOCE_Wcxx_Cr6328GnhL2kg.roa (hash: xLto0l4O/7LoweUajPoDbmBCNQiQzqcGIgLGSKNHb6A=)
2: _ymks_Cjr4u-1gKaiyZdyTIE594.crl (hash: NGcX4+9ZBvD1JcoL67W2yk4q9bl4D2YRsnxsVpT9AjU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:55:85:41:a3:6f:ea:f6:61:4e:9c:f6:fb:9e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Validity
Not Before: Jan 31 10:00:49 2025 GMT
Not After : Feb 1 10:00:49 2025 GMT
Subject: CN=7d7af841062192c3e634ffdf8641b95cd695654e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c8:e0:05:b2:b2:61:05:60:7b:ee:11:6b:4b:
97:8e:dd:19:0a:11:22:39:e4:53:46:fb:f4:b4:ae:
19:7e:d6:42:58:7f:a2:8b:87:25:8b:ca:8b:55:f1:
b1:94:87:05:ce:14:39:ec:b6:2c:e0:86:8a:94:2a:
e4:c1:64:06:88:57:31:bd:03:f5:09:bb:b3:a4:36:
66:b5:cb:b9:8d:dd:ac:3f:73:e1:06:eb:32:21:cf:
f4:7d:9b:8a:b7:30:c9:5c:47:06:da:b6:69:00:8a:
26:70:65:a4:6d:84:9b:fd:3c:32:56:62:37:31:2c:
0e:9e:e3:45:11:5a:7b:68:da:e6:d2:bc:ce:c2:f9:
1f:ba:17:a7:4b:60:2f:c7:c0:cf:03:0c:f3:40:68:
36:f8:74:fc:63:d8:4b:d3:61:a7:80:c8:ac:d3:a3:
b6:eb:f2:fd:ac:e2:05:8d:61:04:ac:b0:7c:f7:0b:
24:fc:58:44:1b:85:e5:5b:1d:b5:b1:df:e4:15:69:
ec:1f:b8:80:4c:19:fd:17:1e:ea:62:64:c7:35:8e:
08:97:8c:32:f3:7c:cc:09:d9:79:c4:f7:f7:15:e5:
3e:9c:26:09:23:55:a9:6e:6c:47:e6:4b:f4:b6:b1:
b1:e6:b4:50:a6:d0:a1:42:fe:eb:cf:69:3a:29:8e:
00:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7A:F8:41:06:21:92:C3:E6:34:FF:DF:86:41:B9:5C:D6:95:65:4E
X509v3 Authority Key Identifier:
keyid:FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:73:97:54:79:be:b6:64:1a:e2:17:27:a7:51:c1:12:27:73:
f8:7c:7f:fe:26:c9:a5:ac:ca:7c:2f:b4:c3:7e:68:ff:c8:fe:
39:da:df:c4:d8:ab:63:77:ac:e5:4a:fc:63:39:18:34:23:93:
d2:a5:3e:ec:b5:83:94:82:9e:ef:42:85:19:8b:c0:71:38:79:
fe:99:d3:91:d3:83:50:f4:62:99:15:d0:ca:33:31:6f:db:2e:
cd:5a:97:6d:06:ca:77:7d:8a:32:10:68:ea:3d:06:f1:18:b8:
61:38:9d:5a:f4:88:1d:30:4d:37:5d:5a:04:a7:72:b5:91:3b:
6b:78:16:14:4a:e9:b4:4f:34:2c:26:28:f7:eb:a7:da:1a:a2:
4c:70:d1:31:87:0e:e6:c4:cd:bd:9d:3e:3a:34:95:e7:54:94:
01:b4:d6:e4:9a:24:d4:1b:6d:81:41:61:f8:0d:b4:81:8f:44:
ea:c8:99:d2:97:2a:d5:f4:0c:c0:8c:79:5b:a7:95:cc:84:d5:
c5:37:31:3c:9b:7f:9b:4e:33:d9:32:21:80:d4:e8:68:d3:0d:
92:ef:ae:a0:b2:34:b6:28:ee:26:d3:2e:09:e4:0f:22:22:a1:
bb:2d:a9:37:f5:bb:a5:99:8b:dc:41:15:3f:00:5e:3d:09:a9:
41:46:2b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:37:05 2025 by rpki-client