Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
File: yxTTDzseETdCPEsjWVfzMDBk2v8.mft (raw, json)
Hash identifier: 7p7WhkBTQ7snFD+J0O38m2Pr/efAZ8VbP/Kf5Rsk3qc=
Subject key identifier: 4D:2B:DE:83:E3:1A:43:76:7C:4B:5E:9B:40:08:B0:E8:31:05:37:81
Authority key identifier: CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
Certificate issuer: /CN=cb14d30f3b1e1137423c4b235957f3303064daff
Certificate serial: 0194BBCE94FBD6F9462EC440681C12E78D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: eLZf6bXb8xEZurUf42JvubCYQLQ.roa (hash: CQdXKjlldjU5ONxgLx9uzQIu5vM63ThRAoUDUMH3Bko=)
2: yxTTDzseETdCPEsjWVfzMDBk2v8.crl (hash: BVi5WZOytJ8qbnu19fTbb9NfNIDiSEIOZEHr+bYhyJM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:94:fb:d6:f9:46:2e:c4:40:68:1c:12:e7:8d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb14d30f3b1e1137423c4b235957f3303064daff
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=4d2bde83e31a43767c4b5e9b4008b0e831053781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4c:10:96:df:25:71:e0:d8:b5:52:f0:e0:a5:
39:2d:a2:5c:23:8f:40:2d:7c:d6:2b:8b:27:8d:02:
44:4c:97:4b:3e:3a:95:d9:c6:95:9d:c6:90:4d:d8:
a1:e1:cf:c6:65:73:53:1e:60:67:bd:ae:21:25:5d:
7e:fb:94:a4:53:8d:6f:a5:87:1e:95:77:56:21:45:
d0:f2:98:8b:e4:8a:0e:f3:1d:9c:a9:68:78:50:d1:
09:3b:1f:0a:e1:07:c7:38:b1:43:6a:b5:e8:25:b2:
ad:6a:3c:60:33:ad:33:72:69:28:8e:19:4a:ad:4f:
53:ab:c9:20:eb:ab:f2:1e:27:ef:9f:a9:d8:75:76:
f6:8f:01:36:72:02:08:ab:2f:2e:f1:df:1a:8b:14:
f2:74:85:ab:5a:55:ce:3a:8c:18:a7:c5:f4:1d:d8:
8a:80:ed:df:f1:b1:a9:b1:54:3a:32:51:e9:3f:5e:
c8:67:e3:9d:5a:ba:ac:b9:6f:0f:09:15:b6:1a:b4:
56:21:77:88:b2:6c:e6:72:5c:11:96:bd:3c:7e:f6:
95:9e:60:02:cc:c2:86:88:37:e3:0d:27:90:37:46:
77:c8:9b:a2:70:36:77:cf:e5:b3:7b:c2:a8:96:fa:
38:5e:02:6d:c9:1c:f2:88:25:95:f8:ad:ed:76:15:
fd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2B:DE:83:E3:1A:43:76:7C:4B:5E:9B:40:08:B0:E8:31:05:37:81
X509v3 Authority Key Identifier:
keyid:CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:99:9e:1d:16:72:51:a9:85:ee:14:d1:19:9d:f2:e4:35:2e:
5a:d9:b1:e9:99:ff:b1:a1:e0:8f:be:b0:16:65:34:cc:b2:60:
e6:75:41:ed:86:a1:ca:7a:48:4a:ec:91:88:7d:7e:38:5e:a5:
dd:5c:1b:43:f8:7e:83:e7:97:21:b9:d4:c8:99:b5:7d:60:fc:
ea:65:5a:fd:df:ce:79:5c:6a:22:75:2e:c6:de:6e:d0:86:78:
78:3b:df:08:30:f4:54:34:be:95:65:2b:83:05:9f:b8:f7:55:
99:19:b5:a2:dc:69:32:7b:91:aa:b4:8e:9d:1b:dd:7d:7b:9b:
ea:c9:e5:2b:21:c2:db:bc:a8:89:5c:00:bc:0f:07:d8:e5:46:
47:e6:57:ac:11:ab:be:ff:17:f4:30:5e:cf:db:20:3d:90:b3:
00:2c:01:51:37:18:4c:f5:d5:b2:fb:87:af:ed:0f:49:53:a2:
7d:3c:c8:37:21:64:12:db:2c:aa:50:bd:6f:83:5c:af:6e:9c:
d1:87:aa:21:42:39:cf:be:8a:c0:ff:3e:68:02:6e:b8:52:05:
5e:f9:8f:7e:cc:8d:54:4a:a6:cf:04:dd:0b:77:4c:20:49:cc:
15:f6:fd:91:ed:2c:94:8f:b6:90:fd:77:e4:ba:59:15:de:c7:
c1:60:da:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:20 2025 by rpki-client