Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
File: yCyAAaF2QraVYsY6xYkg2jYPFU8.mft (raw, json)
Hash identifier: YV7B1e6RmUIh+seo3lNy7cgw9tf1kaZxAkOuNu9+BSI=
Subject key identifier: 4B:F3:02:64:E0:96:3C:32:2E:06:C1:DC:6A:B5:10:0C:16:BE:0E:38
Authority key identifier: C8:2C:80:01:A1:76:42:B6:95:62:C6:3A:C5:89:20:DA:36:0F:15:4F
Certificate issuer: /CN=c82c8001a17642b69562c63ac58920da360f154f
Certificate serial: 0194BD17682C5ACE5947ADA68471F2FCF07A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:14 +0000
Manifest this update: Fri 31 Jan 2025 16:00:14 +0000
Manifest next update: Sat 01 Feb 2025 16:00:14 +0000
Files and hashes: 1: 1QZVcXytUuxqM1PLlTk73xY8pDU.roa (hash: oWmFEOAWi7NkKA3U3ke7LKelHFeRhHAmJaVgP86H32g=)
2: yCyAAaF2QraVYsY6xYkg2jYPFU8.crl (hash: UFgj7eQDSIJzV/0Jpvu2goXmOjeQ243mSQS4KQRUIho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:68:2c:5a:ce:59:47:ad:a6:84:71:f2:fc:f0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82c8001a17642b69562c63ac58920da360f154f
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Feb 1 16:00:14 2025 GMT
Subject: CN=4bf30264e0963c322e06c1dc6ab5100c16be0e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1b:97:be:4b:01:4d:6d:81:17:18:07:91:a5:
96:d9:8c:1b:6e:0e:c7:e6:e3:a2:8c:38:a5:bd:aa:
8d:c0:c5:c8:42:97:bf:7a:7e:7c:52:7e:39:96:9a:
14:9f:12:5d:63:e0:5f:70:08:e8:16:4f:10:70:25:
04:02:f8:8c:a7:af:fd:94:2c:8f:d1:29:f8:e1:4e:
51:68:5c:78:c6:53:4e:4c:20:49:09:14:5f:1c:ed:
06:0c:d1:93:b0:0c:50:77:49:76:75:5e:ea:d2:86:
e0:ec:63:13:5b:f5:9a:85:15:c9:8b:59:0e:5d:7d:
f8:1a:60:f6:bf:54:3a:2a:d9:06:f4:54:0c:e6:0f:
6e:97:88:9a:f9:02:5e:da:ae:26:d6:6c:cd:04:68:
ce:94:1b:0a:c6:06:75:7a:66:9c:42:0d:11:92:32:
16:1d:d1:a1:48:97:2c:8d:97:58:69:55:5e:0e:69:
e9:51:94:24:80:10:48:bc:bd:c7:84:d6:fc:00:f9:
98:3b:2c:ec:cb:99:02:1a:33:78:6f:48:78:06:4e:
4e:ac:2a:33:f5:5d:57:0b:da:ce:07:10:32:28:be:
3c:03:ca:98:8b:25:63:e7:1e:c6:ad:fc:ac:e4:7a:
8f:2d:e3:46:d8:3d:20:eb:88:f8:bc:e7:6e:4e:80:
75:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F3:02:64:E0:96:3C:32:2E:06:C1:DC:6A:B5:10:0C:16:BE:0E:38
X509v3 Authority Key Identifier:
keyid:C8:2C:80:01:A1:76:42:B6:95:62:C6:3A:C5:89:20:DA:36:0F:15:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c1:3e:59:5b:79:96:57:c7:aa:d7:5a:64:a6:78:75:9c:5a:
9e:c7:e3:67:70:a0:33:7b:d7:32:62:3c:b4:d5:fa:66:a9:70:
59:28:6c:64:b0:f9:36:e4:a2:5c:bf:f7:d4:ba:98:80:0e:04:
0d:e8:62:e1:0f:5b:02:6b:cf:a0:1f:f1:92:87:73:2c:30:27:
ce:85:b2:69:ee:90:fb:a3:7b:23:3f:4b:c3:c5:23:cd:06:b2:
4a:4e:2a:f6:b1:d6:46:4a:8f:00:89:20:be:30:57:2d:62:51:
5b:81:c3:f3:86:cf:0d:4c:fb:85:9b:38:0e:3e:8c:fa:67:0f:
03:a3:bb:1f:84:45:40:04:ca:6f:07:c4:18:19:e9:ab:a6:f5:
10:c6:6a:4b:50:05:3c:52:18:0c:48:a5:cc:c7:2a:5a:2e:e6:
21:5e:00:89:38:be:cf:ae:b7:79:a5:d9:c0:47:c7:10:32:5f:
58:84:79:80:56:fe:39:07:64:6d:70:ab:19:41:2a:2c:9c:3d:
89:7b:ad:c7:93:c8:7a:e6:a8:57:1b:95:39:16:7a:ee:96:b5:
dc:b8:45:34:71:50:a5:a3:c3:9d:a0:52:82:8f:cf:cc:f4:8f:
9a:8b:0d:fa:51:70:92:93:6e:52:8d:f3:39:10:7c:c2:52:bb:
ab:93:fc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:30 2025 by rpki-client