Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
File: yh3yu8zALk5_Rk1p-q89bDcjSV4.mft (raw, json)
Hash identifier: AHwyjnNbthVs6pn2kWkeGHxoRWRPMVnrP48UCdwesug=
Subject key identifier: B7:47:A9:63:85:33:B9:B6:E3:F8:65:89:C7:B8:0D:98:DA:8E:4E:98
Authority key identifier: CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E
Certificate issuer: /CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e
Certificate serial: 0194BCAA021683139232D9E384EBF78F2A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
Manifest number: 089C
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: UMCwwKy1mdru5x8odjrML6E-iug.roa (hash: B5zZRjqoCldth2bV2O4tywFTV5cYuj0RG6Np/XBkPdE=)
2: yh3yu8zALk5_Rk1p-q89bDcjSV4.crl (hash: aRj/dNw1wsOJalD9aNsLcDGivbpVYSJr+UyNSdj38/E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:02:16:83:13:92:32:d9:e3:84:eb:f7:8f:2a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=b747a9638533b9b6e3f86589c7b80d98da8e4e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:86:d8:5e:2b:e1:e1:3d:04:5d:e9:77:25:24:
c5:9f:16:bf:3f:63:fb:33:5f:1e:7c:49:84:e5:1e:
6a:6f:36:fe:56:4a:4c:56:f1:f3:37:5f:76:08:94:
29:82:b1:c2:b0:7d:03:9a:f4:2a:c2:58:c7:7e:7f:
34:78:da:43:e6:34:ce:64:08:cf:38:c7:e8:2d:0a:
e9:d8:ca:95:19:44:72:60:89:e5:7d:b1:60:e1:56:
0d:e9:51:85:59:8d:45:a0:59:d5:e7:c0:97:6e:b8:
ea:99:88:31:00:90:c7:9f:29:ed:2b:12:0a:18:68:
56:04:da:14:5d:ad:d1:61:7a:09:36:4c:dd:e7:3a:
a3:77:3d:a8:c8:d4:b3:fc:82:12:01:78:58:98:74:
6a:32:0d:3c:c6:57:64:05:aa:a3:b8:c0:4d:61:97:
5a:61:6c:19:48:d1:83:78:20:07:98:21:d6:89:e8:
04:c1:bd:cc:76:20:bd:db:e6:ab:40:e9:08:66:44:
41:bd:5c:ef:a7:63:84:1c:bf:1e:c3:83:86:24:1c:
bb:84:6f:bd:53:f2:c5:3d:73:8f:49:03:3c:22:30:
0c:2b:59:27:61:46:11:7c:88:17:b3:46:4f:cb:02:
af:0c:a6:70:95:0e:29:89:97:1f:9f:1c:38:67:90:
45:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:47:A9:63:85:33:B9:B6:E3:F8:65:89:C7:B8:0D:98:DA:8E:4E:98
X509v3 Authority Key Identifier:
keyid:CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:71:3c:33:8c:28:0c:40:73:b0:be:6c:78:4c:0d:ef:75:4c:
ec:a3:a9:f9:33:1e:db:4f:0d:73:80:90:18:55:d7:67:b7:dc:
0f:32:1e:46:f8:1c:3d:8e:91:bb:61:25:33:bf:82:8d:50:7c:
11:c3:55:4b:60:89:c8:1b:5f:7b:74:84:53:80:b9:86:ea:d5:
f0:f3:e0:80:71:cd:cf:e6:96:31:d3:4e:3b:d5:88:e1:57:8f:
0f:cc:09:a4:79:f8:b2:00:3b:a1:0b:37:90:e9:8a:14:87:ca:
aa:9f:8c:9b:40:0c:58:af:15:68:9b:81:3e:e4:b1:93:b3:1f:
f5:fb:9f:61:5c:75:93:96:92:5e:b1:2c:0a:0f:40:3b:3f:a6:
0a:30:5b:3b:0e:8f:cc:42:3a:20:9c:fc:40:fc:7e:2e:c6:d5:
36:8c:97:af:c5:11:20:04:b9:49:62:8f:de:e4:25:64:8a:55:
f4:91:fc:22:bb:0b:01:11:ec:e2:2e:dd:fb:44:63:7e:f0:36:
44:15:10:57:02:e7:63:04:3c:11:57:6f:71:7e:b9:f7:f4:bd:
dd:7c:d9:74:56:21:e6:8f:9b:5e:5a:a1:0d:94:fd:aa:d4:34:
5f:cd:59:57:99:31:5d:41:38:09:e8:75:64:23:40:5c:f0:b6:
5f:c0:7e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:39 2025 by rpki-client