Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
File: yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft (raw, json)
Hash identifier: 4HOPOoIYb5iOoWgFNk0NsyVMLsDhMN+LBuMpY6Ob4tw=
Subject key identifier: F4:DB:64:7E:FF:9F:27:88:DC:E5:2B:75:2E:6F:5F:F6:56:AE:F9:96
Authority key identifier: CB:2A:49:FB:A1:49:E1:A1:B1:31:39:BD:01:60:1C:86:CD:29:58:A5
Certificate issuer: /CN=cb2a49fba149e1a1b13139bd01601c86cd2958a5
Certificate serial: 0194BC3BE6CB9160E1F2F6F1C0944B2AD097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: pYoc9X1YFz8YYR89i5sgiEjfdJw.roa (hash: sFvU0iwBwXOnCyH6HrRHLCBIGEqrilg6LM2sI9y67eU=)
2: yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl (hash: c9YXtXyZ+WymoCaQYFxc+OGJDsB0pfrVUV9eMpsewgg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e6:cb:91:60:e1:f2:f6:f1:c0:94:4b:2a:d0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2a49fba149e1a1b13139bd01601c86cd2958a5
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=f4db647eff9f2788dce52b752e6f5ff656aef996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9a:3f:ec:20:af:15:f3:4d:a5:63:b4:6f:5e:
82:3d:b9:f6:6d:df:d2:c7:40:9f:53:c1:6e:54:ae:
8b:4d:d0:da:53:57:d2:8f:8c:24:ec:d9:ff:4d:31:
e6:df:61:02:f4:fe:06:5a:ba:0c:7c:9c:bd:2c:95:
9e:61:ca:10:ac:04:3d:be:04:1d:36:e3:78:72:fb:
fb:de:c1:b5:0d:d8:87:08:97:22:85:01:90:29:82:
36:e1:d4:57:7e:1b:2a:2d:2e:97:e1:a2:25:40:67:
e7:bd:8d:c4:aa:f7:11:06:4f:63:70:34:d8:d3:23:
66:98:2c:ca:60:ea:bf:ad:3d:53:92:96:fe:02:07:
ae:c1:af:6a:00:83:00:98:18:ce:c0:3b:ec:4f:66:
89:e4:f4:59:72:15:03:59:e4:70:dd:93:1e:00:b5:
fd:c5:d3:bb:d0:14:d1:a4:65:b6:0b:2f:9b:3c:de:
5d:17:fc:2e:16:76:2f:cb:b3:7d:9d:25:9d:d5:02:
08:1d:54:e2:67:91:19:f9:f6:e3:54:91:93:3c:4f:
45:1d:33:ce:8b:0b:0d:df:97:6b:6e:23:7d:57:56:
45:83:39:0d:01:fa:41:66:db:47:af:49:5f:58:fa:
5e:e6:e8:fa:b1:fa:d0:91:8e:70:60:85:02:97:30:
1f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DB:64:7E:FF:9F:27:88:DC:E5:2B:75:2E:6F:5F:F6:56:AE:F9:96
X509v3 Authority Key Identifier:
keyid:CB:2A:49:FB:A1:49:E1:A1:B1:31:39:BD:01:60:1C:86:CD:29:58:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:60:a9:7c:c1:d5:32:66:ca:b1:6b:a5:fd:0a:5d:8f:b1:1d:
4f:a6:3d:71:4d:d4:b0:95:c3:99:62:e9:81:90:e6:e8:37:9f:
eb:32:14:f0:46:9c:21:df:58:76:ac:9d:b9:b9:26:9a:cd:54:
33:50:d7:ef:ab:ea:84:65:70:14:28:35:2a:c0:16:b8:0f:75:
a7:cb:41:c3:d1:50:00:69:38:96:d1:63:02:58:0f:5c:2f:28:
73:21:3a:1a:b0:4c:a2:18:d6:c9:92:16:0c:4f:63:06:56:4d:
0c:27:c1:c6:57:8b:99:de:f3:15:77:f2:7f:65:a3:66:01:91:
56:e0:eb:f5:9b:eb:13:38:3c:22:7c:72:50:4d:66:b5:80:ca:
40:c9:11:73:29:28:ed:b9:6c:4a:7d:90:c3:42:c5:2a:19:ad:
69:26:0f:1f:c5:f9:f2:a7:c3:d8:c4:5e:45:74:bc:1d:07:e0:
89:19:5a:4b:d8:cf:0c:ba:8d:d8:bd:75:f1:4b:a4:c6:1d:98:
32:d5:54:6d:a4:8c:d2:8f:d7:42:08:a3:71:a9:ea:9f:8a:29:
3a:9e:43:f3:48:9e:59:9f:d4:07:ea:b4:5d:cf:5d:cc:59:57:
f3:8e:4f:a7:4d:23:4b:37:55:30:4e:24:c0:2c:7a:3b:db:4c:
0a:ab:a9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:25 2025 by rpki-client