Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
File: yYfQn9P8K3BMZhELsCUu4Maxuko.mft (raw, json)
Hash identifier: t4UcB2K7PT3WxeaJOJlbjdSXzK0seqyTaEIIUm7SmzE=
Subject key identifier: AA:EA:C2:EF:D5:5E:F0:0C:C7:CF:AD:E2:DC:C5:B0:8E:37:61:D8:00
Authority key identifier: C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A
Certificate issuer: /CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a
Certificate serial: 0194BC04B52B2B5B4FF8B48A8A395543F942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
Manifest number: 0B0A
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: jZJbW0BsVFzwOis1-qgAs4YgHTo.roa (hash: Sk/yWlF7AwtnMT+QuY5wwjFpUnvnxIEukFPcttfDcVM=)
2: yYfQn9P8K3BMZhELsCUu4Maxuko.crl (hash: HPqSyHrrBArKfoEnDcwe0qxzVTZiof2sH23IIVdrq04=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b5:2b:2b:5b:4f:f8:b4:8a:8a:39:55:43:f9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=aaeac2efd55ef00cc7cfade2dcc5b08e3761d800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c4:b3:35:c8:58:70:60:7c:f5:20:be:f9:47:
aa:41:4c:ed:72:93:f9:cc:7c:48:f1:11:da:80:f0:
89:8f:29:fc:72:97:24:3e:3f:bb:19:90:c3:ac:d4:
2c:0d:0c:96:5d:88:70:74:ae:8e:bb:42:c2:a8:00:
4c:27:1c:6e:94:36:51:f8:c3:80:10:82:91:06:c1:
0c:93:c1:2d:e6:9d:2a:da:f5:3b:82:de:07:60:9b:
6a:6b:bf:55:5b:54:27:5f:dc:a0:22:31:d2:66:ec:
eb:29:df:be:b4:6b:eb:9a:4d:18:03:38:47:a1:0f:
6a:ac:25:d3:d4:90:31:80:0e:ff:4d:2f:6e:84:e0:
df:95:44:cc:d8:6e:bf:25:de:f8:93:25:3b:95:8e:
77:98:74:93:2c:fe:59:a2:cb:9e:33:02:20:82:5c:
ff:15:27:6f:44:db:03:d3:95:5d:3b:c1:20:fb:0c:
95:f5:81:00:96:ff:22:34:35:f1:7e:26:07:49:5e:
85:db:14:b1:87:a7:cf:e6:9a:6f:73:f0:62:bd:ff:
b2:dc:f7:5c:1d:17:1b:f1:4a:c3:cc:45:5e:f4:5a:
2c:53:97:80:60:69:88:1b:11:0e:94:17:0f:51:42:
df:3d:19:88:86:ab:7d:f6:ca:1c:12:c9:db:06:65:
74:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EA:C2:EF:D5:5E:F0:0C:C7:CF:AD:E2:DC:C5:B0:8E:37:61:D8:00
X509v3 Authority Key Identifier:
keyid:C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:cf:98:89:af:0c:9f:98:46:89:ad:07:ed:17:c5:b8:75:07:
5f:c3:fd:e5:70:cc:e6:86:e8:b1:34:32:2a:bb:df:f8:4a:6e:
33:e4:f8:e9:06:81:5e:19:79:dd:2c:10:01:27:28:0b:36:da:
54:ae:6a:15:96:db:02:39:d7:27:6a:5f:71:f9:d7:ff:22:d7:
54:26:8d:00:d9:cc:9b:0d:f3:3e:fe:0c:c1:5f:f8:7a:d7:75:
c0:57:0a:d0:f9:b4:33:63:ad:5c:9c:c7:f1:ec:e2:8b:77:6f:
50:1a:c5:d5:d8:5d:7b:90:0c:77:49:fb:8e:5b:6c:f9:12:40:
29:6e:d3:d9:00:da:bd:c3:07:45:f4:36:86:b9:4f:e8:28:03:
c0:ac:66:4b:4d:df:93:c4:83:0f:cf:9d:ad:79:fd:0a:51:4c:
a9:2d:08:22:71:fc:90:60:05:8c:55:0e:4a:69:7a:cd:1d:ba:
d1:10:45:7c:6e:1d:23:42:00:5a:a4:f2:e9:1c:ab:42:38:55:
f7:2e:84:35:91:87:4c:d2:0b:b9:34:80:28:bf:9a:ce:3f:1b:
56:c3:f4:b3:98:09:90:89:92:28:bc:c6:90:89:8f:4a:53:ea:
1d:48:a6:69:10:5b:df:ba:35:d6:88:7f:6c:ae:b4:38:40:28:
06:41:2d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:49 2025 by rpki-client