Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
File: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft (raw, json)
Hash identifier: 331ZwTgYup47eTYf8h4m0DI2sntc+FH8dVl/mdhAqrI=
Subject key identifier: 1C:9F:53:36:4A:52:A5:09:FE:BD:FD:0A:6C:90:9B:BC:CD:A5:E6:51
Authority key identifier: C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
Certificate issuer: /CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Certificate serial: 0194BD4E9A9660B2762A52DAE8C7CD3028E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: WhKy2xbRKPMUqHbNxaU8wqbOrig.roa (hash: D12/ehSmYFcNAL5zHVyUB4wCp9NF+Juiz/ym/wvx6Xk=)
2: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl (hash: 5GIMhPY8wQr2CXxQBJQ8/hqi/aZ8xCNGlsCFeGfBviY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9a:96:60:b2:76:2a:52:da:e8:c7:cd:30:28:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=1c9f53364a52a509febdfd0a6c909bbccda5e651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3f:8d:05:b4:66:d1:74:0e:4a:19:8a:e6:da:
46:58:23:eb:11:df:ed:ac:3b:4e:c2:a0:c9:0f:b1:
22:f9:27:54:0e:77:b6:c6:8a:c0:e6:5d:c0:da:40:
38:22:06:51:b6:ca:46:9e:a4:fa:8e:d7:0f:8d:88:
43:fd:d3:10:24:54:f5:97:6c:31:e1:34:ab:59:c5:
29:b9:95:e3:a8:43:6d:90:dc:ae:62:76:75:d4:8f:
a0:0c:e8:51:3c:59:93:07:04:34:c8:40:1d:8f:02:
e3:64:24:b0:62:de:da:6c:24:4f:d4:69:1f:ac:c3:
ad:d5:56:93:e3:d5:d3:71:97:f8:cc:ce:91:d8:41:
b5:08:2d:0a:3e:52:96:0c:59:f4:99:70:dd:bc:ea:
44:64:97:c9:5c:0c:8d:9a:0f:5b:81:16:0f:d7:5e:
c8:5e:58:47:ba:b0:7e:d0:45:90:67:8b:71:3e:90:
17:97:0e:ef:b0:2f:4e:7a:97:a2:d4:af:60:92:b9:
5e:91:69:5b:9c:a9:6e:d9:80:61:16:42:ff:eb:f7:
da:45:fc:ac:5c:5d:0b:85:03:95:ba:fa:91:05:42:
2d:ea:b1:f3:63:6c:a1:e1:8d:54:9d:44:93:b8:4d:
d6:39:8e:8e:f8:4a:2e:d5:35:96:18:49:6f:b9:ee:
9c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9F:53:36:4A:52:A5:09:FE:BD:FD:0A:6C:90:9B:BC:CD:A5:E6:51
X509v3 Authority Key Identifier:
keyid:C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:8c:b1:28:ee:b1:40:42:b8:d9:30:93:3c:03:0f:35:88:c8:
df:a0:fd:e2:40:76:d1:ca:dc:83:08:0f:a2:88:fe:22:ec:20:
1e:d4:67:66:9f:a9:1e:5f:11:cd:da:91:06:74:f2:ba:a9:50:
69:69:36:dd:89:8f:34:2e:86:d8:d6:85:dc:34:9e:e6:9b:3f:
1e:17:70:95:b5:ae:b1:ec:3c:83:8d:e8:41:31:cc:c3:22:22:
eb:80:34:66:4c:43:4d:0d:c8:12:83:cc:58:9c:b5:af:99:5c:
8b:c6:ce:7f:9b:2b:71:52:04:55:6e:7e:65:16:40:0c:b3:ae:
85:2e:82:9c:bc:9f:c5:b2:23:b3:cf:9f:56:8d:e2:2b:e9:fe:
20:84:8e:77:d0:a2:b8:ca:7f:7c:a3:37:ce:42:5f:57:39:c1:
98:60:15:95:b3:a5:cb:5c:94:a1:4a:e3:81:44:9b:e5:42:4f:
2e:c8:24:21:ea:9c:83:de:ee:28:8e:19:25:15:a6:c0:49:f8:
53:62:8c:6f:69:8c:cb:6e:eb:79:db:99:8d:d0:9d:e7:1b:91:
39:f2:eb:d8:5e:48:f1:01:f9:20:5b:d5:21:1a:85:6f:25:90:
73:cf:06:7b:5b:03:02:de:e0:75:3b:75:b4:4b:f1:e3:66:f2:
4e:b7:c0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:14 2025 by rpki-client