
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft
File: yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft (raw, json)
Hash identifier: uuz2MZDyuA6DA0soSlFpaNB+9UNDJ2ggFDi5YCM/cUE=
Subject key identifier: 75:0D:9C:15:1F:27:CE:BC:4D:FC:6A:DF:D4:2C:B8:55:C8:94:26:9B
Authority key identifier: CA:AF:C0:93:C3:C4:25:6D:11:4A:8E:DC:0D:06:C7:3C:B6:3E:18:6D
Certificate issuer: /CN=caafc093c3c4256d114a8edc0d06c73cb63e186d
Certificate serial: 0194BD85988E5ACCD0491AEE951BF3781B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: NUVu2dR1iocqmPEQ_D2e-q6eSn8.roa (hash: 1hCazZpKjVTtjQVFUWpkmXqPQOre2tDQ3dmWvgeOvfo=)
2: yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl (hash: CiyQ684o/GZ6nD0CQa7EdB9sY+EG17IuXFu68Os8dok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:98:8e:5a:cc:d0:49:1a:ee:95:1b:f3:78:1b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caafc093c3c4256d114a8edc0d06c73cb63e186d
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=750d9c151f27cebc4dfc6adfd42cb855c894269b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:05:7e:7e:48:60:ec:ec:01:5b:e9:9e:60:f6:
7b:75:4d:86:30:02:ad:a3:4c:d9:5b:af:b2:5b:b8:
67:ec:5d:cb:f0:dc:2c:e2:24:5c:a5:ca:32:64:53:
4f:02:64:3c:7b:54:f7:94:5b:11:7c:46:ec:a1:6a:
e3:43:4e:14:5a:79:6e:1e:9d:fb:a0:ca:9e:06:ef:
c0:de:d0:cf:57:5d:40:d2:bb:f3:a9:0f:9a:e3:4e:
12:9c:8f:1d:cf:7a:24:41:47:4a:39:cb:dd:0e:b6:
b4:aa:04:74:5f:8f:ea:96:f9:48:14:a5:f0:5a:12:
82:44:fd:38:18:81:08:e9:d5:c2:f5:8a:1e:8c:0c:
b3:6d:ef:d2:20:cf:39:f1:41:ce:ef:88:cd:e1:ee:
09:06:04:5f:49:cb:87:3a:b3:65:97:88:58:07:fa:
99:a7:4c:14:da:a1:32:8e:3c:63:30:2e:d2:bc:5c:
85:eb:37:fe:ef:72:7e:c4:48:58:8f:53:78:23:97:
df:4e:fa:67:a7:a7:de:26:1d:8f:8d:60:90:c1:88:
ea:06:4f:49:f0:a0:64:45:21:99:df:62:f7:4e:4f:
a2:d7:42:6d:3e:2b:24:dd:16:54:1d:41:09:e2:60:
14:e8:dd:c3:e6:cc:1a:47:60:67:df:4c:41:9f:42:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0D:9C:15:1F:27:CE:BC:4D:FC:6A:DF:D4:2C:B8:55:C8:94:26:9B
X509v3 Authority Key Identifier:
keyid:CA:AF:C0:93:C3:C4:25:6D:11:4A:8E:DC:0D:06:C7:3C:B6:3E:18:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:62:d5:f8:98:e2:ae:67:16:84:60:75:e6:50:05:78:f1:4e:
b6:b1:8b:49:7a:d1:67:54:09:2e:47:32:7f:3a:86:c0:44:b2:
c7:0d:88:64:32:da:d2:55:df:85:b1:01:96:30:e2:89:3c:53:
27:1a:fe:3e:8e:40:d1:c3:2c:11:56:46:02:96:3e:64:ca:44:
49:58:0f:87:1a:37:6d:12:10:f0:20:21:5e:c8:a4:be:23:62:
19:1c:41:09:fc:6d:3f:7f:6b:d1:e2:91:d6:5d:31:73:53:fa:
f7:a9:12:7d:6b:5a:59:fe:81:59:2a:17:7c:4d:ab:49:a8:f6:
cf:89:6d:7c:ae:12:d5:d9:25:ec:40:1d:d4:e1:8e:a6:a9:a2:
d1:e6:99:92:c9:dd:92:a8:bc:2a:74:a2:f8:28:e0:f8:bb:9b:
38:fb:d8:a7:d3:31:e4:78:51:0c:1b:8c:77:07:63:00:73:aa:
fe:9b:4c:16:c6:7c:14:bc:54:36:2d:99:d7:93:6e:3c:4e:d3:
c2:f8:3f:aa:2f:2c:2a:f6:89:de:0f:36:b2:28:bf:1b:4e:17:
bb:04:fc:09:64:12:6c:3d:87:88:1d:a9:60:ea:b0:38:8a:8c:
f9:17:37:2d:be:fa:4c:48:fd:0b:c0:01:aa:34:c3:c3:cf:dc:
ab:4e:7d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:57:51 2025 by rpki-client