Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
File: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft (raw, json)
Hash identifier: 8UsYD16EYXy2hpKSOtC/Sh1Q0fW6tcxdm5742rNuR/Q=
Subject key identifier: 12:1D:C7:0C:56:4F:07:24:49:B3:D8:5F:14:9D:8A:0C:CB:F8:06:A7
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 0194BD4EC2BAA586B7298E01608F6260D430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
Manifest number: 1435
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: 1-sk09ZTEI3A0YuQCVj9nzqwna-o.roa (hash: ULhMdY/ZA2oKsAZaVWHfS9xYHIKLbnpGBZU2K+9qRWg=)
2: I5z_1hVliNBBM0FrqHpN1qPTca8.roa (hash: n/sNB3WBcM+raTHs73p1MwMj7v/dmk/wcLeQX9QTiHw=)
3: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl (hash: mHDLbBdfJ098fuL2KcbR4Nf4zOcfqQSwZ2B34imImcA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c2:ba:a5:86:b7:29:8e:01:60:8f:62:60:d4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=121dc70c564f072449b3d85f149d8a0ccbf806a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d8:d0:cd:9d:e6:44:4d:ae:2b:30:62:b6:a0:
4a:06:1a:19:16:19:91:d7:0e:c7:a2:5d:de:98:c0:
98:7f:d9:ab:f9:af:52:cd:8d:73:54:f7:8b:0f:f8:
34:02:38:00:c8:d9:7d:29:89:2e:c5:b3:4b:0e:fb:
c9:ae:c4:2a:f6:72:75:4e:1f:ab:7e:3a:da:ff:54:
76:2a:b3:77:ad:09:1c:b1:4d:bb:32:37:d8:91:38:
c8:a7:87:1d:9b:d0:5d:ca:8f:87:14:bc:42:01:58:
1e:c0:88:26:f3:95:92:41:30:8f:e5:c0:6d:80:8c:
1a:86:78:b7:39:1f:f5:e9:be:7a:7e:59:c3:c9:24:
1c:91:9c:95:96:fc:16:b7:89:36:ba:e6:12:20:3d:
5a:4e:91:cf:43:fa:84:c1:af:85:25:df:d0:ac:51:
a6:43:8f:57:60:fb:52:0e:3a:6a:13:2f:73:99:c6:
d3:7b:14:27:fb:41:e8:34:cd:9d:a2:52:27:a9:c5:
51:a3:95:84:37:9c:6c:63:bb:fa:65:f2:cb:63:ae:
d6:94:05:9f:3c:50:f9:72:3a:03:33:1b:a8:07:50:
38:d3:6c:97:9f:a9:03:7b:4e:47:47:70:72:2f:bb:
e6:5e:78:cc:93:75:21:cc:76:ff:33:da:33:2a:f8:
fe:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1D:C7:0C:56:4F:07:24:49:B3:D8:5F:14:9D:8A:0C:CB:F8:06:A7
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:4e:3f:bb:8f:6a:5b:9d:41:a4:44:a9:4b:d1:47:4c:8e:ca:
e8:97:bb:4b:c1:a1:65:6f:7a:40:a0:5c:1b:2a:72:8b:d3:ca:
27:91:57:86:c5:b8:30:7c:f8:88:b6:8e:ac:9a:7a:e4:87:2a:
cf:dd:68:18:9f:b3:44:f0:09:aa:ff:2f:7e:04:48:aa:28:9c:
8f:c2:71:60:e4:e0:fe:5b:94:fb:14:42:99:97:1f:5f:c1:21:
a8:91:85:c3:43:3e:65:3b:52:d1:4a:5e:22:7c:0c:15:e2:f9:
b1:a6:e0:97:92:9f:cd:52:99:c9:93:97:03:3c:1c:78:dc:1d:
52:88:74:7a:79:71:d0:30:3a:bc:3b:7e:a6:5a:eb:86:f0:75:
8a:ee:53:08:03:e2:9a:25:f9:3d:6b:ed:2c:67:8d:e1:06:b3:
64:ab:5a:34:39:55:70:7a:c9:61:40:a3:9a:ea:44:d9:eb:5b:
c2:d5:12:21:c0:10:22:65:9e:97:44:d1:fd:51:fd:e0:bb:d8:
6d:b5:3c:56:c4:6c:4c:1e:78:4a:6f:7d:62:76:45:b8:ee:87:
92:01:46:a5:b0:bf:0c:94:84:6f:1f:32:90:bc:75:f7:53:7a:
48:b9:06:31:f8:53:0c:b5:4d:7c:24:a7:91:90:c1:e3:10:b8:
3c:30:ae:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:03 2025 by rpki-client