Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
File: yy2f-G42PbNNBVbsFkUfL38wPSQ.mft (raw, json)
Hash identifier: HpK4R0D9L3YoSOpdq1+hkuisIEKFv3g9gJnZXgMkN5k=
Subject key identifier: D6:EE:2E:EE:36:29:09:7F:F4:F2:14:2B:2B:FD:E8:60:47:A7:B4:C8
Authority key identifier: CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24
Certificate issuer: /CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24
Certificate serial: 0194BC7318A70A02645744CD1E50BC9D04B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:47 +0000
Manifest this update: Fri 31 Jan 2025 13:00:47 +0000
Manifest next update: Sat 01 Feb 2025 13:00:47 +0000
Files and hashes: 1: 92Huf3IHz49yEZcp8laODPaay4A.roa (hash: fHDvsxbqA8PNa+801vhXYVjpC3kLuwr6JG2deunc2nA=)
2: yy2f-G42PbNNBVbsFkUfL38wPSQ.crl (hash: camDvsIqMGjWDsBpFclk4ILRQFWQEtjuxBJZVPwoZcY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:18:a7:0a:02:64:57:44:cd:1e:50:bc:9d:04:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24
Validity
Not Before: Jan 31 13:00:47 2025 GMT
Not After : Feb 1 13:00:47 2025 GMT
Subject: CN=d6ee2eee3629097ff4f2142b2bfde86047a7b4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:62:ea:5c:fa:2f:a9:67:b0:14:2b:f4:55:04:
a8:f4:42:c4:9f:6f:aa:53:9a:76:e3:ad:ec:6c:54:
7b:d5:d0:9a:c2:9f:65:d3:f2:d8:47:ca:b5:15:aa:
5b:c2:c7:23:ea:45:21:40:4a:ee:2b:a5:d4:9b:ac:
91:3d:8c:17:fb:27:6f:8d:81:8c:64:62:1f:26:bb:
c1:08:7c:48:49:e3:62:a8:c0:c6:ee:f1:6f:c8:19:
92:c4:a2:b0:99:3d:b9:b9:e3:29:80:66:68:2f:b9:
08:d0:8f:3c:0f:57:c4:29:37:96:a6:44:4d:e8:c5:
7d:38:30:38:7d:1e:22:0b:5c:30:0d:e4:4f:af:a2:
d5:07:7a:10:14:61:c2:6d:07:80:90:f8:2a:1e:31:
1e:70:51:01:72:a1:6a:20:bc:ca:9d:08:e5:21:ab:
7b:65:e3:e1:88:26:f0:39:13:9a:6f:25:ba:0a:f5:
19:3b:80:05:eb:f3:4a:fa:a4:59:52:4c:72:dd:00:
7f:fb:ca:c4:59:17:23:85:21:6e:9b:42:85:ab:0c:
26:e2:a7:f2:94:3f:17:18:66:fa:7d:d7:a2:3c:8a:
b2:be:3f:14:69:3c:a9:87:16:13:be:5c:d4:9b:76:
fc:33:6c:8d:ec:8e:e8:43:57:62:69:68:c2:01:75:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EE:2E:EE:36:29:09:7F:F4:F2:14:2B:2B:FD:E8:60:47:A7:B4:C8
X509v3 Authority Key Identifier:
keyid:CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f5:3b:2a:06:3b:45:5b:bb:64:b3:fd:d0:90:88:5a:d5:5d:
30:5e:12:09:7e:f8:97:23:00:41:cd:e0:b7:02:0d:b3:2a:e0:
2a:f0:39:37:d3:25:5b:dd:21:7c:1c:c9:57:60:88:84:95:6a:
5e:02:a9:8f:70:3d:d3:1d:df:a0:d4:98:bb:f4:50:e6:97:5c:
df:b6:77:04:97:12:f7:83:01:d3:fe:3a:b2:66:24:2f:39:bd:
00:e7:cd:a9:83:49:6b:30:07:1a:34:59:18:4f:e1:00:39:1e:
b9:5a:a1:52:4c:28:98:86:7f:06:3b:22:af:5c:c3:98:47:ac:
6b:50:c7:b2:8b:1a:28:17:de:b8:1d:a7:4d:f0:ac:54:3b:9e:
8d:ba:2c:af:4a:d0:c7:7d:57:ca:1e:b8:48:44:81:3a:54:02:
04:a6:24:44:5a:d3:21:55:8c:e1:b5:e7:7b:2d:f7:68:bd:fc:
78:84:fa:a9:0a:c4:bf:82:27:ed:b8:71:8e:44:5d:d5:01:60:
cd:fd:68:c8:16:5e:bc:4c:49:4f:ed:07:cb:0c:c8:59:3e:1e:
51:57:cc:b8:f7:39:20:ab:21:a9:d1:df:f6:03:9d:03:92:72:
da:ae:4b:20:8f:23:22:e6:ba:60:a1:f7:d8:0f:81:74:a1:90:
4a:26:c7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:12:31 2025 by rpki-client