Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/yiMaQ2K8HsD9tDSZAbYcz51nnWU.mft
File: yiMaQ2K8HsD9tDSZAbYcz51nnWU.mft (raw, json)
Hash identifier: vb24D9SL+apQ83VeKHAAQMFlPHbPFu4ZLp6+LnJDxcI=
Subject key identifier: 23:35:FF:76:67:72:77:B0:FF:C8:93:8D:C4:C4:0A:45:98:69:44:09
Authority key identifier: CA:23:1A:43:62:BC:1E:C0:FD:B4:34:99:01:B6:1C:CF:9D:67:9D:65
Certificate issuer: /CN=ca231a4362bc1ec0fdb4349901b61ccf9d679d65
Certificate serial: 0194BBCE873989E857F78E21F41A4C5CB91D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yiMaQ2K8HsD9tDSZAbYcz51nnWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/yiMaQ2K8HsD9tDSZAbYcz51nnWU.mft
Manifest number: 01AF
Signing time: Fri 31 Jan 2025 10:01:01 +0000
Manifest this update: Fri 31 Jan 2025 10:01:01 +0000
Manifest next update: Sat 01 Feb 2025 10:01:01 +0000
Files and hashes: 1: eVWj75QB5-NY5cip7EaAMqsD3_Q.roa (hash: R8SYABsszbTf/c1Z91aXqCMR7hgNS09va3LcQa+6Zyg=)
2: yiMaQ2K8HsD9tDSZAbYcz51nnWU.crl (hash: NAss9Zsid3o0lDqqWDG5WxOVAj8FRqk5CxhD40pnU3E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:87:39:89:e8:57:f7:8e:21:f4:1a:4c:5c:b9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca231a4362bc1ec0fdb4349901b61ccf9d679d65
Validity
Not Before: Jan 31 10:01:01 2025 GMT
Not After : Feb 1 10:01:01 2025 GMT
Subject: CN=2335ff76677277b0ffc8938dc4c40a4598694409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:25:5a:b5:c7:af:d9:99:bd:80:73:9a:95:
8b:26:c9:39:76:9a:67:31:32:cd:8e:6e:e2:0c:3a:
16:35:76:7a:07:08:38:3f:a9:e2:b4:11:6e:d1:c0:
fe:5f:3b:86:06:1d:ff:87:be:05:78:d7:09:64:de:
e6:14:3e:62:d5:99:55:cf:19:db:a7:ed:fc:11:43:
9b:b4:7c:0a:51:f6:6d:fe:4e:cf:b1:59:93:72:78:
ae:f2:04:59:d7:ea:cb:71:dc:aa:27:4e:75:ad:64:
ae:f7:72:26:a8:db:7a:da:b5:9a:82:69:b8:2b:cc:
12:0f:ed:34:24:77:bb:5e:bf:f9:de:13:78:93:cf:
e7:8a:d7:78:83:5c:fc:54:1c:df:aa:e0:6a:fc:46:
8d:53:62:1d:08:70:60:8b:9c:15:b6:0d:f2:65:98:
e1:ec:83:af:9c:22:19:23:46:b2:33:37:1b:80:f2:
71:3a:1a:58:05:89:6a:31:9e:c5:73:2d:5b:7c:d3:
01:cf:95:2f:e3:92:93:07:c5:f2:97:28:02:32:89:
f3:8b:de:f7:3a:65:5a:20:37:84:c2:7a:1c:b0:e2:
83:81:c0:8b:e3:a0:dd:b4:5e:73:7b:97:bb:11:9d:
19:8f:5f:c7:54:f3:c7:ee:e4:4f:e1:0c:96:86:4c:
06:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:35:FF:76:67:72:77:B0:FF:C8:93:8D:C4:C4:0A:45:98:69:44:09
X509v3 Authority Key Identifier:
keyid:CA:23:1A:43:62:BC:1E:C0:FD:B4:34:99:01:B6:1C:CF:9D:67:9D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yiMaQ2K8HsD9tDSZAbYcz51nnWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/yiMaQ2K8HsD9tDSZAbYcz51nnWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/yiMaQ2K8HsD9tDSZAbYcz51nnWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7e:e9:05:4a:de:91:de:f4:8f:8a:3e:60:0b:4e:4e:11:05:
57:e1:27:a6:2e:20:67:45:9a:69:18:35:f3:1a:44:5d:d8:d7:
be:6b:94:50:b3:3c:9f:95:6e:36:26:e1:eb:9d:bb:a4:77:e1:
8d:5f:e2:56:3a:aa:08:32:b1:9f:f9:2b:19:27:8a:95:19:97:
55:f5:62:af:89:3e:59:bf:c0:55:b3:23:a1:20:f2:55:58:35:
9b:f4:69:8c:f3:3d:06:b7:33:f4:fc:7a:8c:96:14:b8:ab:2d:
fa:71:02:04:59:d7:69:30:da:a3:26:3d:fa:87:61:e2:f3:45:
6f:e0:1a:27:7c:c1:8d:1c:37:63:0c:8a:f0:bf:49:3f:c8:f8:
da:c0:ca:39:d7:90:27:ff:72:4c:e9:ea:20:5c:16:a0:80:e2:
99:e2:4b:56:e5:e7:d7:11:ba:9e:6e:42:d1:04:c4:9c:ee:00:
c6:01:e4:a6:4d:b9:12:11:2c:d6:4e:05:bf:d6:da:60:f6:f7:
2c:17:e9:a1:93:e7:bb:1a:4e:9e:9c:40:20:c7:2f:7b:6d:14:
85:7c:79:ec:5b:9f:a8:77:b1:0b:f7:c2:66:8c:2b:a7:4a:52:
ab:23:a2:9b:85:9a:23:ff:d5:c8:24:98:a6:e4:c8:94:8f:48:
cb:b6:39:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:28:17 2025 by rpki-client