Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
File: yyVzFrhB13Pct5reio8-clnxEqs.mft (raw, json)
Hash identifier: xgCeo7s1biM8TqAMm64947+w+fqcXpKHDZp5dWn7MXg=
Subject key identifier: E2:42:B7:A1:11:EC:B0:96:7A:CB:66:2C:4F:EA:47:B9:D5:21:A1:C7
Authority key identifier: CB:25:73:16:B8:41:D7:73:DC:B7:9A:DE:8A:8F:3E:72:59:F1:12:AB
Certificate issuer: /CN=cb257316b841d773dcb79ade8a8f3e7259f112ab
Certificate serial: 0194BC73094C34E5CC806500A784480C1363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyVzFrhB13Pct5reio8-clnxEqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
Manifest number: 03D3
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: OD_06SfZ3_hheASbKyQTBpKLvXQ.roa (hash: ybCs4Tm+I7vGFeJISbNMcOaCuI5hMEk5Vs5Dolkyuw4=)
2: yyVzFrhB13Pct5reio8-clnxEqs.crl (hash: gwRzw8lOnIE+LxP2xdIlKs+srZ8vTAUxMmI4aFydqFU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:09:4c:34:e5:cc:80:65:00:a7:84:48:0c:13:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb257316b841d773dcb79ade8a8f3e7259f112ab
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=e242b7a111ecb0967acb662c4fea47b9d521a1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:49:08:68:b4:02:44:7a:1b:94:77:13:a0:ba:
e6:36:ac:af:2b:0a:ea:0a:5f:87:f5:2c:27:90:85:
e1:ef:48:28:c3:ef:3b:59:0b:9d:30:c3:70:19:ea:
84:ba:2d:d1:57:a2:15:f4:bd:81:cf:0b:1f:74:f7:
b5:37:03:86:c8:d3:38:c7:5e:38:f6:1c:07:c4:8e:
66:c0:79:11:55:7c:40:2c:e2:10:e7:15:aa:04:aa:
60:c6:66:d9:4f:06:35:0d:f3:49:76:9e:9a:58:af:
73:69:31:33:17:d7:48:fa:6c:00:6a:e9:0b:43:55:
64:20:2b:5f:4b:fd:23:41:fa:9f:57:2a:7f:91:8e:
97:c6:83:7a:5e:af:f9:d5:a0:8d:f5:c2:53:b1:db:
90:59:61:83:71:fe:db:eb:58:bb:e9:b4:35:e1:fc:
e1:1d:4e:aa:95:16:ec:2d:94:5e:7a:f6:8e:55:ee:
32:e8:8e:d1:5d:72:7f:cf:5d:09:ab:0f:3c:d6:4c:
7d:01:8f:14:ea:62:97:4a:9e:e5:a2:82:71:2b:7a:
00:07:d3:c9:e6:f9:9e:a7:d1:48:ec:73:e5:60:c7:
19:88:25:19:92:cf:7f:8d:34:b7:19:12:ae:28:20:
b3:f9:6d:63:ee:37:a7:56:d7:b8:74:82:6d:95:6a:
85:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:42:B7:A1:11:EC:B0:96:7A:CB:66:2C:4F:EA:47:B9:D5:21:A1:C7
X509v3 Authority Key Identifier:
keyid:CB:25:73:16:B8:41:D7:73:DC:B7:9A:DE:8A:8F:3E:72:59:F1:12:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVzFrhB13Pct5reio8-clnxEqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a6:5d:e0:cb:58:1d:30:25:27:7a:23:85:ff:e7:9c:3a:d9:
29:b7:38:6a:ff:fa:7d:ca:78:b6:c6:d5:b4:9a:a4:2c:f1:51:
6a:b3:69:23:1b:cf:59:be:3c:98:29:a3:38:0e:16:e0:56:02:
11:cf:e4:14:d2:6c:00:23:d1:6f:5d:fa:61:ae:4d:0f:4f:77:
4f:63:44:8a:8b:19:f3:c9:35:78:f3:99:2a:6e:97:fe:49:bd:
27:92:ee:1c:bd:a9:cc:23:11:5b:51:70:46:3a:e1:03:90:f7:
9f:c8:d1:08:af:fb:25:67:c5:25:6e:16:31:5b:7b:6c:73:d6:
7f:cb:2e:14:bc:cf:5b:aa:d9:e2:77:55:69:e2:b6:c5:07:ff:
68:4c:43:4b:8f:8e:54:52:54:d7:f2:c6:a1:c8:de:54:89:f0:
aa:b7:1f:7c:5a:6f:eb:0e:46:26:58:40:bb:fc:39:35:77:9e:
b1:27:31:0f:fa:77:a1:2b:53:2a:e2:bc:b0:2d:d3:c4:e5:81:
30:6a:a9:10:1f:62:4a:a0:5f:11:7a:99:1e:32:99:89:7c:5a:
6b:ce:79:29:19:86:ce:67:88:fb:90:63:b5:2c:01:6f:98:89:
89:f6:b7:59:ce:7d:9d:d2:37:2d:a9:ba:f6:4b:10:b2:67:47:
51:4f:eb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:11 2025 by rpki-client