Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
File: yoFg7-OfGjB3_dL68ipkgEtUE4I.mft (raw, json)
Hash identifier: gfoVPLosF8Fj/9CAaodiqhDy4YNU+QRoeisrrwPcN+w=
Subject key identifier: 17:CF:68:5D:2D:1E:04:E0:EB:2E:81:03:AB:C6:A5:97:9D:C3:11:07
Authority key identifier: CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82
Certificate issuer: /CN=ca8160efe39f1a3077fdd2faf22a64804b541382
Certificate serial: 0194BC7321AD124AAFD47C21A4BDC83A5945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
Manifest number: 10CA
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: h-rZd3ShfaYedaYA6tLbzrX_MkU.roa (hash: 6iJffUIazxHr4GTAEcidCyRV9SNB9d9va8nX06PMskE=)
2: yoFg7-OfGjB3_dL68ipkgEtUE4I.crl (hash: NQRpgikYmZDiyPFZvaLB678w7gi+wcWXBdq5kEXfzH4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:21:ad:12:4a:af:d4:7c:21:a4:bd:c8:3a:59:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca8160efe39f1a3077fdd2faf22a64804b541382
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=17cf685d2d1e04e0eb2e8103abc6a5979dc31107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:fc:06:0e:01:85:8c:b6:ec:57:2f:4a:20:
4c:7f:4f:46:0e:6d:6e:90:f2:fd:21:bc:fc:a8:28:
6f:d7:6e:6e:89:62:cb:7d:09:f1:1a:bc:a9:43:35:
af:30:b4:9a:a7:56:97:65:45:eb:bc:3c:20:91:c0:
ab:35:a7:12:79:da:63:fd:81:5a:bf:31:2c:eb:e3:
70:d1:de:43:ad:e3:21:9f:89:df:6a:c9:a8:a3:1c:
e1:fc:30:a7:64:d4:59:96:33:9a:87:a5:81:b9:08:
a6:39:48:bf:34:b2:91:83:22:39:36:0f:b3:4b:ea:
6f:09:66:1e:08:02:5e:15:33:b6:d6:ae:40:b7:35:
c3:af:cc:1e:e0:93:22:cc:47:19:2b:c4:9a:ab:64:
d0:07:06:e2:0a:fd:88:ee:62:1d:fd:5c:36:7f:d7:
03:e7:c1:54:ee:19:ba:46:12:d5:41:54:6b:4d:75:
56:e8:f9:3c:b6:ce:0b:a1:7f:6e:d0:0a:05:2e:0a:
47:be:2f:fa:93:54:bf:44:8e:18:65:01:29:16:ec:
38:2d:88:31:47:c3:57:17:04:55:85:c8:7b:c7:ca:
e1:51:64:33:02:e9:eb:b2:8d:f2:f0:4e:6c:ef:a9:
14:4f:55:ea:89:89:60:c8:59:74:39:fc:2d:f3:5d:
f2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CF:68:5D:2D:1E:04:E0:EB:2E:81:03:AB:C6:A5:97:9D:C3:11:07
X509v3 Authority Key Identifier:
keyid:CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:97:42:17:85:f2:cd:53:37:45:34:6e:f8:de:4c:2a:6c:b8:
0b:da:90:da:b5:86:37:01:13:2d:1c:65:81:8b:91:95:e7:d0:
f4:4a:89:af:c1:a1:f2:34:37:51:f1:28:2d:20:74:b5:6a:f5:
3a:64:fb:b8:6b:b6:d7:b2:f5:b9:43:4f:05:cf:93:1c:37:f0:
24:86:14:8a:7b:2a:04:e2:9a:78:46:60:e5:9e:7e:a3:91:e7:
3e:86:b9:47:9b:0a:be:17:c7:48:57:16:bb:b0:68:1c:1b:45:
e8:e3:fa:18:80:49:f2:e1:eb:f1:fe:e6:2b:60:7d:9f:a0:0f:
b1:25:26:dc:21:ed:7c:9b:07:08:ed:98:28:09:4a:04:9d:cf:
8b:a5:db:5b:d6:75:b2:2c:cf:43:6a:35:62:e2:a9:3e:45:f6:
01:cf:a8:a6:18:5b:4f:1e:a8:de:32:ad:25:6c:b5:ee:53:80:
11:cf:8c:92:56:7d:4e:e3:dd:a8:03:65:82:7f:c3:2f:b9:96:
e4:5c:7e:eb:0b:6a:4a:0f:86:f7:4f:22:8a:16:8b:71:58:61:
f5:0e:27:1f:83:d6:61:92:94:1b:f3:27:af:12:38:c8:93:16:
f2:c0:a1:bc:62:cb:ea:7b:9d:11:fa:af:a8:72:59:3c:d6:63:
c9:ae:36:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:37 2025 by rpki-client