Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
File: yri42pzNTSYbcq2gNKCHVmWmRIc.mft (raw, json)
Hash identifier: sSMhHC6DJKn1YyrnIgEYIe8Ci7feAiYeNcGZ3j/TB80=
Subject key identifier: 74:02:5A:84:F4:B5:38:49:1F:15:B8:C9:87:4D:30:E5:83:43:FA:CE
Authority key identifier: CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87
Certificate issuer: /CN=cab8b8da9ccd4d261b72ada034a0875665a64487
Certificate serial: 0194BC728BC074303A65F78B793082B86B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
Manifest number: 136F
Signing time: Fri 31 Jan 2025 13:00:10 +0000
Manifest this update: Fri 31 Jan 2025 13:00:10 +0000
Manifest next update: Sat 01 Feb 2025 13:00:10 +0000
Files and hashes: 1: iv4w_q_Q0lB1UAUD7TgMR_xxyYA.roa (hash: fMZ0QGK6B5sX/J++IQoulADhQ3kbWhx95qL8TpCZZ84=)
2: yri42pzNTSYbcq2gNKCHVmWmRIc.crl (hash: QiDma2uOd62M1CqnkosfPl1xQiAGvVnSetAIxBpm0sw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8b:c0:74:30:3a:65:f7:8b:79:30:82:b8:6b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab8b8da9ccd4d261b72ada034a0875665a64487
Validity
Not Before: Jan 31 13:00:10 2025 GMT
Not After : Feb 1 13:00:10 2025 GMT
Subject: CN=74025a84f4b538491f15b8c9874d30e58343face
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:84:72:21:b1:e9:29:e2:57:8c:ec:c6:24:77:
21:66:7c:0d:7f:c8:11:29:da:1f:9a:25:0e:d4:e0:
b2:2f:74:90:6a:24:88:4c:19:86:51:82:61:92:a6:
9c:64:40:d3:be:70:ab:37:8b:0d:00:92:24:82:cd:
1b:03:aa:07:3c:70:74:cd:8a:7a:3e:e1:0d:14:b8:
55:bc:1b:c0:e4:f0:a7:7f:d1:e9:86:f2:7a:dd:84:
17:cb:5a:1f:4a:a3:90:ce:b4:c2:e6:9c:9d:83:2d:
dc:cb:39:cf:b9:79:a6:50:98:ff:4b:84:da:c0:88:
f3:4c:89:0c:f3:9a:92:14:3d:00:b3:a1:30:ed:37:
61:f0:3d:6e:be:59:da:a9:50:ed:8b:22:f8:7b:40:
82:b7:68:16:23:51:1b:4e:e4:e6:2b:6a:a3:f5:48:
33:f5:32:c0:76:9b:a0:c7:22:41:e2:52:01:dc:44:
8b:e4:7c:0b:f5:c5:7c:a0:fa:44:b4:85:9c:2a:72:
c8:af:e9:ec:74:95:30:43:af:f6:a9:86:6e:e1:71:
b2:a0:9a:b5:3a:bb:46:ac:74:18:17:80:87:a7:f3:
21:8f:de:44:eb:b1:3b:ba:22:40:b6:f4:03:6f:45:
9f:c6:4e:29:10:0b:ab:9e:57:35:92:f5:31:1e:e9:
88:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:02:5A:84:F4:B5:38:49:1F:15:B8:C9:87:4D:30:E5:83:43:FA:CE
X509v3 Authority Key Identifier:
keyid:CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c5:75:a6:d3:04:30:9c:eb:63:40:66:35:9e:50:d6:4b:74:
89:6a:c3:fa:f1:fa:b4:28:95:74:35:79:81:74:a9:e6:83:e5:
98:4d:8d:ce:3a:d7:e0:9e:a1:5c:68:67:27:f1:60:3b:c5:56:
c4:3e:de:da:53:37:51:b4:95:83:0a:0c:a0:cc:24:db:14:fc:
47:f3:6a:82:b3:d5:5f:71:69:33:a4:32:58:75:39:bd:c2:d9:
ea:72:8d:1f:3c:1d:86:4a:22:86:68:dd:3a:b3:f3:5b:1f:5a:
1e:5c:6d:68:1f:9c:c0:7f:97:7f:f8:ab:87:ea:a3:60:ca:1a:
0b:df:e1:5b:70:ba:54:3b:b7:b2:52:9a:e2:4a:17:70:70:50:
0c:17:7a:80:0a:8f:cf:14:9d:d5:d3:97:3b:42:91:f2:b0:13:
19:39:16:c5:3b:93:ad:e0:e3:13:0f:77:5e:5d:26:b1:d3:6f:
c9:ea:2b:f6:fa:d6:af:44:2f:58:ba:00:fe:dc:98:97:fe:25:
25:76:2b:d3:38:67:d5:99:90:b2:4a:52:87:51:d7:48:74:e0:
a0:62:4d:2a:3e:8c:d3:77:66:77:93:04:10:d8:da:c0:dd:63:
d8:9f:6b:ec:88:50:78:c3:6d:ee:42:26:a3:c7:e5:29:2d:7b:
ee:58:b6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:51 2025 by rpki-client