Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
File: yd_q7KItLSYYtDPPAKsUS9i4Db0.mft (raw, json)
Hash identifier: y0NR3KuJ03pTSrkwpFuoMgHDfH2q0NhMX6ObKS8/GWU=
Subject key identifier: 33:53:17:A6:CA:1F:90:1C:9C:34:4B:70:1B:45:BA:D8:0C:12:79:A8
Authority key identifier: C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
Certificate issuer: /CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Certificate serial: 0194BC730AC85A5150A01FB38F8CFC74B6E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
Manifest number: 055E
Signing time: Fri 31 Jan 2025 13:00:43 +0000
Manifest this update: Fri 31 Jan 2025 13:00:43 +0000
Manifest next update: Sat 01 Feb 2025 13:00:43 +0000
Files and hashes: 1: YSlfWP3DY80Smx0TIqkuPzTOoec.roa (hash: zxri6NDPBUgI6E9l7vT1svBXNo7QAt30+iiVihETiFE=)
2: yd_q7KItLSYYtDPPAKsUS9i4Db0.crl (hash: rnaXdD8kZ/Qeb70QK+xoYYGaZ6HNa+6iUo7bVjGS+p8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0a:c8:5a:51:50:a0:1f:b3:8f:8c:fc:74:b6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Validity
Not Before: Jan 31 13:00:43 2025 GMT
Not After : Feb 1 13:00:43 2025 GMT
Subject: CN=335317a6ca1f901c9c344b701b45bad80c1279a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:18:96:94:02:44:f1:5d:c8:d2:da:f7:58:42:
23:e8:2d:3b:fa:f5:4c:eb:de:77:97:b9:d9:2f:87:
8f:ce:b9:48:8d:7c:f0:54:04:4a:22:7c:ad:4c:d0:
ae:67:e2:bd:17:b4:b1:10:00:7f:5f:fb:94:b1:de:
79:87:34:6b:70:83:77:96:53:54:eb:e0:e9:01:99:
c8:d6:47:e1:b2:a8:40:72:b7:c1:74:61:7b:c3:b3:
2c:61:a7:c2:51:12:32:7d:5b:49:78:ea:55:7e:71:
50:5e:43:b2:5d:54:c8:ac:51:61:fd:8b:aa:e1:b6:
8f:a0:5d:8e:cb:a2:80:3e:58:3e:fd:4f:fd:44:a4:
d1:df:98:e3:dc:9f:ea:f9:48:a1:a6:53:e9:22:21:
92:2d:1e:ed:7b:2b:68:d4:e5:17:19:bf:dc:60:4b:
9f:2a:ae:83:37:8d:58:8a:3e:de:9c:54:c1:0f:aa:
62:3b:55:9f:fb:39:13:1e:31:2a:61:78:c0:54:bc:
ef:76:44:5c:50:fd:66:b7:f6:41:18:eb:10:94:0c:
59:dc:7d:c1:f4:72:90:c3:8b:a1:ee:e6:fb:43:87:
ed:7e:f7:a4:4c:32:d1:c8:70:bb:d5:4f:b0:37:7d:
76:3b:21:4a:be:81:17:b3:9c:15:ce:13:e8:75:f0:
89:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:53:17:A6:CA:1F:90:1C:9C:34:4B:70:1B:45:BA:D8:0C:12:79:A8
X509v3 Authority Key Identifier:
keyid:C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d0:cf:02:e3:d6:af:a8:d7:97:34:c8:9c:e4:fd:ee:fb:2b:
7a:0e:dd:6c:51:7f:9f:a5:4c:1f:2b:01:ba:d4:49:8a:db:26:
c2:02:d6:9f:8a:4e:bf:91:77:da:33:d9:32:5a:c2:21:9c:62:
bc:51:e1:4e:9e:c8:c2:e5:db:38:27:73:e7:00:5a:68:f6:82:
a2:c8:18:df:23:85:36:01:9b:93:65:4d:13:90:e9:66:3c:2d:
0e:6a:57:28:b3:13:6b:7b:4c:ff:01:74:26:c2:b9:0e:dd:c8:
5c:e2:be:9a:c8:1c:09:81:53:23:c9:6e:b9:dd:b2:70:b0:64:
9e:5d:28:15:a4:af:b9:1a:cc:68:e7:6d:22:58:78:ec:e3:fd:
47:c9:ce:56:8f:16:ad:81:05:3a:e5:a7:24:55:af:e7:59:cd:
4d:8d:53:9c:02:91:a7:f2:ad:79:da:87:22:7d:66:98:89:7b:
e0:1b:56:ac:0e:69:c6:cd:b7:9a:13:62:eb:fb:6f:3b:e1:b7:
20:a8:7a:12:5b:f7:e1:a4:67:79:93:8f:17:07:c7:59:0f:66:
a2:14:9f:0f:de:a7:ea:1d:48:69:81:e6:4d:97:60:a6:c0:0a:
f8:f6:b3:2a:ba:55:79:3b:72:6c:ff:a7:77:2c:d1:ee:b6:6c:
0c:bf:b5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:55 2025 by rpki-client