Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
File: yc040dHEojBTzZlxYzGNZJp7Klc.mft (raw, json)
Hash identifier: v4BvOIP+4/W0X5KgHtGJSxjhr/xm7PjaKp2nd1QyvPY=
Subject key identifier: 97:26:64:4F:0D:90:4A:20:85:D4:38:B6:12:FD:EE:4E:A4:9E:A4:DE
Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
Certificate issuer: /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Certificate serial: 0194BC7311E42CC447E9563657FE72F8C287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:45 +0000
Manifest this update: Fri 31 Jan 2025 13:00:45 +0000
Manifest next update: Sat 01 Feb 2025 13:00:45 +0000
Files and hashes: 1: 85I4pfyLQKX8k9V-tQtyQU5bDYo.roa (hash: TN5K/hNnnHvE6u0/+9oRgawldt2710m801enGA9Infw=)
2: 9Ddwg04k-x748SWw8ZAq8FwjEC0.roa (hash: hAsF5Dd97oXArWDCgchVp4XLtAVACH5ddk2EH9+qQDM=)
3: yc040dHEojBTzZlxYzGNZJp7Klc.crl (hash: 6C3sKCSdM9APJ0CK0/iiDV2FqXkvrWJlHVkzIrlsCkU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:11:e4:2c:c4:47:e9:56:36:57:fe:72:f8:c2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Validity
Not Before: Jan 31 13:00:45 2025 GMT
Not After : Feb 1 13:00:45 2025 GMT
Subject: CN=9726644f0d904a2085d438b612fdee4ea49ea4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:33:ce:ad:8e:d9:ca:6e:70:fd:b7:3a:ef:
bb:73:3b:73:3a:84:2b:11:86:8d:7c:a1:94:a5:4d:
97:d6:d6:d5:65:2a:2a:13:fc:d1:dc:99:b7:2c:fa:
6a:68:e4:00:ee:ae:ac:2d:b0:e4:68:b9:57:2f:e4:
ac:da:bd:7b:58:f9:76:74:c1:c0:e5:82:85:05:2d:
00:7a:29:28:c4:bb:42:95:b0:3e:f0:50:0d:b6:71:
fd:4e:da:22:57:b8:30:80:2a:49:3a:42:b0:74:de:
d4:19:2d:0d:f4:95:50:ad:3c:26:69:a1:d7:f5:49:
3d:b0:30:88:a0:8e:fa:82:9d:9e:d8:ea:b6:da:96:
84:13:a5:b3:da:e8:ba:28:50:56:fd:50:6e:27:d9:
f2:06:7c:33:ea:b1:ea:0d:30:da:1f:32:2d:7b:f2:
42:b6:c2:c6:38:25:bb:10:2d:e7:3b:51:41:75:ac:
91:33:9e:5c:a2:fd:9b:c0:1b:8c:bd:94:cc:bd:11:
02:f1:46:17:d0:46:28:fb:07:fc:4e:38:b6:c4:94:
8f:0d:d8:b5:44:7c:3a:66:1b:e9:16:91:49:9e:e5:
cf:09:32:3e:c5:06:1c:f9:d7:86:38:82:5b:da:48:
a1:f4:10:67:34:79:91:5c:2f:ca:d2:5c:aa:9c:e4:
4d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:26:64:4F:0D:90:4A:20:85:D4:38:B6:12:FD:EE:4E:A4:9E:A4:DE
X509v3 Authority Key Identifier:
keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:dc:53:a4:83:bf:8d:6f:de:f0:68:44:ab:3a:02:a9:31:b8:
e5:66:00:a6:99:c7:4e:56:2c:68:5d:ed:ac:a2:75:8e:b5:9b:
98:d3:b2:44:f6:81:d1:ac:3e:fd:56:cc:53:f9:59:94:f8:1e:
1e:cf:94:d6:c6:40:d9:9c:fe:1a:7e:63:44:21:5e:c2:6f:c9:
32:e4:f8:28:32:2b:d9:8b:29:fb:3f:16:f3:d1:33:98:88:f0:
b7:08:18:93:ba:b9:44:2a:2e:94:58:1b:59:89:ab:66:3e:6d:
d2:73:91:2b:54:43:7c:ec:35:e6:1c:3c:89:01:c0:41:7c:4b:
d7:32:8a:e4:1d:df:a8:5a:aa:cc:e6:05:71:5a:9d:ba:77:14:
18:b1:0c:54:34:ae:22:d4:0b:ea:9e:f5:9d:9f:24:9f:66:5d:
8f:be:36:28:88:98:b0:55:b9:21:a7:61:05:97:d2:77:28:a9:
97:d4:88:d1:12:aa:f7:7f:e5:43:fe:ac:3e:5e:62:7b:a8:a3:
d1:48:c1:0f:09:a0:98:93:85:ce:18:1e:0b:a0:30:b2:2e:27:
72:b5:49:72:dd:eb:4d:93:2b:aa:76:fd:10:44:b6:26:1c:45:
ff:6d:f8:c2:d4:48:d8:94:94:60:bd:54:40:d1:66:fb:af:f7:
c4:62:40:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:24 2025 by rpki-client