Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
File: yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft (raw, json)
Hash identifier: 6bzsmhZ3g3vnR6cfkSIXcJCdhWq8nqU0uqG2li/2bCs=
Subject key identifier: 0C:73:E5:07:FE:6D:BE:1B:C3:21:E0:2E:67:2B:59:72:33:1D:8B:21
Authority key identifier: CB:2C:C7:CE:42:E7:9C:35:1A:C7:D2:8F:64:5D:E7:F5:93:8A:CC:9C
Certificate issuer: /CN=cb2cc7ce42e79c351ac7d28f645de7f5938acc9c
Certificate serial: 0194BCA9E24EDEB38EE7D2E7A48BA1881F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:37 +0000
Manifest this update: Fri 31 Jan 2025 14:00:37 +0000
Manifest next update: Sat 01 Feb 2025 14:00:37 +0000
Files and hashes: 1: rYX5OSjisXVBgIC77wXTzITcbqs.roa (hash: SPnPR9xhnE7+gAosfCHCqCDCEcNhjAT2MXJYL+lu5nM=)
2: yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl (hash: Rjn/gd0A4hUJ30TxkSEyPHk9lxLrIo0EVjcyQ1h/q6U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e2:4e:de:b3:8e:e7:d2:e7:a4:8b:a1:88:1f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2cc7ce42e79c351ac7d28f645de7f5938acc9c
Validity
Not Before: Jan 31 14:00:37 2025 GMT
Not After : Feb 1 14:00:37 2025 GMT
Subject: CN=0c73e507fe6dbe1bc321e02e672b5972331d8b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:31:84:48:69:b5:22:52:09:84:59:e6:d2:dd:
a6:3c:46:d9:76:48:c9:46:e5:ca:11:b5:7c:2e:57:
48:92:19:19:a3:6f:ae:98:5c:b8:3a:df:c3:be:14:
68:23:9c:27:8d:22:34:ab:78:e7:59:7e:aa:f2:e1:
03:6a:34:42:b3:31:91:dd:2e:f6:87:14:ba:a2:3d:
f9:1b:bb:f2:44:ad:0d:b8:f9:f5:22:94:16:2a:46:
42:a4:d0:7d:f0:49:bc:7a:6b:0f:4e:57:2a:35:64:
6b:37:7d:df:82:c2:21:07:28:6d:2c:24:83:9f:8f:
79:9e:2b:df:5b:46:34:5a:3a:74:6e:7b:de:49:a5:
bd:9d:5f:e3:52:75:68:24:0b:46:c8:09:d2:88:4c:
10:a3:79:72:a7:33:ad:e1:47:1c:18:19:98:2a:86:
b3:ca:84:b5:8f:cc:c5:08:47:44:51:ef:ab:c2:bb:
4b:23:a1:82:eb:00:3c:f8:64:12:04:28:41:be:88:
6e:8e:3a:80:b6:2b:8e:ad:1f:ce:03:a7:2d:81:c3:
62:04:e8:e7:81:55:c9:f0:1b:39:67:7c:4a:a5:cc:
46:e0:e9:70:c9:ca:a5:10:9e:2b:13:46:f4:5c:73:
6c:6f:17:6f:cd:dc:49:9f:6e:06:13:e8:98:b8:95:
5c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:73:E5:07:FE:6D:BE:1B:C3:21:E0:2E:67:2B:59:72:33:1D:8B:21
X509v3 Authority Key Identifier:
keyid:CB:2C:C7:CE:42:E7:9C:35:1A:C7:D2:8F:64:5D:E7:F5:93:8A:CC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c0:7f:1a:cf:83:a9:70:b0:83:35:ba:d8:fc:2e:36:f6:31:
a9:20:b4:25:78:83:ad:55:fe:6c:d7:e6:26:2e:40:36:59:77:
eb:01:c0:43:8b:dc:75:16:83:a6:4c:57:0d:67:ae:8f:d9:fa:
42:df:29:99:35:2b:cc:a3:0d:50:52:8b:d4:93:1a:18:bf:2d:
e6:aa:90:8f:de:f7:ff:5f:64:07:42:a9:df:4d:97:ba:cc:ce:
95:50:5e:40:51:ca:05:f1:25:d8:2c:af:2d:4c:cf:3d:36:70:
c8:e5:82:a0:45:40:b3:a0:d1:ca:67:88:aa:e0:23:19:b4:b9:
61:16:9b:ad:f3:65:1f:23:84:db:b1:fb:7f:06:31:a9:67:1e:
13:db:7d:ef:bf:dd:9c:b8:39:fd:08:06:3c:18:4f:b7:e6:bb:
1d:6e:78:aa:dc:7d:41:17:c0:1d:31:41:16:24:05:1b:e0:fe:
68:03:5b:fa:c8:b3:0d:5a:7c:97:d7:47:0d:23:58:87:5f:b6:
da:70:87:cd:8d:d8:9c:2c:d2:01:8f:db:6f:b1:67:3f:65:47:
5e:94:18:47:90:83:39:eb:5b:48:8b:39:d9:d4:4c:b2:70:64:
2e:03:2a:42:f6:5c:a6:89:11:e2:b9:a9:e2:71:54:82:07:13:
01:43:a2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:11 2025 by rpki-client