Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
File: yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft (raw, json)
Hash identifier: ysA3M2+BQOnq63RBXkg0f4QRpTanViPmaiZoIALUDY8=
Subject key identifier: 0F:5E:5D:16:75:D3:47:EE:18:D1:C2:A0:CE:34:78:24:F4:A0:ED:95
Authority key identifier: CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
Certificate issuer: /CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Certificate serial: 0194BCE0D1C438080A4D5E5A90B031BD7CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 15:00:37 +0000
Manifest this update: Fri 31 Jan 2025 15:00:37 +0000
Manifest next update: Sat 01 Feb 2025 15:00:37 +0000
Files and hashes: 1: ENc4V7s5D9VI1PWlf_wPokzkahE.roa (hash: BXmB/X/SHXqjZRpYnJuPeo2gTwWyCsvdek5X4RHOx9c=)
2: XzkhM4tHkIA85DIOJH6Mas-Ys2s.roa (hash: pgsdIi3wdOFYz6s+5BVFRjWsDjSb+kftFl9lENuJtlQ=)
3: yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl (hash: eyCDjNzWyrmIkRhJd0whjtohO5I2z94TXGxD9yC+SOU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d1:c4:38:08:0a:4d:5e:5a:90:b0:31:bd:7c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Validity
Not Before: Jan 31 15:00:37 2025 GMT
Not After : Feb 1 15:00:37 2025 GMT
Subject: CN=0f5e5d1675d347ee18d1c2a0ce347824f4a0ed95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:89:2b:d3:07:9c:ea:d7:df:3b:ce:35:9e:e0:
14:35:52:8f:3b:9a:93:ff:e7:13:a4:d9:73:99:c0:
76:47:a5:af:32:2b:e2:da:6f:56:73:59:e9:c7:75:
82:6e:33:e1:8c:c4:14:02:a2:d4:0e:00:25:be:3e:
ee:8a:55:d4:c4:4a:4f:20:e5:cf:cd:2a:ef:b4:d8:
77:bb:5a:10:ec:ed:d6:de:72:16:c8:3e:53:bc:4b:
b9:26:df:c4:33:35:56:09:d3:84:7b:45:4b:70:b3:
04:b1:24:32:08:66:85:ff:a7:7c:80:c4:ce:dc:14:
27:f3:d7:29:35:ab:9c:72:10:d1:f0:69:61:16:08:
43:02:9b:12:ba:64:7d:86:ab:ca:84:26:60:03:c6:
31:99:92:6c:2b:c1:e1:69:83:fe:1c:94:ad:aa:fb:
98:27:7f:6a:1f:3e:e9:42:8e:89:89:6b:f7:ed:93:
92:e0:8f:af:55:37:28:03:f5:dd:3c:06:fb:1c:1f:
74:04:b4:17:05:05:a8:3b:31:0d:62:3f:1a:31:3c:
06:a2:74:82:c9:ce:fe:ab:74:98:b6:fe:b3:8f:99:
5c:db:56:dc:2a:47:7d:ae:e8:2e:b8:ef:c0:c4:13:
82:61:d0:d6:8f:e0:a0:9c:22:f6:93:a5:cf:d8:9e:
cf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5E:5D:16:75:D3:47:EE:18:D1:C2:A0:CE:34:78:24:F4:A0:ED:95
X509v3 Authority Key Identifier:
keyid:CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0e:64:48:2f:07:6b:e2:a9:7b:cf:9c:e1:9a:84:ba:50:b9:
28:05:6d:0c:66:c7:84:84:22:a6:ba:06:80:28:2d:f4:18:7a:
9f:e6:19:09:49:31:f8:a5:33:bd:46:f5:62:a9:24:4f:27:53:
98:0b:c9:17:ea:88:65:ad:51:ea:1a:f8:16:b0:a5:8f:54:ef:
7d:6c:57:67:1c:3a:f8:6d:fa:09:f3:fc:06:87:90:ee:a8:d6:
82:af:84:95:09:80:f4:b1:04:d2:f0:74:65:f9:6d:19:0e:3e:
06:14:28:cc:ca:12:19:92:1b:ef:fd:0c:09:fa:ff:e7:2f:19:
ae:87:56:6e:ec:c5:11:c3:22:e7:68:41:18:ca:01:5d:d2:1a:
55:90:06:a6:e2:68:94:26:59:9b:dd:24:a4:94:f8:5b:50:bc:
6c:a0:b1:e4:bf:8f:b4:8c:b5:5f:4a:14:9d:fe:30:02:43:3c:
9d:57:4e:85:63:f7:48:0f:49:be:b9:a1:03:e9:4c:83:ef:ff:
32:24:ac:75:9d:86:6d:d4:8b:d6:d7:8d:74:1d:38:53:3f:9d:
3f:59:08:98:19:f5:b2:0e:47:e8:60:e8:08:f8:79:55:83:ad:
d8:ba:d0:c2:8c:55:b7:51:e5:ef:22:ab:9a:d8:0f:10:46:5c:
1d:7c:57:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:03 2025 by rpki-client