Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
File: yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft (raw, json)
Hash identifier: IbosKRhivyDYHYD74GgDObIXOMfCOWTqIpgSR3bTLhU=
Subject key identifier: CD:16:9B:2E:8F:EB:04:29:E8:7E:6C:77:9C:7B:66:1E:31:49:1A:D9
Authority key identifier: C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
Certificate issuer: /CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Certificate serial: 0194BD858D744D71E424FC399DF90CBECC87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
Manifest number: 0260
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: nGn_W0gSwBrRPKhat5R4cEQoqhY.roa (hash: XVU8sWeUw+6VazizBI8PMCmNF85+iRw+0SNowFdIf08=)
2: yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl (hash: gwUs3wZzgnZxrXx7ndIzj6fh7Xf2lwQVsvUW75gs1jk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8d:74:4d:71:e4:24:fc:39:9d:f9:0c:be:cc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=cd169b2e8feb0429e87e6c779c7b661e31491ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:fe:d3:ef:a2:43:c4:d4:92:c4:88:d7:1c:
12:e8:70:b1:b3:8d:ce:26:ba:65:89:82:11:cc:5e:
02:cf:59:d7:c8:ad:fd:bf:8c:51:7e:9a:48:a8:a3:
88:1a:6c:e1:e8:ba:93:81:74:d3:37:5f:d9:6a:9e:
f8:b7:35:7b:4b:f9:cc:31:59:9a:b8:f4:01:94:d8:
66:b5:3f:4c:f6:5a:43:23:a9:4f:6d:a9:53:fd:7f:
9c:40:fa:58:1d:bb:db:3a:43:cc:ec:2c:a4:04:88:
9e:5e:8d:4f:b1:12:1c:74:02:38:a9:0c:cd:be:ef:
1b:fd:bf:01:13:34:c4:96:07:c3:09:a6:9f:04:69:
27:f3:91:79:10:e0:e7:bf:93:74:58:4c:6c:9d:c7:
80:59:46:30:0e:44:ca:a0:49:f6:4f:8a:38:04:30:
41:6b:82:31:f6:3b:1d:18:93:95:54:f6:6b:43:4b:
36:cf:1c:78:6c:ab:a5:bd:53:ec:88:68:41:c6:26:
7d:6d:6c:4d:b1:42:a9:4e:1a:38:1a:a8:54:18:1a:
b1:e8:82:0a:17:23:0e:a4:b2:8d:7d:a2:53:8b:bb:
22:d2:53:e3:3a:ee:4b:1c:7e:9b:30:cd:04:5d:92:
32:4c:e1:af:9a:0c:b0:11:71:b4:27:25:93:f7:c4:
31:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:16:9B:2E:8F:EB:04:29:E8:7E:6C:77:9C:7B:66:1E:31:49:1A:D9
X509v3 Authority Key Identifier:
keyid:C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8b:4b:81:da:a6:e8:3e:5e:81:27:d7:5f:16:b0:60:10:fe:
e4:81:ab:65:81:73:b2:d3:91:02:3f:e6:25:65:46:74:d7:8b:
9b:6f:dd:bd:05:91:0a:77:d3:5f:e0:0a:5e:75:3d:c4:00:0b:
9b:a1:d8:3a:50:42:d1:2f:24:3e:bb:00:7a:e3:a6:3f:80:8c:
b0:bc:7f:83:eb:e1:61:1f:3a:ad:b7:d6:a2:71:62:3b:9d:eb:
30:25:7e:94:8a:b3:cb:a5:e7:60:6c:2f:95:39:a8:d8:17:a0:
4b:f7:fd:cb:4f:4c:88:85:56:4a:36:02:8f:ef:1b:2e:4f:4c:
3e:db:fb:c6:47:24:fd:bd:76:e9:2b:41:99:65:dd:1c:e4:0d:
c0:e2:6e:3c:cf:cb:d3:1f:23:ea:a3:af:72:28:06:fa:ad:f4:
48:5c:e7:e5:49:2f:b7:9a:fe:d6:49:2b:dd:f8:1c:53:ca:6a:
bc:82:06:b5:fd:bf:f1:bd:b6:ba:62:d8:fe:d2:23:07:2f:62:
c1:46:7f:83:e2:e3:b6:b2:25:37:89:52:38:75:8d:29:c9:ce:
65:70:7a:30:c5:2c:71:7f:08:43:1d:61:89:66:8e:f3:2d:14:
c6:a1:6d:c6:22:2d:f3:f7:ba:5c:58:81:97:fa:03:3d:3d:ef:
41:30:80:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:08:09 2025 by rpki-client