Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
File: yABBYZAh42MorViY6Jl4cEa48Pk.mft (raw, json)
Hash identifier: 7Pybzf1BRyKp9ZzVQsnRqS3iRRVs+0DAwRuDvEo7Bw0=
Subject key identifier: 92:48:5C:04:28:91:97:58:6B:FA:3F:D1:79:3A:E2:66:AC:9E:B1:A8
Authority key identifier: C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9
Certificate issuer: /CN=c80041619021e36328ad5898e899787046b8f0f9
Certificate serial: 0194BBCE93508D041230A5DA521DBAB5E03F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
Manifest number: 04B9
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: Mok6_FqiiR5wYGEWZBTs8xeaVoQ.roa (hash: FbjTDRIPu8bBy/5KLYHNgVHrWy/v2L+xeWuUUm4Xmek=)
2: yABBYZAh42MorViY6Jl4cEa48Pk.crl (hash: 4KsQp1KKn808j5X0YEvTniMnApX1lh0YflirOKk/NwU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:93:50:8d:04:12:30:a5:da:52:1d:ba:b5:e0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80041619021e36328ad5898e899787046b8f0f9
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=92485c04289197586bfa3fd1793ae266ac9eb1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:92:46:c3:49:71:40:b8:7e:5e:04:43:55:d4:
7b:16:52:95:e3:a5:dd:8b:e4:d5:df:92:80:64:77:
f2:20:29:20:af:ad:97:7b:d8:ab:9f:97:8a:f1:ce:
7f:d7:f4:42:95:60:66:3c:12:15:75:37:97:71:94:
29:87:26:6b:c3:91:f7:e3:6c:cf:c9:5a:73:20:a7:
1b:82:50:e5:8b:a3:cc:4e:06:35:3b:bc:a5:af:07:
7e:06:56:50:41:83:7a:68:29:28:1a:d2:6f:21:fe:
ce:e0:61:a7:7a:5a:08:0b:84:16:1d:2b:b6:d8:17:
f8:79:6e:3f:19:a1:1d:06:1c:f7:a4:78:64:91:8d:
c2:1f:58:a6:ff:ba:55:d2:d3:96:99:ca:58:49:45:
3c:d9:7c:42:87:d2:bd:c3:2e:6b:1b:18:6e:47:e9:
b8:28:7d:c6:1d:8b:10:b3:fb:f1:ed:b0:7d:2f:7a:
00:65:db:09:f8:84:e8:ea:63:92:30:18:e5:12:05:
a6:72:59:58:26:0b:a2:2d:39:4b:95:5c:ab:15:17:
06:8f:f0:d2:32:39:78:f5:18:2f:80:be:21:89:45:
6f:08:34:4e:ed:1a:dc:b0:7d:cc:bb:28:1c:0c:5d:
ec:b2:0d:67:56:86:cf:90:52:ba:ca:2f:a4:8e:23:
60:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:48:5C:04:28:91:97:58:6B:FA:3F:D1:79:3A:E2:66:AC:9E:B1:A8
X509v3 Authority Key Identifier:
keyid:C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:65:63:24:30:8c:93:ae:71:1e:89:b9:5b:6b:f4:4c:c3:63:
d2:b8:2a:25:ce:7f:05:77:1c:56:e3:f7:a1:75:80:1a:74:df:
42:41:79:3b:d0:dd:e9:15:38:84:c7:5f:50:ed:d0:2c:01:78:
cc:9f:81:27:53:60:5c:6f:c9:a8:46:8e:91:bf:39:8a:70:bd:
d5:d5:cf:f2:95:5c:82:54:ae:3b:4b:0b:fd:6a:ba:ae:2b:23:
47:a6:a1:ff:36:d2:dc:88:e0:f3:e3:69:1b:e7:c0:fe:9e:d0:
77:74:90:b2:17:42:e6:9c:98:ee:1d:74:70:4d:95:9c:ba:78:
9f:40:27:ca:1f:d8:f7:00:a3:e7:6d:0f:66:a1:f8:7c:54:4e:
28:65:03:ad:db:c8:5b:9a:44:50:de:1f:aa:51:3d:ee:7f:06:
15:b2:b9:3a:92:32:b6:d6:22:49:79:06:3b:d3:ab:6c:38:b6:
03:67:cf:5a:83:e8:07:9e:a0:9d:f6:52:8a:f8:8e:f9:68:fe:
dd:a4:95:bb:13:88:76:d9:2f:2f:ff:ea:32:11:66:50:e9:9f:
af:68:9d:9b:96:6c:9c:ff:68:9c:8a:f0:4b:98:6f:64:14:19:
87:68:b8:57:25:45:97:13:13:c7:14:96:43:c3:98:ce:98:99:
ce:2e:74:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:52:22 2025 by rpki-client