Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
File: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft (raw, json)
Hash identifier: EjtgETbZyCRMeTsW5YliffKqMURQWFXu6bhHdfnmaQQ=
Subject key identifier: FA:BF:D1:E6:D7:62:E5:40:EF:EF:AE:18:27:C0:BF:BB:9B:ED:86:FD
Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
Certificate issuer: /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Certificate serial: 0194BC3CB21A1C108CB95E4F91D22AEAF2FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
Manifest number: 97
Signing time: Fri 31 Jan 2025 12:01:21 +0000
Manifest this update: Fri 31 Jan 2025 12:01:21 +0000
Manifest next update: Sat 01 Feb 2025 12:01:21 +0000
Files and hashes: 1: Jsf76Or5KR0tYVQe-qvm1Pz7D2M.roa (hash: ZyYh0ODppDUprYuNAsV1hqE/g7ygxL4G0rExXkHsi7w=)
2: LqnNExPECBrLWHZxipr7utM__10.roa (hash: QeICuemiifdBQ/Uxih/96nvmASg2fqvcs1N4t08aYZ0=)
3: fManrGWJ4cziBJd2N53MaaXcO5U.roa (hash: 1HbBr3n5RhMX5ebKQ4Wl4Fo2wqO2/4k1Zllc2/89+JE=)
4: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl (hash: 5vSnQisURLUi+q3u9iZiNRBKRPQuirrvK3l9Pc5YSaA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:b2:1a:1c:10:8c:b9:5e:4f:91:d2:2a:ea:f2:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Validity
Not Before: Jan 31 12:01:21 2025 GMT
Not After : Feb 1 12:01:21 2025 GMT
Subject: CN=fabfd1e6d762e540efefae1827c0bfbb9bed86fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:a5:ef:40:24:e1:ca:2f:3e:94:e5:7a:15:
e1:a8:97:81:93:d9:0e:2b:b3:70:da:39:19:a9:65:
1c:70:c0:ff:52:1b:60:b9:ec:6d:33:ff:e3:c1:72:
e7:46:d0:c3:bb:71:87:8d:7c:72:66:c7:22:e0:78:
04:64:44:ff:6a:5a:73:5c:fa:92:4b:d5:89:d0:5e:
a8:c3:c2:b5:47:84:a5:5c:43:a1:0f:28:ae:a3:20:
40:3e:d9:90:e1:60:b7:3f:b5:b0:a7:d0:81:0c:05:
54:29:71:f4:20:7f:55:f8:2e:34:ba:e6:0b:61:8f:
81:2b:62:83:da:78:4b:e8:f6:db:ea:5e:cd:91:ad:
4b:85:8d:ee:d7:98:d4:f5:e1:d4:c5:4b:83:af:b4:
e8:af:14:ee:20:cb:38:8f:29:5b:04:0f:fd:df:8f:
4b:ee:25:0b:79:15:9d:6a:bb:06:66:02:da:cf:b7:
d9:96:f0:57:cc:6a:7d:b0:b7:6c:24:6d:3f:ec:c7:
f3:c5:40:24:b6:c0:3e:f6:fa:eb:b8:15:fc:89:10:
4e:e8:63:9f:55:8e:96:6a:6f:a9:52:bc:52:c5:4e:
aa:e1:10:e3:d6:3d:74:74:26:b2:e6:d0:78:93:4a:
fc:26:8a:14:3c:51:24:92:be:f7:e8:6b:89:22:ea:
2a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BF:D1:E6:D7:62:E5:40:EF:EF:AE:18:27:C0:BF:BB:9B:ED:86:FD
X509v3 Authority Key Identifier:
keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:33:f0:99:08:0b:4d:12:0a:45:73:51:d7:c1:43:9c:0e:e3:
20:82:92:02:03:46:96:ac:d5:d3:09:da:75:cb:46:14:62:a6:
b5:f2:d9:66:2d:ce:28:73:ef:fe:96:01:ab:3a:94:43:e9:85:
b4:a7:b2:2b:81:63:6f:23:09:1b:3c:f6:35:2d:b9:42:4d:35:
62:09:3f:74:28:24:db:50:ce:1f:e2:6e:6b:dc:da:e5:a5:41:
02:83:47:09:65:ba:e0:1f:f5:bb:2a:6e:5c:4c:2f:b7:3e:6d:
af:03:9b:31:ce:ad:5d:ab:28:9e:7b:48:36:0f:c9:e4:23:0b:
bf:43:a2:fc:56:ac:c1:39:10:b2:ac:87:10:44:1f:3a:0e:e5:
71:46:97:95:e0:6c:53:d3:94:f5:c0:02:a4:b6:e4:b1:5b:0c:
49:98:56:99:e6:b0:df:2a:d7:ee:be:f1:dc:09:e8:49:43:7e:
47:96:c6:30:a9:59:6b:bd:ea:8f:b9:60:ad:8c:63:2a:08:ee:
fc:77:36:d5:02:41:93:51:34:8f:ae:bd:50:37:8e:ec:e5:f3:
90:4f:d9:61:b0:07:51:74:97:a4:27:9c:92:83:5e:4c:22:43:
23:39:6c:8a:f0:56:1e:12:15:1a:dd:fe:59:89:ac:46:9e:3f:
ab:bf:4d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:11:08 2025 by rpki-client