Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
File: ypAPHhHi0l0LIxatbgEmhIOayB4.mft (raw, json)
Hash identifier: j9GaYqSf/G9NgpdGSslnajz83UsDeiZ61H/v/21Hrp4=
Subject key identifier: 9A:07:B4:58:38:B9:06:C0:A7:25:C9:F9:C9:20:44:3B:AC:E6:7C:8A
Authority key identifier: CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
Certificate issuer: /CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Certificate serial: 0194BC7325ACE340DB882E15EDC083C6080E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: UvHXXFoVL7W8kRf_CmjRtC48uH4.roa (hash: E8q/i3b6Anio6852XqG98vgAFVWa9Xn560kQh/u0aSY=)
2: ypAPHhHi0l0LIxatbgEmhIOayB4.crl (hash: wLoPJM26eog/sct1okcHCDF/a7akM1hMQLDqQNzWtro=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:25:ac:e3:40:db:88:2e:15:ed:c0:83:c6:08:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=9a07b45838b906c0a725c9f9c920443bace67c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:87:10:b6:5e:e9:bd:c1:7b:03:e2:e8:cf:f6:
53:a8:4e:34:3b:6d:b8:17:7a:1f:5a:a5:8f:f9:f7:
1f:c6:35:e4:4d:af:09:68:60:49:f4:d4:5d:63:73:
65:72:98:b5:14:f3:dc:cc:60:ef:38:a2:36:ca:dd:
71:c2:70:f6:a9:ee:2b:dc:3a:2e:32:28:50:a2:50:
52:4b:ee:14:c8:4b:21:7c:50:ae:78:11:83:51:b9:
fb:06:d3:45:d8:0b:ff:1d:ad:a0:b9:4a:53:dc:f8:
93:77:86:de:9f:13:b6:18:00:0b:24:61:d3:52:45:
58:c8:63:5d:d8:da:97:4f:9d:f0:50:38:8d:af:03:
cd:7e:89:3c:4d:ce:e9:2f:1a:2e:63:9a:be:f9:ec:
ad:76:8c:d8:96:80:53:e4:c4:5f:f5:6b:49:a6:1a:
65:6c:fc:d8:3f:f0:4c:6a:39:32:49:3b:6f:9d:93:
3d:63:28:12:87:be:24:3c:97:be:c2:92:1b:f8:a3:
6c:ea:bf:20:5f:c0:0e:d3:45:3f:b9:c9:83:e5:e3:
e5:76:a6:6e:1e:47:65:1e:82:e6:58:de:cb:4e:40:
4b:71:ae:38:2d:57:c0:49:a9:7c:8b:b7:21:17:f2:
40:7b:fc:cb:43:a6:7e:25:21:af:c7:0b:18:3c:8b:
a1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:07:B4:58:38:B9:06:C0:A7:25:C9:F9:C9:20:44:3B:AC:E6:7C:8A
X509v3 Authority Key Identifier:
keyid:CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f9:53:bc:c8:b1:1d:e4:03:00:da:01:16:92:7c:53:c0:8f:
f8:ac:ce:7f:38:9d:d1:10:de:a4:29:90:f4:36:7f:c7:ee:40:
35:6f:ad:e7:95:7d:69:1a:ce:54:aa:3c:14:38:bd:b4:d1:47:
3f:12:35:51:e9:c4:cb:e3:a8:bc:a2:e2:c2:50:60:18:13:09:
76:19:cb:2e:b5:6b:9f:ff:eb:27:11:fe:e5:41:a5:9d:9b:a0:
a0:84:06:1b:1c:d9:83:d5:80:05:ea:52:13:52:00:a6:ed:e6:
96:27:79:08:0f:0f:0c:1e:e3:cf:a4:29:c6:84:9c:1f:8c:d4:
55:b6:67:78:14:40:ea:4b:fc:61:a9:3b:58:ad:ce:c0:97:91:
42:c3:6b:b3:e2:93:b2:d7:fd:e3:f9:48:b1:7c:73:7b:7f:4b:
e7:d7:fb:9b:a0:7e:f8:e1:3f:bb:70:7b:e2:00:b8:b2:55:b3:
13:35:8f:f8:ac:ea:26:c5:fb:33:ec:ea:4a:df:3c:b6:ec:3f:
60:c4:37:3f:16:e7:e8:f8:52:a2:9f:28:b0:60:39:d4:c4:f2:
ba:48:c0:b8:a4:de:5a:0f:25:f7:7a:c6:10:6a:d9:b5:f1:da:
b6:af:8a:d0:91:48:a8:09:a0:d3:3c:cf:b1:4c:13:a1:b7:8f:
f6:f8:48:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:45:00 2025 by rpki-client