Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
File: yvYTMRp4acM1ymbLQjzG6LL6kCw.mft (raw, json)
Hash identifier: hRYeHqRweZ2bzDuYl4Lo68tjaxij9F1QEOC7xO/5EjY=
Subject key identifier: 47:8D:97:9F:2A:3D:5B:CB:0D:94:75:7E:11:AA:E0:B2:27:C5:94:CB
Authority key identifier: CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
Certificate issuer: /CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Certificate serial: 0194BBCEF9F8B6F9B16D6A53C6B7635AA51D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:31 +0000
Manifest this update: Fri 31 Jan 2025 10:01:31 +0000
Manifest next update: Sat 01 Feb 2025 10:01:31 +0000
Files and hashes: 1: gWMrTu8Of2Dx3uAeFmzVA6qXGew.roa (hash: 8qHiVPNeypQh4D2Me20Hi3HMwJdiHI6/+GwoODvt2Bo=)
2: yvYTMRp4acM1ymbLQjzG6LL6kCw.crl (hash: pmaTqDIILdpaZLj6vkVXQO3s7izl5kf3AG/0iViAOIY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f9:f8:b6:f9:b1:6d:6a:53:c6:b7:63:5a:a5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Validity
Not Before: Jan 31 10:01:31 2025 GMT
Not After : Feb 1 10:01:31 2025 GMT
Subject: CN=478d979f2a3d5bcb0d94757e11aae0b227c594cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c9:4c:f7:a0:2b:ef:7c:1b:d6:56:7a:3a:a1:
de:06:e8:d8:da:d0:42:57:68:42:9a:0e:89:8a:1f:
8a:50:3d:32:11:a8:34:45:10:e2:ca:e6:fa:79:3b:
97:6f:82:4c:74:fb:96:ee:dd:b6:40:67:f5:c6:39:
b3:40:f7:82:23:f7:f8:98:52:0b:5a:e0:69:10:c8:
5d:ff:8b:e1:8f:94:8b:2e:30:7f:41:d8:84:80:61:
4f:18:c1:ee:39:69:23:2f:60:26:7a:8e:65:d7:4d:
c5:3f:cc:fc:03:b2:68:2e:f1:ab:4c:ca:39:f3:d9:
20:5d:5e:ff:fd:98:9b:c1:49:97:06:db:0c:2f:86:
77:14:2e:9b:6f:9c:9f:fb:f8:f0:dd:06:18:f3:38:
01:bd:cb:59:ca:82:66:d5:65:2e:7a:97:11:19:c9:
44:c9:0a:f3:72:d4:77:46:b5:73:b7:06:60:09:30:
3c:a5:59:f5:86:2f:14:e6:e7:b8:2f:6c:3c:1e:13:
3c:56:cf:ee:77:5c:98:ab:38:48:4c:9a:58:d5:0c:
42:ca:4b:81:75:ae:17:8a:80:52:61:7d:5d:c5:61:
1a:f9:82:a7:2b:d1:8b:51:27:50:8e:d0:a5:6e:58:
24:64:ec:e4:5e:1e:8d:a1:15:fd:2c:76:f6:2d:07:
a2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8D:97:9F:2A:3D:5B:CB:0D:94:75:7E:11:AA:E0:B2:27:C5:94:CB
X509v3 Authority Key Identifier:
keyid:CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:17:c6:90:8d:ac:0f:fd:a8:22:27:9d:b9:37:49:d0:49:4a:
d0:e5:99:ef:f1:8b:51:bb:62:81:0b:1b:3f:02:fd:8f:ed:06:
d2:1f:fd:04:2e:ab:8a:a9:1a:4c:af:da:ae:37:89:86:59:26:
2b:40:8a:ca:fc:27:b6:5b:0d:d9:28:0b:27:8c:ae:28:24:09:
ec:c7:46:dd:ca:ef:a3:bb:be:89:90:85:e3:16:34:7b:20:b8:
42:09:19:2a:70:4a:db:19:c9:12:cc:17:53:17:8c:66:28:71:
8a:af:df:02:c2:11:fa:94:40:c7:c6:41:db:9f:45:bc:13:3a:
c1:a0:7f:49:aa:bf:5b:37:d5:8b:95:90:b9:1f:cc:31:85:c2:
ac:3b:fd:22:ae:85:ae:3c:e5:e8:3a:7a:52:8a:d8:0f:a7:d6:
14:3d:1b:89:ae:c0:47:07:c3:dd:5f:65:b7:0b:fa:7b:01:d4:
09:72:89:c2:54:68:b5:d7:00:a0:3d:a5:dd:43:02:eb:62:77:
48:8a:3b:5f:9a:12:b1:45:c5:a7:aa:19:9a:78:a9:df:9e:e6:
07:d9:33:2e:f4:f0:64:85:e6:58:4c:cb:13:9b:df:bf:4e:10:
b2:cb:05:45:d1:11:d1:f2:6e:fd:fe:35:e5:b9:5f:d5:c3:d3:
b0:35:73:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:14:50 2025 by rpki-client