Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
File: yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft (raw, json)
Hash identifier: qZWOt9qLwvyUKI9LTd+P3Xud/lMzj1RGV5qcZ0ak0jg=
Subject key identifier: B6:A2:18:F5:8D:63:CB:BE:DE:79:96:B1:16:E0:73:DC:E9:37:D3:19
Authority key identifier: CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40
Certificate issuer: /CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140
Certificate serial: 0194BC3C5F6993CCC586172FA426580D88F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
Manifest number: 13AA
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: 1-uz2QLGD_Zd1L5FYfBI3cC6XHM8.roa (hash: t1w40I15hLlr7dv8d0uJE/Dz2j4qqNVpP8R3SOXwVvk=)
2: yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl (hash: gvprMYRNa7NwAIeqHy0AbnVGYFBU9sIW7u2bsf68tww=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5f:69:93:cc:c5:86:17:2f:a4:26:58:0d:88:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=b6a218f58d63cbbede7996b116e073dce937d319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f4:dc:82:c5:ab:d5:77:92:53:cb:e7:af:92:
41:09:1a:80:c9:86:c6:75:7a:a1:42:e4:4b:97:26:
ff:81:0b:7c:e3:2f:00:93:43:84:a8:d8:5d:3e:44:
09:b0:e7:a4:99:0d:de:0e:45:aa:ad:4e:00:d9:64:
06:8c:8c:16:ff:a0:b0:64:6d:02:22:2e:72:98:12:
b3:af:42:b9:ee:f9:b7:b1:77:7e:0f:f8:bc:12:b2:
f6:d4:99:f6:ee:a8:71:db:b0:4b:78:91:01:ef:4a:
c3:5e:cb:11:d5:59:fb:df:44:54:da:ed:13:0e:25:
04:c3:dc:a2:55:7b:82:19:93:e5:e7:f5:35:ab:35:
94:95:f8:a9:2a:a0:49:de:4b:dd:a5:e5:38:ad:7f:
b3:9a:47:15:f9:76:66:88:f5:3b:c8:d4:05:e6:32:
18:d4:b1:64:aa:3f:a3:93:6c:14:12:cb:05:40:9f:
c5:90:35:8d:f0:fd:ae:15:d9:c3:f8:94:8e:cf:9a:
b3:a4:97:ba:74:9e:9b:dd:38:fc:dc:23:09:43:ae:
34:52:c2:a4:32:99:96:46:e6:0e:d8:6b:1b:b0:ee:
fc:e9:cb:59:d9:49:b8:a7:d2:ec:5e:86:c3:8b:7b:
19:4e:1a:b0:80:82:b9:bf:60:b7:63:ad:c9:d7:a0:
20:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A2:18:F5:8D:63:CB:BE:DE:79:96:B1:16:E0:73:DC:E9:37:D3:19
X509v3 Authority Key Identifier:
keyid:CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2a:6b:34:2d:fc:11:66:ff:fe:85:a6:b3:f5:25:e5:a5:07:
f0:82:fe:90:a9:35:43:d5:37:1c:75:e7:ec:e0:11:f5:3e:0e:
aa:46:25:ef:71:a3:5a:bb:cc:9c:7c:36:c4:bb:9d:aa:37:44:
6c:a7:42:25:ef:d5:92:f5:00:13:10:38:9f:3d:17:ef:9c:f8:
ac:a3:03:1b:66:70:a8:b7:08:21:7c:7e:50:b8:60:92:94:f1:
51:bc:dc:93:07:24:20:4e:1e:0b:fc:35:8c:a4:b7:f4:cb:37:
f6:40:ae:69:5f:23:ff:ff:ed:40:48:d7:55:48:51:c1:58:6a:
97:ca:fc:e0:7f:12:03:40:8d:7f:b7:77:80:5b:2e:ba:e8:a1:
bb:cd:39:7a:be:5b:2f:7d:b9:c9:70:32:94:5f:0e:53:36:1c:
49:05:d2:41:2f:28:04:58:18:1c:48:20:1b:b7:69:6f:d1:87:
ba:67:a5:9e:bf:bd:3c:27:a7:e6:e2:d1:b4:54:7f:41:f4:f4:
79:40:a0:0b:5a:7a:51:18:06:49:3e:c7:d1:98:a8:5f:1c:9e:
7c:07:5a:0e:bd:10:7c:eb:20:4a:69:53:84:6a:c5:02:d0:38:
ba:6a:19:24:5b:ab:97:75:c7:bc:e0:78:fc:e0:ea:a5:18:28:
b7:68:ea:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:33 2025 by rpki-client