Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
File: yErFLitXLMKpmnQSV-VpqjceNWg.mft (raw, json)
Hash identifier: kaIap7drK+f3kW+8uIrfkCOGJiGmKSb+WoesGm7i7uc=
Subject key identifier: 68:F3:FD:9B:E1:52:7D:FB:51:8D:EC:B7:11:2B:65:D8:B1:15:8F:6E
Authority key identifier: C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
Certificate issuer: /CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Certificate serial: 0194BC3BD15F22D82B4121EC844E33B57ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
Manifest number: 0CB3
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: Ki24jPZgJrCPTdr-EzJOC_g3W_g.roa (hash: n4ZbZmzZFlutTnq+BcgW8yw5bghHlIwLiglxRYnEDAw=)
2: yErFLitXLMKpmnQSV-VpqjceNWg.crl (hash: aVfpz7ZlNNId+nYjD1JxYZui976AxPLHz+tVJTRA7Vw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d1:5f:22:d8:2b:41:21:ec:84:4e:33:b5:7a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=68f3fd9be1527dfb518decb7112b65d8b1158f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:71:3a:7f:7a:8e:df:b6:06:8e:f6:8a:05:
c5:d0:5a:17:f2:35:6c:a4:78:bf:86:32:d4:90:df:
44:e4:2f:05:6d:17:11:ec:4d:d5:ed:01:a3:dc:41:
0d:af:f0:2c:98:ed:d6:0c:2b:9c:14:92:b2:88:ed:
f8:d2:df:e1:d1:31:ee:6d:96:82:27:78:6b:cd:ec:
9b:11:0e:51:8a:5a:e1:4f:69:1f:5b:7d:29:73:f2:
72:86:ae:b6:8e:47:e5:4f:91:14:60:dd:18:19:83:
dc:80:8d:0d:ab:9e:85:0c:c1:5f:99:39:36:42:2d:
46:fb:31:9e:fd:87:05:e1:6f:f4:b1:2c:0b:22:45:
49:f5:75:bd:46:f0:ff:ea:77:02:ad:9e:09:3d:3e:
fb:be:5b:8d:65:3c:1d:6d:62:f7:86:cd:3c:59:24:
09:7e:28:1e:a3:fb:77:51:cd:59:0e:ed:8c:63:39:
df:ff:8f:72:0c:e3:3a:0b:94:03:59:8e:0c:72:52:
9a:10:de:30:5a:2f:60:6f:30:3a:77:29:80:32:22:
c4:d0:37:44:b9:1b:8f:f9:87:2c:40:cd:ee:96:b8:
f1:ae:3f:c0:7b:1d:49:91:2e:7b:8b:35:61:4d:39:
be:7a:25:3d:09:23:1d:a0:66:a4:2f:78:12:08:d1:
70:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F3:FD:9B:E1:52:7D:FB:51:8D:EC:B7:11:2B:65:D8:B1:15:8F:6E
X509v3 Authority Key Identifier:
keyid:C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:99:0f:54:35:02:e4:88:18:ce:e3:76:7d:9e:b7:f7:e2:9d:
3c:31:72:3a:05:96:a7:aa:80:d6:27:82:34:5d:b7:7e:03:4a:
cf:96:ef:bc:9b:bc:ea:bf:4e:be:e4:5e:f6:55:f0:28:6a:80:
31:8c:59:0c:34:cb:e8:cb:1f:8b:ea:ce:66:60:a7:b8:8a:ef:
0c:df:5c:27:8f:0e:b7:49:e8:7a:2a:e8:a1:8a:24:f5:d4:b7:
9f:cc:ad:64:a9:10:ab:0d:29:af:67:2f:c3:cf:6a:5a:7e:1c:
71:83:9a:4b:3b:57:b3:bb:29:05:c4:76:f4:66:90:ef:6b:ca:
28:c9:d3:44:4b:e2:2d:1d:68:fd:62:15:9b:07:56:de:6b:5b:
46:72:4b:c5:87:81:12:c3:49:1f:6b:e2:73:8f:e8:3d:d8:cc:
00:0f:10:6a:f1:97:b3:89:42:24:d0:15:48:67:ca:29:7a:1c:
c4:03:df:86:76:b5:f0:02:a7:0a:80:a7:5c:b0:92:23:38:ac:
41:e6:3a:89:d8:9a:37:cb:0d:32:70:a1:70:c8:22:b5:df:d7:
17:2f:5e:97:b4:80:a7:89:ac:13:6e:92:9a:81:8e:93:9f:bf:
66:32:2f:d9:d5:91:c1:22:1a:a6:eb:7d:2d:a6:76:1a:29:dc:
ed:e4:dd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:20 2025 by rpki-client