Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
File: yOkLFy-IviG7mdVz_XWyf1v3RcI.mft (raw, json)
Hash identifier: czZZdYOvpruxHUrN6htucr3AaibwgPgCN9T7GS/oevg=
Subject key identifier: 45:28:5A:A2:C3:4F:60:0D:E8:15:19:38:C8:13:7D:EB:0F:35:F2:DF
Authority key identifier: C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
Certificate issuer: /CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Certificate serial: 0194BC729A438B7187B1E372DA96E63AE149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
Manifest number: 105F
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: DruMjLoGzTbfpdC-U-WNttTm1_E.roa (hash: SsRWSqMHnifAjAWueilvP4vmdjzH/KuaOCO7NOMeoV8=)
2: yOkLFy-IviG7mdVz_XWyf1v3RcI.crl (hash: zmS+d+YPUGiG0GA3dEDILa2IJd0/jeeNtVovBapI1s4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9a:43:8b:71:87:b1:e3:72:da:96:e6:3a:e1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=45285aa2c34f600de8151938c8137deb0f35f2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:99:36:b8:f5:12:82:60:d8:20:93:2c:b9:
cf:1b:17:92:6e:ce:f3:27:64:30:51:00:0f:fa:fc:
76:bf:e4:f9:9c:ca:0e:01:b6:80:fc:96:dc:55:fb:
7a:0f:8b:1c:9f:a4:5f:f1:05:27:74:af:98:f7:b6:
d1:df:e7:04:13:af:a3:e1:65:1c:10:96:40:28:f8:
a1:b8:b8:d7:4b:a7:51:25:f0:83:fc:2a:d2:86:e0:
99:f5:0d:fe:1d:95:fd:d4:14:94:a1:02:11:c0:ab:
42:b0:be:fa:38:ee:c9:a1:df:b3:b3:06:be:34:a2:
1b:62:b6:9b:9a:9b:a6:33:c0:61:c3:06:86:5f:32:
41:f5:5e:78:a8:df:3c:04:3c:13:49:81:b0:33:c4:
a8:ae:8c:b8:aa:00:25:7f:44:44:dc:72:08:62:1c:
b1:dc:c3:27:2f:e5:d2:2a:6f:1c:0b:44:26:35:17:
68:0a:4a:7c:be:58:9d:1a:53:b1:03:23:37:a8:38:
81:6a:4a:94:48:03:37:c6:83:58:50:a9:bd:00:67:
34:7c:1d:18:db:7e:93:92:1c:16:ba:d8:9e:cd:52:
d1:94:f9:c2:e2:d5:23:b6:1f:14:c4:d2:1f:7a:ec:
a5:ad:8d:26:66:13:23:68:8c:99:53:99:79:15:ec:
50:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:28:5A:A2:C3:4F:60:0D:E8:15:19:38:C8:13:7D:EB:0F:35:F2:DF
X509v3 Authority Key Identifier:
keyid:C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:75:a7:ca:c2:bf:b1:c4:5e:c0:de:5f:55:c5:f5:10:3e:a6:
25:7b:65:84:61:ac:01:83:c1:33:d1:61:75:1a:01:5a:51:4f:
df:89:d2:70:68:8a:5b:0b:17:86:9b:6f:8b:51:d9:a1:d1:df:
84:61:4b:5d:c1:fd:7b:b0:73:0e:2d:e7:76:7e:1c:ca:a1:f4:
9f:96:33:05:1c:f2:78:97:13:b0:f9:d7:68:5e:d8:eb:17:e5:
07:6c:d1:ab:08:a7:b8:39:a6:ea:ef:ca:b1:e4:ad:91:d4:43:
ce:e2:1d:27:bc:3c:47:0e:2b:95:30:48:fd:ca:7d:d0:13:a7:
5d:c0:c6:c3:31:40:3b:3a:0a:13:1c:5a:f3:d8:34:61:be:0c:
78:39:f3:85:f6:a4:75:8c:54:8e:18:8c:3d:d8:03:43:15:4d:
d3:fd:a3:fc:f8:9f:7d:36:d4:d9:8d:b4:d7:b2:42:61:dd:29:
74:74:d4:ef:38:7a:fc:ab:c5:51:af:fb:ae:a8:1c:4a:20:9e:
b7:4f:b6:38:97:9c:7d:0f:47:5d:23:d8:88:c8:85:c5:24:1d:
3f:50:ec:99:11:a9:6b:04:6d:af:12:5d:61:6c:56:78:64:97:
a8:d3:e1:da:a3:d9:57:a4:c8:32:75:cc:5e:25:3d:ca:83:a9:
19:1f:f3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:25 2025 by rpki-client