Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
File: yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft (raw, json)
Hash identifier: TiHGEL5fmXhuhmqk2n8rDLMVI7DWF0PH3jPRyndy2HE=
Subject key identifier: 85:AF:68:5F:67:8B:F2:F1:63:47:9E:37:B2:08:BF:06:04:95:06:99
Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
Certificate issuer: /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Certificate serial: 0194BBCEE1D82FC5E16AFBC2E34A2E1B26D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: OiIBQ74SHEVkT-8PoCX8Cy-Yivo.roa (hash: W/4g1y46KUHpbD2tJe93lGZ8b+4RqJt+o9NgZvpLShw=)
2: pPvNW_FjjB8IVvvOxts_XCA2Mls.roa (hash: YljUAeMCIRCHABINDqpaynGVTLqLA/H2A6irIYGG7BY=)
3: yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl (hash: mGPU/qIR949xpupWJoZtUslaPdQciOB4zXPHkxskA1M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e1:d8:2f:c5:e1:6a:fb:c2:e3:4a:2e:1b:26:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=85af685f678bf2f163479e37b208bf0604950699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:13:cb:1e:ff:22:e6:77:dd:b5:6e:48:bd:90:
71:9f:91:af:37:15:8e:eb:05:41:ad:1f:bf:6e:6b:
8e:b1:74:68:38:a1:6c:80:66:6d:66:98:aa:52:aa:
c8:27:5e:88:a6:af:f6:28:b5:61:3c:d4:16:86:7f:
6d:d1:b8:dd:c0:03:a4:4d:35:46:e2:31:06:92:fc:
ad:e7:db:17:c2:42:f1:4e:0a:f2:e0:4d:17:d9:c3:
9f:06:05:d0:c0:67:a4:23:e8:6c:32:41:b1:b7:cb:
fc:a8:f5:8b:e8:c7:b2:50:a5:b2:69:52:23:f4:04:
6c:df:eb:bc:79:b7:a4:48:7b:60:27:e6:91:94:44:
f7:9f:e1:6d:e4:ac:62:dc:1f:60:34:f6:aa:bd:52:
65:30:8d:22:c4:4c:e6:95:b5:3d:e9:1c:cf:e4:65:
85:cc:bd:c0:b9:eb:e3:5a:53:da:4f:59:a4:01:97:
44:c1:01:3b:ed:11:26:b3:d1:02:06:d1:0c:97:6a:
82:8e:2f:da:e1:f0:ae:f3:f7:5d:e2:69:1b:42:a4:
b3:ca:c5:51:a0:23:c6:7f:5a:d3:9a:dd:ed:96:11:
f4:02:09:b6:68:84:b9:8c:3b:e8:5b:86:f4:42:2f:
55:29:4a:db:23:1a:2c:cb:57:17:92:69:83:65:96:
c9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AF:68:5F:67:8B:F2:F1:63:47:9E:37:B2:08:BF:06:04:95:06:99
X509v3 Authority Key Identifier:
keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e6:cb:e5:d6:af:8e:c9:96:78:ce:cb:ec:9e:65:f6:1f:6f:
42:06:54:79:fd:9b:88:0a:65:c2:3f:e7:9e:b6:ed:6a:6a:78:
95:6d:87:eb:d0:7a:72:80:ce:6b:e0:f2:89:08:a9:91:74:0a:
86:1b:59:f4:e6:f8:8d:ec:46:9f:02:e0:f1:08:3b:fd:4b:bb:
0c:1e:b0:69:77:5b:8a:62:52:61:a5:70:fd:45:f8:b2:e5:bd:
de:f3:2b:1c:e0:4d:8a:c9:c5:83:28:f8:c5:16:5f:e7:79:77:
07:b4:6b:62:fa:e9:ad:69:79:b4:af:b6:f7:49:10:de:4a:62:
c4:40:03:25:74:86:5e:e0:35:c3:e3:e9:db:0b:dc:e5:75:97:
b1:3c:d0:e5:55:30:6d:96:20:7c:11:4e:74:58:85:b6:cf:ff:
a5:25:a1:d1:8e:93:a6:e1:40:9e:42:5a:93:68:94:c8:c6:4c:
50:09:8e:49:94:07:ca:dd:c6:2f:30:51:46:65:c7:74:e9:54:
79:30:75:36:ac:98:af:27:48:5a:3a:6c:fa:7c:88:35:bf:de:
67:59:80:93:0a:ed:8c:c2:11:c1:5b:97:e1:76:5f:04:d2:3e:
16:ad:73:d2:63:c1:11:ba:5a:28:36:25:0d:74:57:f6:ba:45:
fe:ca:2c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:01 2025 by rpki-client