Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
File: ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft (raw, json)
Hash identifier: 96b49IdsYPR0U8K8qDTBFjBR8oryjmJuczwFROhou0Y=
Subject key identifier: 53:F9:77:18:65:E3:E0:80:5D:4C:37:78:1A:F4:1D:C3:99:91:9C:40
Authority key identifier: CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04
Certificate issuer: /CN=ca707e086640056bc271d5d2b3e24d01440baa04
Certificate serial: 0194BCA9A52C8E9EC4580274E86509C3DA21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
Manifest number: 0364
Signing time: Fri 31 Jan 2025 14:00:21 +0000
Manifest this update: Fri 31 Jan 2025 14:00:21 +0000
Manifest next update: Sat 01 Feb 2025 14:00:21 +0000
Files and hashes: 1: 6gBE7pptZYiOQYzgQrDqpd4YU28.roa (hash: befLdlmkbWAFqJs/2qFJeaYKjLxcSCoV57kISzSShtY=)
2: m-uxR0_8eTmWZhstKF2AykIOlW0.roa (hash: nD9JKASfoFUEslOSfBGoZNc0ukQrH6qex/4nKwJQ1Us=)
3: wCPLGfwEfOWZHOqkEsXWfcaZpAY.roa (hash: A9EE9J7EKj21RYPt9BS119MIZmB7so+dos1TcgTJEmI=)
4: ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl (hash: b7X5UsWvjd6dfJzMkIAUDD3JIbB+3P6Lybs6pu+Ikjs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a5:2c:8e:9e:c4:58:02:74:e8:65:09:c3:da:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca707e086640056bc271d5d2b3e24d01440baa04
Validity
Not Before: Jan 31 14:00:21 2025 GMT
Not After : Feb 1 14:00:21 2025 GMT
Subject: CN=53f9771865e3e0805d4c37781af41dc399919c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6a:bb:c7:2b:cf:a1:a7:3a:c6:57:bd:72:40:
77:da:54:38:20:b3:97:01:b7:a6:31:3d:55:0e:0d:
f2:3c:ff:12:58:1c:99:88:2f:ca:13:7f:0f:2e:ad:
ae:d0:db:6a:78:b5:04:04:8d:fe:9c:7b:e4:b8:70:
09:c2:93:3c:8d:58:66:ee:67:e2:9d:77:f8:50:dd:
2c:1e:26:18:3b:27:0d:96:30:f7:2c:74:b3:ca:70:
a5:3b:4e:c8:43:73:85:7c:ce:ae:f5:d5:ed:dd:3e:
c1:aa:66:a4:bd:b1:01:21:a2:66:bf:54:71:3a:35:
fd:bf:7e:cf:b9:e2:22:c5:e1:d9:32:3b:ca:24:e0:
dd:a5:d3:4d:59:a7:48:c4:6b:94:ce:06:29:f8:59:
13:61:ae:f3:ff:1c:29:37:2f:50:80:c1:5c:06:bc:
fb:71:aa:b3:08:0b:32:7f:35:1d:e5:08:3a:46:ea:
76:59:a3:d9:79:1b:5d:35:61:2d:18:96:30:29:55:
11:7f:2d:2d:44:94:93:00:4e:b4:a8:f3:4e:0d:3b:
21:e5:fb:a1:b7:58:76:fb:96:cd:53:3a:20:10:94:
92:ff:09:b4:33:2b:9a:cb:29:a2:e6:9d:90:31:0e:
e7:1f:32:a7:dd:01:da:8c:30:3a:d8:77:6e:d7:7f:
75:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F9:77:18:65:E3:E0:80:5D:4C:37:78:1A:F4:1D:C3:99:91:9C:40
X509v3 Authority Key Identifier:
keyid:CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:1a:c2:cb:c6:5f:9e:e7:33:7f:66:d3:bf:a9:fe:4f:86:43:
2f:ab:3d:c8:79:50:04:4c:80:77:a2:d7:61:b3:7e:7a:fa:b2:
8a:b4:3a:79:68:f4:7c:76:10:31:cd:dc:84:8a:fc:32:b7:71:
cf:b1:d0:f5:a4:ea:13:04:72:04:b7:03:5b:c9:8d:17:13:f0:
2c:89:b9:a9:74:b2:95:d8:db:c5:74:7b:1b:17:36:8e:6a:d8:
99:09:60:4a:43:dd:fc:45:bc:08:f7:d0:1b:5b:94:cf:6d:5c:
cb:ff:58:90:61:71:51:d1:a3:c8:af:b5:14:4a:ac:72:20:37:
26:48:88:fa:81:1e:0e:fc:3e:fe:f6:91:91:fd:b5:11:85:b6:
8f:73:3a:cb:29:fd:a4:03:6e:fd:a4:5b:28:b6:e3:f8:18:f5:
87:f0:de:42:09:3f:cc:07:83:35:35:ce:c6:30:6e:f9:d1:5a:
c9:e4:45:62:a7:d4:89:26:af:27:31:5f:b1:89:74:9c:00:11:
26:b1:2a:25:f0:78:a3:e8:05:8e:1d:86:c9:58:cd:05:23:ed:
c8:c3:20:13:74:eb:b7:2b:2c:1d:ae:31:93:b2:b7:5c:47:b7:
bf:19:5e:cd:15:9c:35:ba:31:9f:96:d9:62:e1:a6:59:dc:18:
07:f2:12:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:09:56 2025 by rpki-client