Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
File: yvlojhds84ZDbXu4jTpAW0bQ4rk.mft (raw, json)
Hash identifier: URj1L8x+oD703vISNqjTlLNxuWx05k8hXfaNlZNEGHI=
Subject key identifier: 2D:74:54:3A:57:91:1A:A7:0B:18:54:31:7F:EA:62:72:B6:A5:26:0B
Authority key identifier: CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
Certificate issuer: /CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Certificate serial: 0194BBCE67224B04D0B360F72D2962CBDA05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
Manifest number: 022A
Signing time: Fri 31 Jan 2025 10:00:53 +0000
Manifest this update: Fri 31 Jan 2025 10:00:53 +0000
Manifest next update: Sat 01 Feb 2025 10:00:53 +0000
Files and hashes: 1: UnbwSxH6ZVeEnUksjRft9S3sebQ.roa (hash: 9U4mL4N8d7vors4YWo2644UK3bJphFQDyoU+KjBkOjc=)
2: yvlojhds84ZDbXu4jTpAW0bQ4rk.crl (hash: 8V+zhV0+IgpW4vY5ajPWaIxFx9FcUtMHgF53sUbVYKc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:67:22:4b:04:d0:b3:60:f7:2d:29:62:cb:da:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Validity
Not Before: Jan 31 10:00:53 2025 GMT
Not After : Feb 1 10:00:53 2025 GMT
Subject: CN=2d74543a57911aa70b1854317fea6272b6a5260b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ce:23:7d:80:6b:39:ec:3c:05:6f:7c:7a:9b:
da:54:74:48:36:28:2b:f4:6d:2f:83:4a:8d:65:58:
c1:a8:d9:c4:c7:a6:44:02:6a:c0:5a:69:fa:d8:28:
e6:b9:62:00:2d:17:68:f3:05:3d:7a:75:1f:2c:ae:
92:78:2a:43:8b:1d:60:e6:2c:98:01:ec:05:6e:0d:
2e:9c:62:8c:6e:bd:0c:7b:38:cc:45:eb:19:07:42:
71:4f:cd:31:95:2c:a1:84:2b:50:b7:22:62:b5:ad:
ef:40:d9:fd:16:80:cc:68:c2:f5:5b:eb:aa:03:40:
95:c5:04:8c:5f:13:c7:33:4f:82:34:48:01:91:45:
78:13:99:0e:46:58:15:af:80:40:bb:2b:50:9d:63:
09:8f:44:a0:f1:47:63:42:47:6d:06:a0:b1:b4:41:
df:46:36:8d:bd:5c:a5:9c:eb:73:75:4f:f0:c3:bc:
bf:ed:b9:8d:aa:b2:ce:e0:0d:25:57:b5:ed:26:5a:
a1:11:88:88:c7:79:34:bf:8b:32:78:92:5d:87:90:
37:b8:72:99:ae:cc:49:3c:37:9e:2b:4d:a5:90:d1:
82:6d:ca:62:28:e2:35:2c:5f:d8:70:60:7a:6b:a1:
a6:a6:8d:26:c9:1b:53:d9:99:ee:a3:ed:e8:75:e2:
60:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:74:54:3A:57:91:1A:A7:0B:18:54:31:7F:EA:62:72:B6:A5:26:0B
X509v3 Authority Key Identifier:
keyid:CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:a3:55:d7:2b:ae:39:5f:e5:b3:2a:a2:75:5b:43:a2:bf:6c:
49:41:fb:89:7d:28:66:43:e5:f6:4f:0e:ad:c2:ff:d8:a9:67:
a5:f3:ce:62:f0:70:6f:8f:e2:c1:ee:11:5d:34:ae:4d:e4:57:
9c:10:5d:74:4c:3e:d9:81:02:f2:2a:b4:9b:93:05:84:99:13:
8b:72:f1:dc:a0:78:27:b4:eb:ac:6a:05:d3:ec:96:4d:2f:13:
35:60:4a:6f:a2:58:f8:c8:0f:d8:dd:40:3c:c0:87:9a:5e:a5:
23:fd:9c:a7:6d:cc:a7:4d:98:ca:2f:a7:8f:06:f6:1b:19:3d:
74:e4:85:0a:50:12:59:7e:0c:8f:f3:82:08:7a:3b:10:cb:df:
d0:da:d8:7f:36:f2:3c:ee:6f:0a:73:8e:54:4c:c1:92:7f:bb:
34:07:8a:e7:30:94:a1:df:2f:96:1b:6f:9a:b5:82:94:26:2d:
2b:24:02:47:de:40:d4:1d:22:2a:44:11:77:e2:f1:ae:8d:1e:
8f:86:c2:14:b8:56:fc:cb:18:af:bd:88:ee:84:68:96:c9:7c:
ef:a5:17:be:06:4e:5f:b8:6e:af:ab:05:ad:79:04:c4:9c:c9:
95:d9:57:77:1b:ee:44:57:74:3c:b1:8f:55:b2:83:80:e3:2e:
35:d6:b6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:11 2025 by rpki-client