Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
File: yohtVYfshfcSQs1XztQJVEUoFo0.mft (raw, json)
Hash identifier: OzFojoEY1o/gHoBkSqbwcT3ipnoXfKpBHMfO2wnjpgg=
Subject key identifier: 93:88:A7:3D:2F:82:75:1A:0E:D7:7E:58:58:F3:0F:76:44:7F:89:4A
Authority key identifier: CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
Certificate issuer: /CN=ca886d5587ec85f71242cd57ced409544528168d
Certificate serial: 0194BBCDDF7279622FED6BC48FFBE7F675D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
Manifest number: 01DD
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: pedXVkU_3_VDst7sTxTSsbn2Em4.roa (hash: 3VM8cHkV3+LaUs7pbcy8XQqPPtDXhoRXeq5taS4kpbU=)
2: yohtVYfshfcSQs1XztQJVEUoFo0.crl (hash: YF+e/d4n7pNCu2A+uUjae9Jw5nyDy9t4G/PvIvQ1+Hc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:df:72:79:62:2f:ed:6b:c4:8f:fb:e7:f6:75:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca886d5587ec85f71242cd57ced409544528168d
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=9388a73d2f82751a0ed77e5858f30f76447f894a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:29:96:10:63:63:07:29:8e:e0:22:45:f3:d9:
31:5f:4d:b1:0c:ec:84:2e:2a:ae:a5:13:c2:24:25:
e5:6a:1a:1a:b4:68:09:b1:eb:d7:2c:83:e9:9f:49:
89:ea:c8:7a:50:47:3a:62:98:c1:33:a8:3d:5b:87:
ef:49:35:19:02:57:15:c8:63:ad:30:c8:60:bb:03:
f6:22:72:dd:93:a6:65:15:67:8d:d0:56:40:fd:01:
82:c7:bb:84:30:78:85:4a:bf:1c:3d:65:dd:aa:25:
dc:7e:67:d1:a0:aa:97:6f:b0:6a:9d:ab:8f:cf:91:
e0:1c:7a:d8:61:ea:e2:90:53:1e:d7:2b:35:4a:1a:
9f:52:72:f4:ec:83:61:e6:46:97:60:0c:ff:f3:89:
6a:6e:d8:04:dc:23:3a:2a:eb:80:29:2a:57:f0:f0:
7d:6a:21:60:32:13:42:78:70:30:d5:f8:ba:5f:a6:
71:fc:77:9d:21:16:ff:c7:74:90:2e:1c:70:64:21:
4f:68:fa:7c:17:d9:1f:70:10:48:ab:38:92:3e:5c:
c9:ec:36:c6:58:8e:f2:5e:ee:64:05:87:8f:f1:e5:
6d:9d:c4:07:9b:ad:2e:a4:99:13:8d:1d:3b:57:6c:
81:9a:5b:70:45:a2:bd:d6:3c:98:af:53:79:5c:f0:
af:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:88:A7:3D:2F:82:75:1A:0E:D7:7E:58:58:F3:0F:76:44:7F:89:4A
X509v3 Authority Key Identifier:
keyid:CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b7:dd:32:83:18:16:ac:b0:23:4b:99:d4:25:3d:f1:2b:bb:
f0:61:9c:74:a1:6d:39:0b:80:eb:8a:9f:68:7a:91:9e:7e:54:
4d:da:5c:5d:5c:17:cc:72:ae:e6:00:db:45:25:da:08:33:0f:
1a:5a:b0:91:a0:3e:77:fa:93:c4:e1:d3:68:8e:fa:41:84:ea:
ab:f3:ae:fd:bc:54:40:69:d6:bf:2a:6c:08:ee:e7:f2:90:60:
66:9c:04:d8:b6:14:31:4f:11:dd:e7:cb:72:61:4b:0a:a7:f0:
aa:bb:cc:20:e3:4b:f8:05:85:65:c5:f2:a0:fa:43:7d:4a:88:
06:53:bd:9b:65:c7:ff:93:4d:b1:4f:b9:87:a9:88:dd:e0:de:
37:fe:74:22:47:2f:ec:4f:db:b3:ee:b8:2a:32:9c:08:72:94:
a9:51:c9:2b:99:88:ef:55:59:35:cf:5e:73:d1:aa:8a:07:ac:
3d:05:0d:ee:11:3b:37:36:d0:9d:91:10:2d:82:77:55:cf:d2:
f9:d6:e9:ed:f7:20:07:de:f7:fe:3a:d9:81:d4:eb:6b:56:5e:
6a:de:59:d5:52:ff:2f:53:77:25:6a:59:ed:b6:ce:d0:f8:92:
d7:05:62:c4:d2:35:47:8d:3d:c1:80:3a:fc:2a:eb:4b:c2:c5:
e2:0c:2f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:49 2025 by rpki-client