Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
File: yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json)
Hash identifier: y7+OWh27wbpHbbZDMKw7AuvthAiGSA8aA1NG5rD7l0w=
Subject key identifier: 2E:21:39:5A:98:0C:D9:E7:39:36:24:A4:39:D6:50:50:02:FF:23:CE
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Certificate issuer: /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial: 0194BCE066D90F700C1856DE009067389C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
Manifest number: 1112
Signing time: Fri 31 Jan 2025 15:00:10 +0000
Manifest this update: Fri 31 Jan 2025 15:00:10 +0000
Manifest next update: Sat 01 Feb 2025 15:00:10 +0000
Files and hashes: 1: qaAnyBes9jUnUhuZgA6_0wh2Utk.roa (hash: SqePUXPFn7aMkbwwWNRWIjpMhjMen/HlDEhNyjcwe8Q=)
2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: 9INi4b0QIeJrSTp2TFNKYifTqcU6F5Jh5WIE1cR9uAY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:66:d9:0f:70:0c:18:56:de:00:90:67:38:9c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Validity
Not Before: Jan 31 15:00:10 2025 GMT
Not After : Feb 1 15:00:10 2025 GMT
Subject: CN=2e21395a980cd9e7393624a439d6505002ff23ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:95:bf:df:84:1a:24:f0:ed:6e:97:8c:95:9e:
bf:16:ea:19:1d:07:46:ac:c8:d3:25:f0:1f:96:d9:
13:d9:c1:ea:65:24:e8:96:aa:21:db:e4:80:67:11:
1b:11:75:9a:6a:d3:25:5f:5c:00:2a:fe:c4:91:5d:
9f:3c:4e:27:8e:b8:2e:22:a1:dd:5a:68:db:9a:7b:
b1:d6:51:ac:38:51:b6:e2:4e:b4:3f:d7:a4:aa:7f:
2a:26:3f:f5:00:87:aa:c2:fe:8b:ff:e4:57:13:bc:
a4:b6:55:cb:20:1c:76:a8:dc:b8:1e:3d:4f:e4:6a:
01:6d:c0:b4:70:57:62:99:ee:b5:9f:de:c3:50:7a:
b6:47:5e:ed:0d:ca:08:c9:b8:d1:86:ae:66:17:54:
fa:4c:44:d2:9b:fc:be:59:12:b4:a7:a5:f1:3b:97:
b2:a8:e4:66:af:73:e5:18:9a:10:f0:3a:fd:46:77:
69:a5:81:88:24:f9:a6:c2:1a:a8:a4:5f:62:90:e2:
9f:f2:07:13:14:88:89:a4:29:63:83:92:56:10:79:
1f:b3:2a:9f:52:42:ff:29:26:c3:36:0f:71:38:78:
07:d2:a4:6c:38:52:b6:97:9d:89:a1:c2:c7:fd:27:
74:88:9c:3f:52:c9:38:36:73:62:c6:dc:fa:c2:56:
06:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:21:39:5A:98:0C:D9:E7:39:36:24:A4:39:D6:50:50:02:FF:23:CE
X509v3 Authority Key Identifier:
keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:90:20:5f:9b:d0:ce:34:24:8e:67:78:fd:d9:5d:c6:f5:11:
8d:6b:87:63:a2:d7:1b:3e:b0:c3:07:fc:2d:82:49:1f:a4:ba:
a9:0f:c7:76:80:a5:4c:7d:40:8c:eb:95:70:05:cf:b2:98:79:
87:f8:89:0b:11:fa:85:93:43:b5:80:70:3d:e0:f8:cf:49:05:
4b:4e:8a:68:ac:cc:a1:af:7b:97:00:d0:54:1d:d1:12:d5:bc:
5f:8a:2c:f7:da:21:45:a0:05:86:fa:14:e5:84:41:d0:bd:67:
6d:12:70:ff:83:56:ee:f1:a6:d6:41:34:48:5a:07:84:53:8b:
23:aa:d9:61:38:f1:8f:ff:d2:76:61:72:fb:03:8c:8a:2d:db:
e5:ef:fb:e7:2e:56:bd:f7:45:1d:6a:06:7f:75:fb:37:03:d1:
6b:ac:62:9c:91:a5:68:be:49:7a:45:68:c1:29:2f:68:2c:c2:
3f:03:5f:83:76:b3:73:32:9b:cc:cd:f5:ee:33:3e:95:54:4a:
ec:50:d7:4e:41:0a:8e:6f:93:74:23:a6:02:ea:87:37:8e:84:
39:97:9d:eb:79:e5:2d:2e:9c:d7:2a:bc:e0:36:bc:70:f8:30:
9e:91:ca:b9:e0:d9:48:2c:4b:65:9f:dc:52:07:5c:13:6a:b3:
0b:3a:c8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:34 2025 by rpki-client