Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
File: ypJvljURiT-k2fvV5k4PikODfkA.mft (raw, json)
Hash identifier: T8zcUhGPovjfuYG8sRx9keEV60WzitRDduYZgewbD5A=
Subject key identifier: E3:A3:CC:83:BA:43:EE:E8:B7:EF:B2:5F:7C:27:3A:70:C0:17:AB:A4
Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Certificate serial: 0195E15907CD6CB54F30D5305312D8C7DA74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
Manifest number: 14BF
Signing time: Sat 29 Mar 2025 10:01:03 +0000
Manifest this update: Sat 29 Mar 2025 10:01:03 +0000
Manifest next update: Sun 30 Mar 2025 10:01:03 +0000
Files and hashes: 1: GUCAqvQ0tMU-bensdtba-Wc3xJ0.roa (hash: WEDF5d5E+5ca0KR+0265vV9lQ4jW9zrbyE6qVfdzth4=)
2: ypJvljURiT-k2fvV5k4PikODfkA.crl (hash: CcC+bqxLu6/Ztd2zQ1m+2OdN+nDBKbb3kjwEwh6fOqk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:07:cd:6c:b5:4f:30:d5:30:53:12:d8:c7:da:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Validity
Not Before: Mar 29 10:01:03 2025 GMT
Not After : Mar 30 10:01:03 2025 GMT
Subject: CN=e3a3cc83ba43eee8b7efb25f7c273a70c017aba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a1:9b:7a:38:f2:66:d9:52:15:e2:fc:37:fc:
30:72:5b:f7:e5:5b:f5:46:4c:2e:ee:0c:cc:3c:aa:
77:19:12:8d:92:57:e9:9d:79:eb:7b:c8:a3:6d:64:
92:57:60:52:31:d3:8d:52:ae:b3:59:a5:fc:1c:22:
69:c1:86:b7:68:e8:e2:c8:fb:54:b7:68:be:05:a3:
34:e3:90:e3:e6:66:ca:05:c4:88:99:3f:05:5f:0f:
0a:94:47:cc:5f:25:ec:0b:a6:1b:b4:5a:03:e4:e7:
e3:a1:b4:fc:c4:03:00:aa:6c:01:d1:5e:5d:dc:21:
5e:c9:ff:ff:6b:16:b5:1a:1e:02:be:c2:fc:83:2d:
14:58:e1:88:a4:f3:28:43:b1:2d:e9:56:f7:41:98:
dd:a0:a4:52:47:fc:55:1b:1a:8f:9c:02:18:9b:da:
39:11:f4:0b:a1:7d:41:ad:c9:a2:1b:49:99:78:72:
2c:24:7a:b4:1c:60:55:33:ff:f8:b7:88:b2:17:d3:
c9:f5:9d:3f:a3:36:f8:5f:e6:d0:34:cb:23:5e:af:
b4:82:e8:f2:de:0c:74:0f:89:d9:e2:d5:c8:3d:75:
5f:ac:d1:8c:ae:87:7c:d3:92:b3:a9:8c:f7:d9:14:
5b:0d:15:2f:b5:d3:51:80:90:e8:fe:ab:05:3b:92:
1c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A3:CC:83:BA:43:EE:E8:B7:EF:B2:5F:7C:27:3A:70:C0:17:AB:A4
X509v3 Authority Key Identifier:
keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2c:47:4c:fd:5f:c0:c4:5a:f0:0b:ec:6d:a3:51:bf:9e:6a:
2e:0f:37:e2:f6:df:42:2d:5b:95:3e:ce:18:77:6c:de:06:2d:
37:87:86:c5:64:8c:9c:b6:e2:50:41:80:a0:3c:e3:90:18:e7:
7b:52:6e:f7:1a:7a:c5:1a:c4:93:db:e6:7d:4b:c9:d3:34:7d:
dc:5c:d0:80:cc:74:a9:4a:3f:2b:08:34:e7:69:38:b3:59:bc:
c8:bf:87:ef:0d:c2:55:c5:1f:01:63:85:0f:b9:98:0a:f1:83:
b8:44:6c:7a:2e:53:cd:15:b7:8b:f7:d0:f3:c8:ed:c2:b1:fe:
b1:04:9e:d3:f2:b9:4b:b6:9d:90:57:93:b7:8f:0e:3c:ef:80:
15:7f:03:bd:1c:9e:f8:96:73:61:c3:b0:d8:ff:e8:24:60:0f:
97:ef:e3:3a:28:3a:99:0b:43:1d:de:89:b7:d2:e3:c8:67:ee:
60:71:ec:4e:f7:c6:52:e7:59:34:9a:7f:3c:a5:4a:a5:bd:53:
24:06:20:51:4d:b2:6b:eb:da:00:ff:c1:9d:61:04:17:71:c4:
53:61:b0:59:e6:db:67:be:44:3a:04:92:61:45:95:88:7a:bb:
79:63:47:ae:d4:9a:34:56:d2:60:79:1a:15:60:67:5a:5e:8a:
1b:04:7b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:15:54 2025 by rpki-client