Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File: ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier: kMf6I5GfkJcMqrekq5eUeO3wZUGsB/frweAYK9doaM4=
Subject key identifier: 71:2B:93:76:0D:96:E9:9C:D2:18:98:F3:E4:61:74:F7:B0:32:B3:15
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 0195E0EB53FE6691F860391AF1DE3E40E272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number: 0BA9
Signing time: Sat 29 Mar 2025 08:01:13 +0000
Manifest this update: Sat 29 Mar 2025 08:01:13 +0000
Manifest next update: Sun 30 Mar 2025 08:01:13 +0000
Files and hashes: 1: PaUzB8wgbbRsaVQjkghBHBx-i68.roa (hash: lFrqYnlO5yM3Jwu/7kIddY95Ktd00GHwSSlGhdD9Z3M=)
2: o-gQar2CMjSO0OGR1JsEy5fR9Ps.roa (hash: I2VZfYqX7cBWwD9BfQYsIfq3N0fck3zT8r6EAvsy5D8=)
3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: xeZ46B5k6gDE3sUGsayxrMKnnu1H661a8e5yIMzRfS0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:53:fe:66:91:f8:60:39:1a:f1:de:3e:40:e2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: Mar 29 08:01:13 2025 GMT
Not After : Mar 30 08:01:13 2025 GMT
Subject: CN=712b93760d96e99cd21898f3e46174f7b032b315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:cb:f4:58:95:aa:81:a0:93:9b:62:1b:2f:
d3:72:82:e9:26:22:c9:47:ec:22:6c:c1:41:82:9f:
68:0e:66:de:4e:f2:49:93:ff:1b:92:21:6f:3a:f9:
e8:ed:72:41:cc:db:ae:21:e1:7e:9c:40:bc:53:e5:
65:14:7c:e5:e7:b6:a0:ab:62:23:c0:5f:7a:e8:9a:
c3:c7:a7:20:36:f6:ba:4a:55:01:a7:0d:8c:70:d4:
f7:df:ef:95:33:49:6e:56:eb:3b:5f:af:31:fc:ec:
57:1e:13:3f:fc:bd:98:af:12:e7:f5:90:99:75:ce:
3e:29:db:b5:6b:f2:df:fd:78:3a:28:98:d2:cf:a2:
a1:99:4a:89:dc:3c:81:87:1b:57:10:57:31:94:27:
ad:e8:30:75:4a:fb:4b:e6:a1:55:7f:78:96:56:25:
b7:75:91:2e:e4:cd:4d:c5:94:17:c5:42:a0:5b:0e:
af:00:a7:5d:c8:5e:08:c1:f6:5d:b3:09:fc:7a:6c:
b0:be:72:45:9e:13:90:c4:f4:0a:83:55:92:b0:bd:
65:b6:ac:77:70:10:7b:77:76:81:9d:41:c5:0f:85:
cf:82:80:d8:e2:00:d1:cd:a1:c9:92:c1:a7:8e:34:
a6:0e:ca:3f:f4:cd:0c:f9:b9:f9:15:dc:40:a5:26:
ba:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2B:93:76:0D:96:E9:9C:D2:18:98:F3:E4:61:74:F7:B0:32:B3:15
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7e:fd:56:0d:81:9f:90:2a:ec:30:1e:20:1e:ad:38:88:71:
41:3c:8a:00:74:00:2a:5d:6a:fa:9e:31:f5:c6:8d:04:b6:90:
5e:e1:04:64:7c:39:1f:3c:50:74:ea:72:49:33:ae:f7:3b:0d:
1e:a9:e6:aa:ac:4c:1d:76:44:c9:76:98:e2:e9:c4:bc:e2:9d:
94:f9:5c:d0:f8:14:05:5f:20:4c:5d:61:4e:55:e3:3e:bf:01:
99:45:20:d4:cb:d8:4c:41:57:b3:39:cb:50:71:7c:0a:26:cd:
16:65:3c:7c:65:0d:fb:8d:f5:79:a3:e5:a8:7c:be:6f:26:e7:
80:14:7d:98:ca:50:0d:8d:8a:ac:d5:2d:28:66:7a:f1:9a:9f:
c6:f0:75:b5:4b:fb:66:0a:e9:ed:bc:9a:af:30:2f:34:90:98:
01:92:1e:46:42:3d:cd:93:6f:dd:ea:9a:c5:4e:6d:c9:b9:0e:
95:07:0e:a2:38:87:30:78:9b:67:b2:fc:6e:4d:10:8c:fd:ae:
71:51:b6:4c:c7:4e:aa:3f:82:7f:44:2f:8a:69:97:12:65:0f:
92:26:4b:33:4a:4c:1f:f4:99:f0:d0:23:0c:49:02:31:cc:80:
cc:da:f0:47:c1:92:09:2c:fe:5e:64:04:fd:fe:a9:6f:75:97:
ad:2f:32:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:06:06 2025 by rpki-client