Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
File: ymRB2dgH4NeM51IToQNADuFKfNw.mft (raw, json)
Hash identifier: Gs8JJRSs6z24/4Qwb/B2V8KMnK6PaJgr9z8+f1OKREs=
Subject key identifier: D9:AB:CA:3B:59:3E:7A:AD:3D:6B:FF:54:68:F2:E6:BE:61:2B:1D:9F
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 0195E159097B1AD5FDE0DF9494F7C81F9FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
Manifest number: 2D
Signing time: Sat 29 Mar 2025 10:01:03 +0000
Manifest this update: Sat 29 Mar 2025 10:01:03 +0000
Manifest next update: Sun 30 Mar 2025 10:01:03 +0000
Files and hashes: 1: DwPkZR2Fk3XTPYVDkun2x24bTHQ.roa (hash: aeDwVoyUuAcFcTkf4BEFb0mmAMaQsJhzjIfzb6y7vIk=)
2: ymRB2dgH4NeM51IToQNADuFKfNw.crl (hash: LkfmksGqgutWuewPmYZMbB1UxaUR3q/zu1dcRa+zCRc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:09:7b:1a:d5:fd:e0:df:94:94:f7:c8:1f:9f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Mar 29 10:01:03 2025 GMT
Not After : Mar 30 10:01:03 2025 GMT
Subject: CN=d9abca3b593e7aad3d6bff5468f2e6be612b1d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:82:0e:ff:d6:6f:d5:8b:f2:08:26:7f:0c:22:
72:23:b6:e8:37:eb:90:0a:e1:9c:72:39:34:f0:aa:
36:8e:4a:cb:86:70:52:89:0f:dd:28:f0:c3:ef:c4:
7e:dc:a6:ab:95:1f:01:da:77:67:60:01:2e:e0:fe:
f5:05:80:e0:d0:9c:35:88:38:7e:8f:2b:83:df:92:
79:6d:e0:0e:a8:3c:70:26:5c:bd:0d:7c:1a:2d:28:
8f:8f:88:e4:bc:07:f1:9f:f2:32:34:44:ce:e0:00:
4a:24:52:43:b3:f1:18:d1:60:e0:5f:36:63:1d:54:
60:35:53:0a:e5:c0:01:83:c7:b2:55:70:dd:7b:b6:
b6:54:da:9c:db:05:b9:dd:24:f7:34:7f:9d:0b:2e:
a8:d7:cd:e0:db:48:54:8e:d2:a0:f4:f0:f8:12:31:
b4:0f:9b:22:fb:ab:d4:a6:be:8e:10:66:e4:71:c5:
61:47:ac:5d:61:51:fa:6b:f1:93:c6:84:20:68:29:
f3:72:af:0f:c6:af:5a:67:6f:20:80:82:6f:7a:83:
38:8e:3e:cb:9a:02:67:d3:8d:42:82:41:2c:d2:ff:
65:ff:0c:f9:63:21:bb:71:bf:e9:ef:dc:f4:5e:a9:
cf:06:a4:48:16:4f:a7:78:c0:69:71:16:d5:3e:5e:
41:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AB:CA:3B:59:3E:7A:AD:3D:6B:FF:54:68:F2:E6:BE:61:2B:1D:9F
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:91:07:77:6f:f0:83:10:a3:43:2b:2a:7b:f8:a7:80:1b:76:
e5:35:66:bc:37:3c:bf:b5:5a:b8:ae:a2:51:8a:bc:7b:2f:27:
14:f6:25:a3:4d:38:4e:02:b8:7c:da:7b:f6:cb:af:f2:48:22:
fe:20:89:43:25:ba:71:32:a0:59:65:9e:a4:84:ca:0d:2f:91:
ef:e1:b1:28:dd:9b:15:09:ef:9b:ac:41:ff:01:4d:e9:68:cd:
a4:85:9a:3f:c1:f4:b5:ab:9a:ad:cd:82:de:3c:20:3f:7c:50:
5c:5a:24:67:12:08:52:a3:52:f5:e3:fb:9b:2a:16:25:b0:d4:
e2:d6:07:4c:0d:0f:83:db:8e:a7:9b:d2:e8:55:b3:bf:55:c5:
1c:04:ae:d2:d6:be:81:ee:c4:51:de:f2:1c:a0:27:b2:75:7a:
8b:1e:df:36:9a:3c:3a:d5:45:83:06:57:a5:c8:6c:0f:e0:ac:
ee:2b:5c:d2:55:8e:5d:bd:41:c1:7e:0c:66:62:bd:ca:ef:df:
4d:3d:52:1c:38:40:b5:11:29:53:c3:ed:d5:28:86:cf:17:4d:
51:b7:63:12:28:45:a6:bc:87:76:21:1a:03:95:7f:a1:3d:56:
7c:9d:a7:13:bc:ad:48:0b:bb:bd:08:a5:5b:51:2d:85:77:56:
8c:34:c3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:09:05 2025 by rpki-client