Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d4799f-947f-4b8a-876e-851cb2758775/1/yy4E1-5pYcvraiQFFBux55Ow55Q.mft
File: yy4E1-5pYcvraiQFFBux55Ow55Q.mft (raw, json)
Hash identifier: pWYTSTZHR9qr6c5CayF0dhHXavqdJH4it6q3l/xMwbM=
Subject key identifier: 93:5E:2F:8E:F7:AE:7C:49:37:B7:12:3F:8E:C2:BB:E3:28:BE:7D:BB
Authority key identifier: CB:2E:04:D7:EE:69:61:CB:EB:6A:24:05:14:1B:B1:E7:93:B0:E7:94
Certificate issuer: /CN=cb2e04d7ee6961cbeb6a2405141bb1e793b0e794
Certificate serial: 0192D66F01567F13F350DF0A9238E59E8D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yy4E1-5pYcvraiQFFBux55Ow55Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d4799f-947f-4b8a-876e-851cb2758775/1/yy4E1-5pYcvraiQFFBux55Ow55Q.mft
Manifest number: 132F
Signing time: Tue 29 Oct 2024 04:00:51 +0000
Manifest this update: Tue 29 Oct 2024 04:00:51 +0000
Manifest next update: Wed 30 Oct 2024 04:00:51 +0000
Files and hashes: 1: VYqmNA7QEbS7AUOjISKc2UxzILo.roa (hash: qCGZo3itMjZYwevtWTDqqNIaJxiQbCwbeSNJZ3CVAMw=)
2: yy4E1-5pYcvraiQFFBux55Ow55Q.crl (hash: BAH09lSZdqNhTeDYQd/AfS7mYrOWOq/Riia4THm2MFU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d6:6f:01:56:7f:13:f3:50:df:0a:92:38:e5:9e:8d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2e04d7ee6961cbeb6a2405141bb1e793b0e794
Validity
Not Before: Oct 29 04:00:51 2024 GMT
Not After : Oct 30 04:00:51 2024 GMT
Subject: CN=935e2f8ef7ae7c4937b7123f8ec2bbe328be7dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:8b:be:8c:a3:d9:11:de:29:20:8f:f8:68:
04:f3:1e:9c:52:c9:69:dc:56:ff:cf:24:20:60:e8:
bd:ab:49:3e:a1:8d:13:3e:df:45:d6:b3:09:99:d7:
bb:56:e1:f6:5a:d1:56:19:58:70:09:2e:75:ef:34:
65:7c:4c:fd:05:3f:76:49:d6:c8:38:4e:05:05:cd:
c6:19:ad:86:33:96:7c:f9:45:5c:b8:27:21:aa:fa:
83:ba:90:12:55:0c:78:ee:6a:fe:b4:92:9d:7d:fc:
bc:63:5f:4d:cc:71:30:c0:df:f0:a9:8b:c3:7d:8f:
11:13:94:a1:a9:b9:58:2a:bc:e2:93:2c:62:7e:c4:
51:e0:a7:e4:3d:84:eb:fa:5b:fd:36:00:cc:a0:01:
a0:b0:8c:f1:80:f2:30:dd:ca:f5:17:82:20:7a:f7:
18:e3:76:cd:f4:78:5f:02:26:74:09:86:d0:bd:55:
bd:05:29:00:80:46:70:0d:e1:26:bf:d7:4d:23:1e:
62:0e:a7:d1:e8:5f:fa:7d:8b:52:7c:f9:31:3e:ee:
e1:91:e1:8c:87:7d:fe:e0:ff:d3:0a:8b:ff:3a:c7:
0d:d5:c8:59:f6:1f:c7:59:67:59:85:e6:b9:e2:8d:
90:f7:77:57:e7:d8:76:8d:80:80:25:25:be:84:f7:
f5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5E:2F:8E:F7:AE:7C:49:37:B7:12:3F:8E:C2:BB:E3:28:BE:7D:BB
X509v3 Authority Key Identifier:
keyid:CB:2E:04:D7:EE:69:61:CB:EB:6A:24:05:14:1B:B1:E7:93:B0:E7:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yy4E1-5pYcvraiQFFBux55Ow55Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d4799f-947f-4b8a-876e-851cb2758775/1/yy4E1-5pYcvraiQFFBux55Ow55Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d4799f-947f-4b8a-876e-851cb2758775/1/yy4E1-5pYcvraiQFFBux55Ow55Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:fd:04:6c:bf:c9:e4:3b:b9:27:10:d4:8d:fa:76:7a:94:1e:
6c:00:52:84:5c:12:cc:8e:86:60:7b:b3:f1:c2:ff:10:8e:93:
52:30:ca:06:a3:13:91:71:e6:da:5c:a6:0d:82:44:d5:4b:a0:
f2:7f:be:28:a7:1a:79:db:24:27:e0:0f:91:48:ff:6e:e6:36:
2e:90:9b:7e:dd:46:04:45:9b:0e:43:b9:65:90:02:ca:b2:92:
af:82:4f:a2:99:40:a4:f5:6e:fa:7d:c5:01:e1:bc:ff:8e:b5:
0d:33:78:01:cc:88:ba:92:87:69:6d:1b:93:fa:12:b3:30:1d:
d5:98:13:b5:d9:41:e0:48:df:d4:f9:55:78:08:40:9b:20:fa:
d9:85:c5:28:af:a8:09:9d:67:a7:ba:4d:2c:11:e8:a1:0c:26:
e0:c4:61:bd:b1:02:88:89:0e:12:e4:ec:c3:e7:b4:1b:03:dc:
44:b1:dd:1d:e2:26:39:80:51:f5:e0:d0:97:91:01:7c:d8:83:
03:f9:7b:3a:48:a7:bc:61:11:53:52:f7:cd:f4:24:6e:44:38:
9d:d4:88:73:ce:12:95:bc:85:b0:0d:ec:73:71:8f:f7:19:40:
53:b6:72:40:54:5d:ca:b2:67:81:03:ef:ef:4b:e4:88:9d:e7:
86:1f:a3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:59:15 2025 by rpki-client