Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
File: yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft (raw, json)
Hash identifier: kkVR+hTIeivgiQd5UbcEeFEE3pfLb1fdkJZ8BnNBBtA=
Subject key identifier: CD:A9:E0:41:B9:67:C4:3B:E4:57:DE:1A:01:03:51:87:C9:84:F1:33
Authority key identifier: CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
Certificate issuer: /CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Certificate serial: 0195E046C4B0303B61E5B5C319ABB66EA193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
Manifest number: 14C0
Signing time: Sat 29 Mar 2025 05:01:28 +0000
Manifest this update: Sat 29 Mar 2025 05:01:28 +0000
Manifest next update: Sun 30 Mar 2025 05:01:28 +0000
Files and hashes: 1: ENc4V7s5D9VI1PWlf_wPokzkahE.roa (hash: BXmB/X/SHXqjZRpYnJuPeo2gTwWyCsvdek5X4RHOx9c=)
2: XzkhM4tHkIA85DIOJH6Mas-Ys2s.roa (hash: pgsdIi3wdOFYz6s+5BVFRjWsDjSb+kftFl9lENuJtlQ=)
3: yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl (hash: Yyio1BotIorOVN7XfbkaRfodMbOKVhC344Py8w1zhnI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:c4:b0:30:3b:61:e5:b5:c3:19:ab:b6:6e:a1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Validity
Not Before: Mar 29 05:01:28 2025 GMT
Not After : Mar 30 05:01:28 2025 GMT
Subject: CN=cda9e041b967c43be457de1a01035187c984f133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6d:45:c1:8b:3b:30:c1:ea:09:41:2d:78:e1:
34:5b:20:75:4b:f7:4c:71:93:61:72:99:3f:3d:58:
48:9f:99:4e:b7:1f:8b:e6:da:b2:32:fa:ae:f1:8e:
52:05:3a:d1:4e:28:d8:40:33:77:1b:72:c6:6d:a2:
ff:85:7a:1f:6a:97:a2:e9:6a:be:3c:3e:1f:a6:a8:
5e:2e:b5:9e:8c:aa:d0:49:64:02:b5:9f:bd:9e:39:
aa:5a:12:68:e8:ab:13:86:ae:6f:75:56:3d:41:4b:
14:6f:18:ee:75:b6:bd:ac:85:48:b5:c7:f9:6d:27:
0e:43:38:98:cc:6d:c1:ec:86:95:f5:5d:39:78:6a:
6b:95:dc:a3:f0:dd:15:5f:5f:75:02:70:62:89:f0:
e4:6c:8d:9d:b4:ab:0f:7f:f1:ae:11:ab:bd:13:b6:
0c:17:a6:8f:44:40:ac:29:0c:44:67:f1:29:49:9c:
88:09:11:92:22:0a:b0:1b:60:86:27:c4:29:1f:53:
1f:0a:11:ac:c5:2a:39:ad:13:84:e4:48:a0:5d:83:
86:4e:14:08:79:2a:56:7c:ed:1a:90:cf:0a:62:2c:
94:77:6b:e7:f5:90:c1:0c:ec:f2:05:f7:fd:52:4a:
9b:75:58:7e:c6:b1:ba:60:bf:93:5e:cc:74:d8:c8:
fd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A9:E0:41:B9:67:C4:3B:E4:57:DE:1A:01:03:51:87:C9:84:F1:33
X509v3 Authority Key Identifier:
keyid:CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5f:f7:1a:b8:53:19:f9:6b:1c:e4:5f:91:a6:62:49:49:d4:
f0:8c:0d:66:2f:8f:be:fe:e3:95:77:c8:a4:64:11:9c:b1:03:
5e:4b:dc:86:50:5a:73:7b:6d:3a:b1:32:e0:38:3d:5d:73:7c:
95:a9:31:90:fa:69:c1:8f:10:9b:77:71:8a:27:fd:f8:31:f0:
a0:5b:2c:6a:1a:7b:76:61:6b:b6:3a:a9:82:ad:0a:4d:3c:2e:
4d:fc:4c:dc:2b:a3:f3:81:e3:4d:3c:56:93:09:5e:15:37:bc:
75:32:91:af:50:b4:88:52:65:c9:0a:f7:e2:c9:ac:8c:37:42:
0f:ef:23:62:96:89:ab:92:1f:c7:99:f3:fd:9d:5e:99:e0:38:
54:80:26:3b:0c:4d:13:62:da:10:31:50:61:56:73:03:f0:c0:
8d:7d:7c:45:dc:de:36:79:f6:12:e0:4c:b0:a4:0a:49:c8:c1:
04:23:86:46:f7:8f:0c:57:c2:2a:3a:bb:69:77:ba:13:02:ab:
1c:ae:78:3b:f1:a1:5d:b7:c3:45:44:bd:1d:e6:3a:67:b5:50:
db:66:56:8b:13:74:85:6d:ee:93:9f:d4:37:c2:ae:35:3c:09:
f8:7b:00:21:93:68:d7:1c:3d:1f:b6:4c:d8:2c:f0:95:3c:be:
31:de:64:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:17:34 2025 by rpki-client