Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f264e0-c8a5-41d5-9cd1-7f355d40c4e7/1/yplJKRZrvXRBZftk9Iw1-bRDanc.mft
File: yplJKRZrvXRBZftk9Iw1-bRDanc.mft (raw, json)
Hash identifier: /3/zosZlrHWuOk7IHqUNzcJgkrvNuMf1ZuiPgFaavvM=
Subject key identifier: 02:A1:CA:36:5B:C7:D9:AB:11:2B:AF:7E:DD:46:2E:61:C9:4D:79:7C
Authority key identifier: CA:99:49:29:16:6B:BD:74:41:65:FB:64:F4:8C:35:F9:B4:43:6A:77
Certificate issuer: /CN=ca994929166bbd744165fb64f48c35f9b4436a77
Certificate serial: 0193DD12EFCC3CCF378A66404330B6B1D9FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yplJKRZrvXRBZftk9Iw1-bRDanc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f264e0-c8a5-41d5-9cd1-7f355d40c4e7/1/yplJKRZrvXRBZftk9Iw1-bRDanc.mft
Manifest number: 0EFA
Signing time: Thu 19 Dec 2024 04:00:25 +0000
Manifest this update: Thu 19 Dec 2024 04:00:25 +0000
Manifest next update: Fri 20 Dec 2024 04:00:25 +0000
Files and hashes: 1: Dh4nvoZ7csFVaLY4VR-zktPx1_A.roa (hash: 4dG9zaKaxiw4+oaN+ILmhCjupeFAr1W+JKV7ay5HWAs=)
2: yplJKRZrvXRBZftk9Iw1-bRDanc.crl (hash: E1Vb+Ud9if9vNx2rNd6iupqWEU2lGpqRbGMaaNAgbDU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:dd:12:ef:cc:3c:cf:37:8a:66:40:43:30:b6:b1:d9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca994929166bbd744165fb64f48c35f9b4436a77
Validity
Not Before: Dec 19 04:00:25 2024 GMT
Not After : Dec 20 04:00:25 2024 GMT
Subject: CN=02a1ca365bc7d9ab112baf7edd462e61c94d797c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5f:5b:b9:26:60:d6:69:c7:f4:22:32:63:7b:
76:0b:7b:50:08:7b:62:2a:39:ec:58:56:39:96:32:
82:94:8c:7c:6f:54:36:e6:0c:01:3d:62:09:24:89:
6f:be:31:28:b5:7c:64:df:02:aa:da:f9:7a:1c:a4:
50:77:56:0e:34:b8:29:44:77:06:83:8d:91:a4:af:
3c:b0:de:e7:4a:6a:95:dd:32:41:15:3d:8a:a8:cf:
24:c7:0a:20:08:cf:8d:29:1e:69:c3:d0:c6:26:fb:
f4:be:a1:27:85:37:2b:88:22:08:0a:2e:af:50:8c:
29:89:95:fe:ce:9a:a9:f0:d7:a4:5b:93:7d:20:a2:
bc:4e:5f:f0:78:9e:b2:d1:9c:ff:05:fa:db:b2:68:
b9:67:12:45:c3:83:d2:3e:ef:e1:5b:e6:ce:32:d8:
df:14:c4:91:e7:14:c1:11:59:e4:03:0c:85:a7:96:
e6:5c:a3:6d:c5:52:7e:39:13:52:18:91:bc:6b:47:
8a:50:77:e4:f2:62:7e:b3:19:9c:07:f3:7d:3f:b7:
19:d2:6f:23:90:81:05:51:de:5c:fb:9d:db:9f:52:
de:74:7e:62:84:80:d9:20:5b:92:5a:14:98:98:7a:
e0:bf:1f:4d:8e:ef:5d:04:6a:81:9d:0b:bb:76:0f:
cf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A1:CA:36:5B:C7:D9:AB:11:2B:AF:7E:DD:46:2E:61:C9:4D:79:7C
X509v3 Authority Key Identifier:
keyid:CA:99:49:29:16:6B:BD:74:41:65:FB:64:F4:8C:35:F9:B4:43:6A:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yplJKRZrvXRBZftk9Iw1-bRDanc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f264e0-c8a5-41d5-9cd1-7f355d40c4e7/1/yplJKRZrvXRBZftk9Iw1-bRDanc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f264e0-c8a5-41d5-9cd1-7f355d40c4e7/1/yplJKRZrvXRBZftk9Iw1-bRDanc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:83:75:6c:fe:74:20:56:0b:81:d2:f1:51:6c:9c:ec:e6:77:
68:e6:43:22:57:93:a3:4d:71:23:8b:d4:c4:17:a0:c3:55:be:
f6:6b:95:26:d0:bc:e9:fa:20:b0:41:6b:5d:85:90:5e:29:78:
1a:85:3d:30:c6:a9:35:16:72:f9:29:bd:83:18:b0:c9:51:d8:
c1:47:9c:87:59:67:c9:d3:37:84:f5:5a:28:ee:fc:8c:e2:17:
7e:7b:e5:26:42:2b:cb:c4:f0:d4:57:b5:62:0e:92:b3:e4:ca:
52:18:ed:05:b7:27:47:6e:9f:2d:16:46:bf:54:b9:1f:bb:55:
d2:b5:31:2c:87:36:17:85:7d:9f:73:6f:f3:b1:bc:dd:3a:70:
f4:66:94:3a:fe:2e:d4:41:35:5a:c3:33:56:00:56:d9:1f:62:
b1:a9:67:e7:d0:70:5d:cd:b9:04:54:49:15:63:cd:c6:66:88:
01:be:74:f4:49:c5:08:9e:4d:b3:d3:fc:c5:38:22:ce:a0:9e:
f9:e2:73:cb:61:59:6a:bd:89:06:86:50:47:e5:da:54:85:5f:
14:1f:33:91:78:d5:51:3f:62:fc:82:eb:c9:fe:9f:e9:06:3e:
e6:b0:9b:00:b9:24:9f:53:b0:37:b8:d5:54:df:3a:2c:a9:d1:
56:d7:f4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:09:18 2025 by rpki-client