Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/yGf0ZiTUgb6p0bqL6wwBicm0S14.mft
File: yGf0ZiTUgb6p0bqL6wwBicm0S14.mft (raw, json)
Hash identifier: ZsfWYuA5A1fHjbOCb8w5XH5gK+MlFC1ovUuSPrj48zI=
Subject key identifier: FD:25:A2:40:B7:DA:5F:5C:57:27:AA:93:E4:A8:28:D3:BF:97:FE:74
Authority key identifier: C8:67:F4:66:24:D4:81:BE:A9:D1:BA:8B:EB:0C:01:89:C9:B4:4B:5E
Certificate issuer: /CN=c867f46624d481bea9d1ba8beb0c0189c9b44b5e
Certificate serial: 019582B7BE2CC1D503645D8EB42EAFB8E789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGf0ZiTUgb6p0bqL6wwBicm0S14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/yGf0ZiTUgb6p0bqL6wwBicm0S14.mft
Manifest number: 07D7
Signing time: Tue 11 Mar 2025 01:00:34 +0000
Manifest this update: Tue 11 Mar 2025 01:00:34 +0000
Manifest next update: Wed 12 Mar 2025 01:00:34 +0000
Files and hashes: 1: 4lb8MH7GOJnctq74IYYrPz2MrXI.roa (hash: j6r/F3I87KdB4Ik/hzhNmN4mf0uzrhpeKqetEtToc9c=)
2: yGf0ZiTUgb6p0bqL6wwBicm0S14.crl (hash: RwbZH9FfSlc/oP11MOGzikSZxC6lYzB5tHtEqmctcYw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:82:b7:be:2c:c1:d5:03:64:5d:8e:b4:2e:af:b8:e7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c867f46624d481bea9d1ba8beb0c0189c9b44b5e
Validity
Not Before: Mar 11 01:00:34 2025 GMT
Not After : Mar 12 01:00:34 2025 GMT
Subject: CN=fd25a240b7da5f5c5727aa93e4a828d3bf97fe74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a9:6b:d5:28:c8:a7:16:09:04:d9:18:46:f2:
e2:48:83:76:74:93:42:ca:10:06:29:7e:aa:7a:e4:
a2:41:16:73:65:0a:40:1d:45:78:f0:10:00:84:18:
7c:0c:25:71:e9:73:d8:76:ab:ec:56:e1:12:f7:07:
a0:1a:56:ac:90:82:b3:59:52:0a:70:a0:8a:88:78:
b3:07:56:e5:f2:6c:f1:9b:b5:df:40:50:4d:93:07:
af:e1:4b:1c:e7:aa:0d:65:63:16:06:f0:65:54:5b:
03:ef:1c:3e:12:07:7f:f7:a3:a0:00:5c:58:7a:7b:
b2:ce:20:af:75:1b:64:fd:b4:7a:65:15:0a:59:43:
e8:f2:5e:bb:b9:ee:f5:f2:53:09:9d:a2:03:f8:4e:
e1:4f:fa:dc:5d:b6:70:5b:68:ab:1a:79:03:12:be:
1d:1a:a4:9f:c4:b5:eb:f5:97:e7:13:b7:0c:62:37:
66:58:d3:25:9d:90:2b:73:8b:5e:2a:64:66:6c:29:
9b:47:d3:d2:01:7d:91:35:7b:46:06:1a:b5:ec:40:
99:bc:e0:e1:f1:10:bc:c6:dd:88:4e:69:b8:12:19:
57:00:7d:0c:6d:0d:38:d5:33:b3:52:ec:42:7d:8e:
d8:4d:1d:89:73:63:83:f9:9b:e0:36:da:ab:d2:7a:
3c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:25:A2:40:B7:DA:5F:5C:57:27:AA:93:E4:A8:28:D3:BF:97:FE:74
X509v3 Authority Key Identifier:
keyid:C8:67:F4:66:24:D4:81:BE:A9:D1:BA:8B:EB:0C:01:89:C9:B4:4B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGf0ZiTUgb6p0bqL6wwBicm0S14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/yGf0ZiTUgb6p0bqL6wwBicm0S14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/yGf0ZiTUgb6p0bqL6wwBicm0S14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:af:ef:8b:b6:6b:e1:ac:86:fb:53:b9:f7:50:c6:42:2a:94:
77:ef:d8:77:5b:5f:15:1b:5a:c5:ec:f1:40:37:c3:d9:21:f8:
18:3c:73:3a:e8:8c:9c:3a:1e:df:d7:63:9a:d6:0b:0e:f0:95:
64:95:30:4c:99:75:83:5f:f9:c1:0a:bb:bf:c6:bd:ce:07:9d:
53:60:04:08:76:7a:27:92:50:e1:1a:2f:2e:6a:5f:0e:fb:47:
7a:a9:45:f9:f4:0f:c4:cb:ef:f0:69:b2:2c:dc:23:9f:53:d1:
ad:b0:ae:29:16:4f:98:99:d1:82:6c:44:02:ad:1a:34:8a:65:
a3:f4:52:1e:82:1f:2c:2b:d4:31:b4:f3:e8:04:d5:90:74:4c:
54:43:47:c9:e3:e1:42:75:74:cc:ad:08:9d:7f:8b:9d:d1:13:
b5:bb:7f:f1:88:ed:d0:41:c1:22:ad:04:c9:e9:50:dc:92:04:
41:8e:a8:39:84:84:d6:1f:35:ac:eb:57:85:c8:cc:25:a9:bb:
51:d5:c5:f8:7e:01:76:28:99:80:db:e2:66:62:15:2d:64:2b:
f2:7f:31:82:a0:ee:6e:36:c3:4e:10:fb:9c:5f:cb:fe:63:4a:
dc:f9:86:8f:bc:1d:0c:a8:a0:57:ca:ab:84:2a:bc:d4:c6:0c:
ab:75:0a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 18:57:39 2025 by rpki-client