Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/yvRJQqKfrGEs1E-DrTF6HA9bjuo.mft
File: yvRJQqKfrGEs1E-DrTF6HA9bjuo.mft (raw, json)
Hash identifier: ZcXgDVCzkg4xogHP2CmmzA7z8EKJe5jIJdRG3A2+emE=
Subject key identifier: DE:D6:65:10:47:0D:C7:E5:69:0C:FA:EC:60:B5:83:31:15:05:2F:D2
Authority key identifier: CA:F4:49:42:A2:9F:AC:61:2C:D4:4F:83:AD:31:7A:1C:0F:5B:8E:EA
Certificate issuer: /CN=caf44942a29fac612cd44f83ad317a1c0f5b8eea
Certificate serial: 019583CA75F1BFD3D70F207654F9C0422E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvRJQqKfrGEs1E-DrTF6HA9bjuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/yvRJQqKfrGEs1E-DrTF6HA9bjuo.mft
Manifest number: 07DC
Signing time: Tue 11 Mar 2025 06:00:38 +0000
Manifest this update: Tue 11 Mar 2025 06:00:38 +0000
Manifest next update: Wed 12 Mar 2025 06:00:38 +0000
Files and hashes: 1: kubkTN8FMP9d-Mo63ocBIKQM-Lc.roa (hash: keKknVV6p3wikzpiPvb9HlIVLJ5zBFrwVTTK+JW8U4o=)
2: yvRJQqKfrGEs1E-DrTF6HA9bjuo.crl (hash: uy+7ThKx18F08DZoD8AnPDGstrZv+1W36+rex4nYQqE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:83:ca:75:f1:bf:d3:d7:0f:20:76:54:f9:c0:42:2e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf44942a29fac612cd44f83ad317a1c0f5b8eea
Validity
Not Before: Mar 11 06:00:38 2025 GMT
Not After : Mar 12 06:00:38 2025 GMT
Subject: CN=ded66510470dc7e5690cfaec60b5833115052fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:09:9a:c9:ac:64:ea:e5:cb:22:c9:52:d6:58:
8c:d3:db:8c:9c:86:e1:41:f2:e0:55:7d:2f:71:69:
e3:80:fc:00:7e:24:21:a7:bc:71:da:49:43:4a:73:
54:bd:a6:cc:e6:3b:22:4e:66:bb:7c:30:f7:cc:de:
49:98:90:c8:65:17:d1:5f:f9:92:9c:34:71:1a:7f:
2f:0c:76:e3:6f:8a:ff:62:90:91:37:db:9a:db:be:
d2:f4:3f:d2:7f:10:c4:8c:17:da:fb:0b:fb:5d:2a:
1c:35:58:20:3b:6d:7a:9a:90:bc:d7:dc:d0:ce:17:
ee:d6:43:a9:77:19:3e:c6:b0:9d:fd:1c:4f:72:05:
00:9d:38:59:18:5c:ec:50:8c:b4:d8:13:e5:95:d0:
7a:32:60:ba:ac:91:2a:82:c4:ce:bf:ad:2f:a2:2b:
c9:27:1b:f3:53:dc:9b:40:bb:be:24:6e:5a:5f:f7:
0f:66:a2:84:ea:04:2b:e4:c3:12:04:01:37:cc:a4:
57:a7:50:b3:d6:30:a6:53:b4:b4:1a:b1:ab:32:29:
06:37:27:a0:97:83:3c:e1:cb:6d:ed:3a:39:75:6a:
68:c8:17:12:c2:78:8e:70:6e:30:ab:ae:13:32:23:
98:ba:45:87:2d:5f:28:e9:43:7a:ef:3e:f4:61:30:
6c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D6:65:10:47:0D:C7:E5:69:0C:FA:EC:60:B5:83:31:15:05:2F:D2
X509v3 Authority Key Identifier:
keyid:CA:F4:49:42:A2:9F:AC:61:2C:D4:4F:83:AD:31:7A:1C:0F:5B:8E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvRJQqKfrGEs1E-DrTF6HA9bjuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/yvRJQqKfrGEs1E-DrTF6HA9bjuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/yvRJQqKfrGEs1E-DrTF6HA9bjuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:10:a2:92:d6:db:fb:48:94:7e:81:06:d6:7e:3f:17:b4:34:
f6:fe:eb:1e:d7:64:29:cc:d4:72:ce:3d:7b:50:e4:d4:f1:0f:
70:b3:a6:7b:cd:43:2f:d9:8b:ff:9a:29:e4:c3:88:c7:17:95:
3c:8b:76:fa:ca:22:a0:3d:d6:18:d5:31:25:0d:1a:37:21:de:
ea:56:d1:77:96:bb:aa:6a:5f:5d:c0:8a:71:14:de:2a:d4:2d:
29:2e:d8:12:9e:29:f7:d3:11:66:4b:a0:18:2d:2b:ad:3a:e1:
31:92:aa:fb:a7:82:52:62:f6:fd:88:4f:2e:9c:49:e0:9d:d7:
12:91:03:1c:76:61:48:08:55:32:ec:45:05:1c:db:e9:db:37:
07:1a:0f:2b:84:04:4c:28:10:36:01:55:16:f8:26:ba:e5:93:
d2:9b:50:33:0d:35:85:ee:4d:44:7c:e6:e0:7e:91:7b:22:18:
13:cb:f2:c2:b1:17:f6:d3:73:46:c4:33:33:cc:dd:88:be:1b:
56:31:40:8b:e6:65:ec:97:88:41:00:c9:ac:24:07:60:8d:bf:
79:54:0e:57:0c:32:ab:65:95:7a:79:3e:64:65:29:31:e3:96:
20:3b:60:2e:30:49:47:a8:23:dc:fc:db:7b:4d:ef:d2:fc:80:
d2:31:df:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:17:38 2025 by rpki-client