Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f264e0-c8a5-41d5-9cd1-7f355d40c4e7/1/yplJKRZrvXRBZftk9Iw1-bRDanc.mft
File: yplJKRZrvXRBZftk9Iw1-bRDanc.mft (raw, json)
Hash identifier: czG6fF3QlOEJ3T44LOgYgTx3KQYik2Ib4rfDFitImtw=
Subject key identifier: 22:1E:2B:C4:6F:3A:41:F6:D9:58:87:94:2E:DF:F5:A8:80:22:72:B8
Authority key identifier: CA:99:49:29:16:6B:BD:74:41:65:FB:64:F4:8C:35:F9:B4:43:6A:77
Certificate issuer: /CN=ca994929166bbd744165fb64f48c35f9b4436a77
Certificate serial: 0193DF014BE3F4049927F406B29C0E4514B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yplJKRZrvXRBZftk9Iw1-bRDanc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f264e0-c8a5-41d5-9cd1-7f355d40c4e7/1/yplJKRZrvXRBZftk9Iw1-bRDanc.mft
Manifest number: 0EFB
Signing time: Thu 19 Dec 2024 13:00:24 +0000
Manifest this update: Thu 19 Dec 2024 13:00:24 +0000
Manifest next update: Fri 20 Dec 2024 13:00:24 +0000
Files and hashes: 1: Dh4nvoZ7csFVaLY4VR-zktPx1_A.roa (hash: 4dG9zaKaxiw4+oaN+ILmhCjupeFAr1W+JKV7ay5HWAs=)
2: yplJKRZrvXRBZftk9Iw1-bRDanc.crl (hash: 17NUoUXDwf5R21coFNeUWja8Ffq9ssOWk8fguG5uFIY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:df:01:4b:e3:f4:04:99:27:f4:06:b2:9c:0e:45:14:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca994929166bbd744165fb64f48c35f9b4436a77
Validity
Not Before: Dec 19 13:00:24 2024 GMT
Not After : Dec 20 13:00:24 2024 GMT
Subject: CN=221e2bc46f3a41f6d95887942edff5a8802272b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:45:d1:d9:e8:b4:59:97:92:ea:33:c5:f9:3d:
14:6b:e4:46:e4:7f:ff:47:41:d0:f5:27:7f:39:29:
bd:9d:59:97:60:fe:e4:21:83:8a:28:67:52:26:d4:
79:66:3f:a9:71:da:0b:35:42:7d:36:70:52:e2:92:
ed:68:e7:5b:41:51:47:63:a6:18:97:be:ba:7b:88:
5e:a6:9d:ab:19:39:f9:a4:55:e6:aa:8f:0f:fe:57:
f3:57:36:3d:44:1f:db:66:04:bb:01:be:b8:d7:4a:
a9:b2:27:3f:a8:b7:a3:a8:ae:14:cf:30:ee:96:80:
5a:05:dd:a7:19:3f:a9:69:6e:39:3a:37:33:3a:3d:
82:b7:55:6d:73:58:e8:5a:98:f7:30:dc:2c:b5:87:
93:e8:22:bf:c0:41:6c:bb:5c:53:cc:6b:bf:75:93:
68:38:43:20:9b:92:d9:52:b1:07:e6:8e:c9:0f:3a:
cd:d7:c0:d9:5f:fd:e9:10:2f:ec:8c:a5:ad:41:19:
00:d2:b6:13:b1:b9:1b:7c:46:ac:1f:96:c9:31:55:
64:70:27:3d:92:e2:b3:2a:f1:a2:7e:18:5f:47:a7:
bc:5b:3f:7e:7f:aa:53:a5:1b:7a:c9:4a:23:af:e1:
c7:f8:ed:4c:09:ba:87:61:8a:2d:97:eb:b6:ab:4f:
ae:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1E:2B:C4:6F:3A:41:F6:D9:58:87:94:2E:DF:F5:A8:80:22:72:B8
X509v3 Authority Key Identifier:
keyid:CA:99:49:29:16:6B:BD:74:41:65:FB:64:F4:8C:35:F9:B4:43:6A:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yplJKRZrvXRBZftk9Iw1-bRDanc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f264e0-c8a5-41d5-9cd1-7f355d40c4e7/1/yplJKRZrvXRBZftk9Iw1-bRDanc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f264e0-c8a5-41d5-9cd1-7f355d40c4e7/1/yplJKRZrvXRBZftk9Iw1-bRDanc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:28:70:8f:53:5f:01:8d:4a:74:15:99:79:a7:ac:7c:e3:cc:
dd:13:fa:86:89:cd:38:54:2d:5b:83:5a:43:cc:73:46:77:ad:
6a:bd:7e:96:3c:bb:a7:f5:bf:c2:19:50:f4:f4:a6:f1:7e:c9:
ac:15:e0:13:47:21:6d:6a:ff:69:41:2d:e6:70:ec:7e:82:7a:
7e:9b:9c:d4:5c:b1:c9:ad:f6:c8:fa:dc:a2:b3:e0:77:a4:0f:
fa:c4:14:0b:85:b2:20:24:62:01:27:62:78:f2:d5:94:4c:dc:
24:9c:5e:39:15:6d:bc:b8:12:c7:e3:a9:f6:dc:41:18:5a:cb:
3e:a3:44:01:0e:ae:43:da:63:8f:2b:ac:eb:41:ec:5d:19:66:
9c:cd:85:8d:30:88:81:b3:9c:af:ed:18:21:ac:5a:f3:79:00:
9b:e1:04:5e:9d:7a:30:89:9a:0e:8e:ef:41:4b:77:b3:42:51:
19:4c:b7:d0:f2:6d:5c:f5:c0:5e:15:60:f8:01:22:15:d6:5a:
b7:da:53:be:fc:d5:53:84:11:ac:45:a1:1b:06:ff:f0:86:08:
33:4a:bc:a8:50:02:ff:9a:49:ec:4c:f0:ff:31:22:92:89:2f:
61:a7:ff:5a:d7:e0:ee:9e:18:7d:f2:fb:be:b1:eb:1c:42:c6:
d9:56:b6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:09:06 2025 by rpki-client