Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier: R86+bZ+QC36uRJW+B4MxhYB8WVj7j8+3PHpE1JbaLD8=
Subject key identifier: 66:EB:9D:7C:3E:0D:89:C7:FB:FD:3C:05:AB:64:06:1B:44:9C:51:06
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 0194BC0505CDBA4EDAB7ECFEFD419FFA6817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number: 0303
Signing time: Fri 31 Jan 2025 11:00:32 +0000
Manifest this update: Fri 31 Jan 2025 11:00:32 +0000
Manifest next update: Sat 01 Feb 2025 11:00:32 +0000
Files and hashes: 1: GtwJZcMJzJfVot1AbvXcNrWZuUA.roa (hash: ntPN44ZmmFojLPzowglrHCEuS924DT/SbCX/IExl0bg=)
2: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: H5GMqYVITrjLyGO2Vbqsn3OYA+xF/aqLWEdeKZkrvVM=)
3: v9BFv3-TNowegyiv09vLFLV5UTQ.roa (hash: dKR68pnVeUnoZwpMGIMPLXESwr/B50jGdFPF9i1PucA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:05:cd:ba:4e:da:b7:ec:fe:fd:41:9f:fa:68:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: Jan 31 11:00:32 2025 GMT
Not After : Feb 1 11:00:32 2025 GMT
Subject: CN=66eb9d7c3e0d89c7fbfd3c05ab64061b449c5106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a9:c0:56:a3:13:e2:6d:64:50:34:a4:15:00:
2f:86:88:da:e0:9d:61:3e:c5:72:cf:07:bb:b5:55:
3e:a7:71:68:14:0d:17:50:ba:50:1e:b5:fc:ed:74:
37:d5:bd:e6:00:7c:00:86:2d:7a:df:02:51:c1:06:
25:bf:ce:99:0d:83:7b:dc:d5:ee:d3:ff:10:9e:8c:
08:d2:ee:a2:18:a9:24:79:05:32:30:a5:42:cf:5a:
46:c5:6a:c1:55:ae:c5:56:17:e5:99:4d:2d:57:65:
90:24:84:7a:72:ae:cf:68:29:b1:03:1b:ce:92:2a:
57:e0:a3:ea:d7:05:df:7e:f8:3a:46:00:57:b0:47:
7e:31:86:0f:40:41:15:e6:2f:c8:4f:37:29:fa:82:
3b:50:a5:2b:95:ed:23:22:b8:4e:56:2c:6b:b0:90:
a7:e7:13:15:39:5c:8c:d5:7d:37:1b:54:54:6e:fc:
bc:b5:a3:79:b5:06:75:3b:47:26:32:2e:ce:74:31:
89:d3:26:6b:05:0c:6d:81:59:b1:e3:6b:51:26:37:
83:4d:f1:23:06:ad:ec:4a:a6:d9:31:63:12:8e:38:
50:c2:21:58:8a:cb:3c:6a:89:6e:32:01:48:f3:7a:
52:77:bf:1f:8a:bf:4e:03:8b:0c:1d:11:4d:bd:dd:
da:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EB:9D:7C:3E:0D:89:C7:FB:FD:3C:05:AB:64:06:1B:44:9C:51:06
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c8:e4:3d:e6:9b:42:4b:85:f8:d4:08:2e:d3:6e:97:b5:d5:
29:7c:04:b5:a0:95:5b:25:79:12:e2:4a:12:c2:45:fb:6f:20:
3b:8a:5e:a0:c5:d0:2a:50:a5:f4:b2:8b:39:8b:49:67:1d:3c:
b8:7e:20:3c:f0:f1:fa:c8:c0:07:eb:d4:37:33:0b:f4:8a:09:
ac:53:d8:9b:19:33:7e:a8:86:d6:06:2e:ef:01:81:81:10:84:
29:6c:e5:d6:51:98:b0:03:81:b6:03:f1:f0:5b:33:d8:2c:97:
f1:a1:05:c5:b6:2f:b8:c2:9c:ee:6a:75:1f:4c:dd:c1:71:dc:
1b:2e:60:61:24:d6:d3:5b:b5:9f:fd:62:6f:eb:9e:c1:70:d4:
a2:1c:32:48:26:8f:75:07:96:9b:8c:84:2f:d9:16:60:a3:35:
8c:96:c9:df:00:b3:7d:d1:b9:ba:80:46:fc:0c:14:11:ed:d3:
8a:20:d9:27:ea:da:e1:d2:58:35:c3:d6:0b:a5:9e:1f:b1:c3:
dc:da:3f:f5:8e:5e:63:40:58:be:3d:b5:69:85:ef:40:6a:49:
d3:f5:52:b4:73:8c:3d:f6:4d:0f:94:b7:40:6d:a8:a6:9d:f1:
9a:e8:6d:ad:7b:3b:ab:5e:58:ef:d0:f6:5a:bc:01:01:bf:2a:
0e:4f:da:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:50:37 2025 by rpki-client