Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
File: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft (raw, json)
Hash identifier: 7PBwFk6xTDJsGWm0ApG/ueTmGeyRKvYLXfnpvGnwfQ4=
Subject key identifier: 78:04:63:F7:05:EA:53:A4:BD:6D:BE:A9:1C:E2:0A:E5:15:B1:8F:E2
Authority key identifier: CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34
Certificate issuer: /CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
Certificate serial: 0194BC72C029EB6C304DA26D3A19972377B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
Manifest number: 018A
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: q46mhqb037SisDm5N4bZ1WyfVUE.roa (hash: xXhXgV0190R3J9YqFfSirVPaavfzMb4jIss+4mc25j8=)
2: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl (hash: dy+G/dpL2+oy5PaS8JJN4xau/lZWVPSEZK1ALX6QhFs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c0:29:eb:6c:30:4d:a2:6d:3a:19:97:23:77:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=780463f705ea53a4bd6dbea91ce20ae515b18fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:41:fd:ca:ff:0f:fd:dc:81:18:be:c4:6c:be:
e5:b0:36:4d:99:6b:45:82:1c:e5:8c:ed:7f:e1:b1:
82:3e:f8:bd:a2:00:f8:85:63:18:34:4c:38:7d:44:
e7:b2:c6:b6:b4:3a:a9:06:99:77:ca:8d:ea:35:d3:
71:cc:1f:94:38:f3:50:24:d1:54:54:1b:7c:2b:f2:
ec:77:66:9d:03:2c:2f:cd:3d:b0:d0:b7:25:89:aa:
f7:c9:10:7a:07:a7:d3:76:83:d8:9d:d2:a0:a9:bc:
1c:e3:2d:d1:62:0b:c1:57:2f:62:d1:bd:a3:e6:da:
cf:ad:d6:ee:8b:e3:78:df:dc:05:c6:fc:8c:01:56:
ad:d8:40:46:df:81:1e:39:d7:57:4a:35:ce:a1:45:
c9:f6:f0:ef:e4:99:68:97:ff:aa:ef:08:87:e2:a0:
80:80:b8:93:4e:9b:3f:ef:97:fb:78:b4:23:ab:23:
4b:db:b2:df:30:a1:15:e5:f4:49:97:09:ab:7d:cf:
b7:ad:c3:ae:49:54:12:89:54:38:93:0e:e1:be:39:
c6:ae:b9:d2:e9:44:26:9d:d5:1c:5c:79:2d:91:42:
d4:e3:42:e0:53:79:a1:a5:8a:f6:8d:53:dc:b7:b5:
00:7c:4b:bc:00:35:2a:43:71:b0:46:92:25:f1:2b:
b3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:04:63:F7:05:EA:53:A4:BD:6D:BE:A9:1C:E2:0A:E5:15:B1:8F:E2
X509v3 Authority Key Identifier:
keyid:CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:54:0a:8c:10:66:77:d0:f3:a8:90:87:c4:91:d5:03:68:20:
b1:ad:b5:c3:b7:0e:54:26:48:76:0e:46:b7:e5:a1:09:43:fa:
0e:c2:12:eb:f0:df:a1:28:6b:f2:e6:47:d6:cc:d7:5f:21:cf:
03:41:d0:f7:e2:db:9b:46:4e:2e:45:e2:48:48:2e:a3:7e:cd:
75:42:38:22:03:d8:7a:9f:bf:ab:4b:4f:93:df:e6:53:e3:33:
d3:2d:a4:62:c7:88:e0:13:8a:15:c5:58:64:3a:8b:d7:32:30:
bd:5f:a3:a2:76:5b:6e:fd:05:bb:66:6e:94:3e:dc:90:72:88:
bc:fa:90:ed:80:65:ce:78:af:c5:3c:e8:ee:c9:6d:0c:3a:e1:
69:5e:0c:84:38:86:60:1e:29:d5:69:e6:30:b7:ba:6f:8b:81:
ea:fe:81:ef:15:3f:bb:25:b7:bb:72:91:cf:96:93:de:d3:44:
d0:48:e1:8d:1a:7c:8f:8d:30:ec:77:24:23:c0:99:9e:c5:3d:
8d:5a:1e:11:af:af:2a:f4:1a:2c:87:05:00:79:5c:8f:1e:32:
7e:99:af:55:8a:0e:fa:8d:bb:47:62:6d:ae:f8:b8:ee:20:8b:
c3:2a:54:6b:f9:00:2c:cd:03:2c:1a:a4:af:25:b0:dc:9b:6a:
f6:30:99:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:53:09 2025 by rpki-client