Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
File: y2bnZjRVc9cVnWeU7a7bc5okH48.mft (raw, json)
Hash identifier: /75dxDGdekztj2T37jBiFOazawVPz6cokGUsMRZtchw=
Subject key identifier: D7:31:D6:77:25:29:88:4A:22:73:FC:1D:E3:9F:3B:60:4A:56:3C:F9
Authority key identifier: CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
Certificate issuer: /CN=cb66e766345573d7159d6794edaedb739a241f8f
Certificate serial: 0194BD4E96AEB89FA5F461924BFAB380FEF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
Manifest number: 0479
Signing time: Fri 31 Jan 2025 17:00:31 +0000
Manifest this update: Fri 31 Jan 2025 17:00:31 +0000
Manifest next update: Sat 01 Feb 2025 17:00:31 +0000
Files and hashes: 1: GP-mcsPVfkxFR6BakAdLWMHzvnk.roa (hash: 46Gy5AnSQQR4RzlnLScg9/HmedHrQU8V47NDaOoaI7E=)
2: y2bnZjRVc9cVnWeU7a7bc5okH48.crl (hash: Ha6bqUdcfJ8c+HqIVZWL7XA82EfdlLpJ9MC+Ai8dkP8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:96:ae:b8:9f:a5:f4:61:92:4b:fa:b3:80:fe:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb66e766345573d7159d6794edaedb739a241f8f
Validity
Not Before: Jan 31 17:00:31 2025 GMT
Not After : Feb 1 17:00:31 2025 GMT
Subject: CN=d731d6772529884a2273fc1de39f3b604a563cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b0:17:0f:4f:f9:3c:69:5d:65:88:5a:c1:e4:
a5:c2:20:42:73:14:c9:66:1c:c6:69:b5:52:3f:4f:
be:cf:e8:bb:b1:cd:24:92:53:41:f5:8f:dc:3b:f4:
a8:ca:cd:6c:ff:b1:54:f4:46:f5:fe:ab:8c:23:5a:
b5:97:e5:30:d0:cd:14:70:13:42:bd:81:77:9e:53:
53:60:9b:53:b5:2c:4f:fd:1d:61:48:37:3a:b5:a4:
b4:77:b0:fe:fd:e6:c3:b2:3e:91:05:c6:7f:8d:5e:
67:67:e2:cf:fe:2c:9f:17:95:ea:cd:b2:cf:39:0c:
90:ae:59:a1:49:11:de:d0:17:3f:ba:c9:ba:0e:6d:
c2:8f:07:06:96:bc:72:26:93:ac:f4:22:08:e1:67:
91:32:52:b8:7b:1d:f4:f9:c7:c8:d1:cd:f6:c6:09:
56:e7:10:87:33:cb:c9:d1:3b:fa:37:07:ff:89:9d:
20:ec:72:e2:b3:9e:41:3f:81:5e:f3:2b:7c:45:f6:
34:30:1f:04:0d:97:1e:7e:d2:88:12:f2:50:26:1f:
05:ca:a7:56:6c:a6:a3:3d:c7:cc:63:d3:0c:14:49:
3c:f3:f5:cc:1d:d5:ca:46:52:f9:8c:01:39:df:7c:
ee:21:9a:f7:c9:96:69:b6:e2:b2:0a:ff:98:ef:ac:
59:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:31:D6:77:25:29:88:4A:22:73:FC:1D:E3:9F:3B:60:4A:56:3C:F9
X509v3 Authority Key Identifier:
keyid:CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:40:c3:d0:35:41:39:ef:44:a2:96:e3:41:1e:1e:34:2d:98:
9e:f5:2e:ae:b6:5a:07:50:0c:51:9f:94:96:bb:07:12:fa:82:
32:8c:f5:8c:79:e7:77:ba:de:be:ec:21:7b:1d:cb:d9:1d:2c:
4f:3f:3f:62:a4:17:00:3b:38:0c:e8:44:11:b2:b7:6a:d7:41:
6f:6e:78:6c:1a:f1:dd:10:d2:2e:01:81:76:9c:3e:2f:09:d9:
52:90:9e:92:65:a4:45:5b:fd:23:56:95:49:53:36:2b:3f:1a:
92:03:2b:2e:06:90:b1:4a:3b:5f:bd:61:1f:99:36:da:11:eb:
82:0e:f1:39:a7:b8:c5:fb:e5:d8:3a:d4:b1:d7:32:91:78:72:
b1:63:62:b4:77:3b:30:51:b9:a3:67:18:05:20:09:49:1f:87:
f8:b0:9e:24:94:1f:35:a4:a1:5a:fa:fa:75:a1:54:c4:c8:ef:
1d:37:64:e5:16:fe:cf:b9:34:40:db:8f:db:7a:ad:36:06:42:
aa:b6:c3:49:5c:f5:97:ac:c9:42:38:ba:5f:5e:37:98:47:aa:
77:1e:7a:fd:c6:25:93:96:5f:d0:33:5b:e3:26:10:db:3b:25:
00:25:b4:92:6e:44:97:b8:f3:02:be:0d:1a:c9:a4:e3:f0:a4:
db:de:0a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:31:57 2025 by rpki-client