Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/y78j_5hnaDYlSUYv4JLGMV6sykA.mft
File: y78j_5hnaDYlSUYv4JLGMV6sykA.mft (raw, json)
Hash identifier: 9f8Sz+EKdNHDPb/VLyl4cSji8ZhIijaLb4+ZiqX0e/g=
Subject key identifier: 77:00:2F:D1:B4:AD:34:9B:D3:91:20:55:15:41:6B:39:73:52:2C:5A
Authority key identifier: CB:BF:23:FF:98:67:68:36:25:49:46:2F:E0:92:C6:31:5E:AC:CA:40
Certificate issuer: /CN=cbbf23ff986768362549462fe092c6315eacca40
Certificate serial: 0194BD4EAFBDBD3A02783B4CF051B67D67E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y78j_5hnaDYlSUYv4JLGMV6sykA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/y78j_5hnaDYlSUYv4JLGMV6sykA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: a0gi81K4PU-mZZPSh82aNeLjsVI.roa (hash: Id1bqvDurbpWKdNvf29qBzclAu3m5HKcR5Kg3lRHGKE=)
2: y78j_5hnaDYlSUYv4JLGMV6sykA.crl (hash: IRJJpjt4J0vY2td/K9o+QIuovL5ePZcMxOsn74jNxgA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:af:bd:bd:3a:02:78:3b:4c:f0:51:b6:7d:67:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbbf23ff986768362549462fe092c6315eacca40
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=77002fd1b4ad349bd391205515416b3973522c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:12:f0:3b:7e:fa:d4:05:6f:8d:a3:24:7b:
41:8b:e3:83:06:0e:3d:2f:d3:9c:2e:36:82:b4:60:
07:a0:3e:b6:c8:d0:ac:c5:b8:8e:dc:dd:eb:2c:cc:
65:79:dc:24:85:74:b3:4b:f3:09:63:30:53:5f:c8:
73:10:f1:7d:9e:6e:44:07:c2:e8:24:c1:c3:94:81:
f5:9f:bf:98:f2:cb:56:88:fd:eb:c8:e6:fa:12:97:
19:6d:af:84:ca:6d:ac:e5:29:ee:bc:13:5a:52:cb:
86:ce:4e:26:70:5e:cb:77:fa:a0:df:bc:7f:c8:d8:
c2:ca:01:53:18:fc:9c:80:73:25:ad:35:3d:70:5e:
32:96:30:fb:73:4b:02:6f:bb:29:78:33:c8:15:e8:
8c:06:9a:14:13:a5:2d:d5:f9:bc:ad:2f:34:99:18:
e8:43:43:bc:f9:ff:62:be:12:82:11:0b:c3:b5:c0:
b9:28:12:aa:67:2b:6c:89:eb:cd:3a:4d:99:36:5e:
e3:37:2b:a3:4f:77:77:f3:1c:9b:1e:ef:88:fd:dd:
56:93:f9:3e:83:a4:df:58:69:cb:9a:3e:b7:67:14:
17:97:2c:e9:22:62:eb:1e:c3:a9:57:54:42:46:c1:
58:17:37:dc:12:6f:cd:b6:85:2d:8c:f0:a4:f3:97:
0e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:00:2F:D1:B4:AD:34:9B:D3:91:20:55:15:41:6B:39:73:52:2C:5A
X509v3 Authority Key Identifier:
keyid:CB:BF:23:FF:98:67:68:36:25:49:46:2F:E0:92:C6:31:5E:AC:CA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y78j_5hnaDYlSUYv4JLGMV6sykA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/y78j_5hnaDYlSUYv4JLGMV6sykA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/y78j_5hnaDYlSUYv4JLGMV6sykA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:14:b5:3c:3d:f7:a2:50:36:0b:bc:68:c7:8f:08:c0:f4:68:
bb:7c:0b:54:e9:17:09:77:cc:9e:dc:d4:7d:bd:05:48:a9:5c:
0b:ef:20:d1:d4:e0:2b:c4:0c:b5:01:0f:e1:8a:39:8b:26:0a:
41:84:b5:48:d6:0e:41:3a:29:52:ee:0d:fc:98:d3:0d:09:d8:
34:a0:8c:f7:87:20:0e:00:e4:44:44:7c:33:6b:69:b1:8f:f4:
26:39:4b:e8:fa:2d:63:3d:31:c8:67:c2:42:28:42:f6:e3:36:
e9:26:f2:3f:be:af:16:8b:b9:86:8e:7f:ea:d2:89:b3:23:2b:
f6:56:15:cd:a1:fd:a8:15:51:86:89:7c:be:db:c7:90:5a:76:
ef:3b:12:d8:22:77:3f:2a:63:ef:cf:49:78:a1:96:67:5a:0b:
28:5d:06:7b:58:9b:f3:3c:35:60:45:db:64:37:e4:98:4f:f9:
9a:54:d6:a4:da:d3:20:cf:27:65:21:ad:12:b4:be:e7:d3:bc:
68:03:46:1e:c7:6b:47:c5:91:f7:3f:03:ea:fa:ba:fb:98:b6:
37:c4:1e:33:4b:9e:94:c5:66:ae:cd:d4:92:e8:52:31:79:3f:
20:70:88:0a:8b:2c:81:fe:c1:b5:51:f2:58:81:4e:8b:a0:16:
de:1c:12:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:01:16 2025 by rpki-client