Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
File: y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft (raw, json)
Hash identifier: BAz1VjDKLEwdzvo4hFXo33QZg/sb0laHmbkSVoDY19k=
Subject key identifier: 32:CB:E6:C1:2D:7C:3C:1B:05:22:61:18:02:15:FE:19:10:19:33:34
Authority key identifier: CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
Certificate issuer: /CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Certificate serial: 0194BD854E2CA2B86B2D3B1BEC9CD2CFECA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: 7T8vel-RvUDAb6LdSmoGnY1MBEg.roa (hash: Bv42HU9ZNI49CjZAPUApOp/bLDu91m+dP9rH1Q/6aaU=)
2: y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl (hash: z3GYNuLkwKbinjwMCMd80Tl1OELnKuE0pih/HwoSmgQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4e:2c:a2:b8:6b:2d:3b:1b:ec:9c:d2:cf:ec:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=32cbe6c12d7c3c1b052261180215fe1910193334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f2:05:9b:1d:84:b9:0d:be:ea:26:f9:29:94:
2c:49:28:49:97:1e:78:bb:2f:9c:15:54:9c:90:27:
73:0e:38:40:fc:54:12:87:7e:e6:92:ab:9c:74:be:
66:88:66:43:71:66:b9:80:bd:27:c7:57:56:f5:f0:
0d:e5:08:38:72:37:a6:0e:0e:f9:4a:c5:c2:35:83:
fe:78:03:b3:3b:6d:8f:a9:fb:fc:82:0d:d7:48:13:
7d:68:37:31:26:15:ac:7b:d8:47:b7:72:80:7e:ba:
a5:b2:8f:e4:2c:63:3a:cb:c5:ab:db:02:af:8f:4a:
b3:3b:f6:3f:59:5e:43:ff:01:9f:25:63:40:0e:38:
61:38:66:90:33:ec:5f:ef:90:38:dd:ac:7f:71:e0:
b8:35:49:b0:34:f9:08:23:c9:e5:82:5a:eb:c4:b2:
d7:14:f7:1d:02:e2:d6:ed:56:e5:59:1f:24:6e:0e:
21:34:1c:70:1a:ea:ff:50:a0:66:ff:4f:90:7a:6c:
75:df:1e:3a:03:ee:13:28:bb:63:4a:4a:0f:20:3f:
83:7a:58:fb:25:55:c9:5d:f7:e0:4b:8d:d5:06:50:
d8:7d:82:34:f6:a1:20:82:1f:4d:30:d3:f5:d8:89:
9a:45:39:c5:77:99:f5:b2:23:e7:99:77:54:23:65:
69:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CB:E6:C1:2D:7C:3C:1B:05:22:61:18:02:15:FE:19:10:19:33:34
X509v3 Authority Key Identifier:
keyid:CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:57:41:2c:6f:0c:53:b2:25:a2:1c:28:ee:69:14:55:8c:7c:
ac:bf:b9:4c:7f:38:a7:13:31:78:89:06:25:7c:81:82:3d:00:
9e:f0:9b:b7:b3:22:d5:38:84:ed:a8:df:c5:b9:c2:dd:a0:41:
eb:8d:6a:64:bc:3f:a0:f2:dd:dc:0b:16:0c:9c:e8:6f:69:7d:
d3:05:b4:95:c1:6c:a4:90:ed:df:06:b0:dc:ea:22:1d:08:51:
c8:c1:6f:0f:fb:46:b7:b7:64:b5:d0:64:c1:bd:e0:7b:75:05:
13:2b:d3:08:34:2e:0d:c8:eb:56:4b:67:f0:53:17:dd:8d:01:
60:c1:b6:b5:35:7a:63:09:01:3b:62:bd:87:a3:66:91:5f:8c:
9d:15:c4:b5:7a:b2:91:a1:55:9b:39:38:e2:64:3c:a5:b7:2b:
13:14:70:d2:c1:64:72:18:46:ae:95:8c:20:78:93:13:42:fd:
64:f3:5e:2e:25:d2:e5:6c:95:cb:0b:fd:e3:dc:a0:7f:96:62:
bc:86:3f:d7:86:1d:bd:df:38:5c:8c:45:c1:32:61:de:5f:a7:
77:f0:fa:c4:96:5b:42:28:8a:7c:31:fa:43:a0:80:f8:5b:2b:
5c:77:9c:1f:c6:70:98:9d:84:10:dc:5d:13:3d:37:3c:e6:a6:
2f:94:0f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:03 2025 by rpki-client