Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft
File: y34FPHGZWsyb8TM_55w9W_1ulk4.mft (raw, json)
Hash identifier: GU/LsfZKgeVoCzU9zTwMC5KvsxkXRRLpSecu8sD8j/Q=
Subject key identifier: D5:43:26:58:4C:61:B7:EE:99:C3:D1:79:E3:D8:9F:1B:87:A3:5B:2F
Authority key identifier: CB:7E:05:3C:71:99:5A:CC:9B:F1:33:3F:E7:9C:3D:5B:FD:6E:96:4E
Certificate issuer: /CN=cb7e053c71995acc9bf1333fe79c3d5bfd6e964e
Certificate serial: 0194BD179FCA0788BBC1A097303D6CA5CDF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft
Manifest number: 0A99
Signing time: Fri 31 Jan 2025 16:00:29 +0000
Manifest this update: Fri 31 Jan 2025 16:00:29 +0000
Manifest next update: Sat 01 Feb 2025 16:00:29 +0000
Files and hashes: 1: OY3T_xG0jFJ_6yc5NmhmVJsNZOM.roa (hash: af8mlEBnTxkbr73XYFoiiYy6suBahBU1dHobCDHfy/U=)
2: y34FPHGZWsyb8TM_55w9W_1ulk4.crl (hash: JovQzKzU7zOqLty24Krc9BftzPWeJf82UrRpiPccW4s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9f:ca:07:88:bb:c1:a0:97:30:3d:6c:a5:cd:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb7e053c71995acc9bf1333fe79c3d5bfd6e964e
Validity
Not Before: Jan 31 16:00:29 2025 GMT
Not After : Feb 1 16:00:29 2025 GMT
Subject: CN=d54326584c61b7ee99c3d179e3d89f1b87a35b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:92:e4:25:ed:96:1e:2e:89:c7:43:a5:83:ce:
ba:95:af:c8:0f:9e:06:8f:2b:b7:0d:6a:12:6a:30:
c4:a6:55:a8:7f:a6:10:a7:86:c1:b6:31:cc:22:7a:
40:c9:bb:14:94:fc:a4:5b:0b:3e:48:1e:36:fd:e6:
07:9b:7f:f6:06:7e:36:58:19:43:f2:0a:b5:21:7a:
d1:3a:5a:b3:77:97:65:83:cc:64:aa:6c:f0:3d:70:
df:ed:e1:8c:79:a2:89:da:62:5b:c0:6e:33:0e:10:
86:c4:03:dd:4b:28:3d:76:5e:3f:2f:bf:53:cb:7d:
e1:79:aa:bb:4a:4b:94:2a:ce:98:1f:e2:76:1b:98:
11:e0:55:63:d7:da:30:8a:e7:28:8f:ef:b8:81:61:
f8:b3:41:ab:64:50:2b:44:5c:56:67:fe:0d:af:2a:
dc:86:71:b1:30:3a:d7:47:18:2a:22:6f:2e:b3:9c:
52:1d:2e:9a:d1:e8:c6:0c:04:95:5d:b5:fa:e4:f6:
3a:d1:b2:91:2c:b2:ce:b6:80:ca:3f:a4:5e:e6:c8:
59:5e:a0:67:ea:53:26:cd:0d:c2:4c:a5:79:5e:03:
8e:07:3e:4f:99:d2:6d:4c:17:ec:c6:10:62:f6:fd:
c7:db:c6:5d:92:cd:7e:9b:a4:16:09:95:86:11:fc:
32:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:43:26:58:4C:61:B7:EE:99:C3:D1:79:E3:D8:9F:1B:87:A3:5B:2F
X509v3 Authority Key Identifier:
keyid:CB:7E:05:3C:71:99:5A:CC:9B:F1:33:3F:E7:9C:3D:5B:FD:6E:96:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:19:4a:33:43:67:a4:3c:90:bc:bc:d1:3b:9b:7f:b3:9b:5e:
d0:35:33:7a:d0:57:65:ce:8b:a2:5e:4d:69:39:ae:ec:dc:d3:
65:d4:61:bb:e4:98:ef:ca:a6:9a:79:46:a7:b5:15:a7:82:7d:
53:72:77:b9:3b:ba:e7:1c:a5:45:a4:58:1b:4d:9f:fc:95:e0:
9e:b9:52:f2:33:1b:1c:66:c0:26:4f:cf:4e:ee:1d:fe:3d:2c:
43:19:eb:6c:06:08:9d:2f:2f:3b:8b:03:99:72:e4:c2:5c:e7:
6f:9e:38:b3:a4:01:e9:f2:a6:dd:48:05:ce:7f:d2:11:ff:65:
28:f9:3d:33:67:29:81:63:65:a6:77:3c:8e:d6:19:80:5e:ae:
7f:31:56:76:b7:43:52:94:66:37:9e:cb:82:55:54:be:db:8f:
18:c6:e1:c7:90:6c:3d:ba:8c:e5:85:cf:8e:1d:1d:64:4b:f8:
f7:5e:6f:bb:ed:68:3f:bc:5c:b4:5f:66:d3:ac:07:a3:57:62:
3a:18:bf:5c:6b:b4:f3:81:96:fd:d0:5b:ef:b6:f8:fd:4e:f5:
22:53:f4:ee:f0:03:d1:ba:76:93:39:62:f5:c2:d7:85:25:62:
6d:10:e7:95:c2:77:ef:09:47:16:23:80:d3:2e:80:8e:70:19:
f2:32:7c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:27 2025 by rpki-client