Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
File: y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft (raw, json)
Hash identifier: XAZcVjy9opw93Svq5CpAQ/JLJjlVRL6t0wga36OGVjs=
Subject key identifier: 0E:43:6C:F8:06:A2:3A:46:A2:BB:23:CE:AF:15:2F:92:A5:EF:DD:57
Authority key identifier: CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
Certificate issuer: /CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Certificate serial: 0194BC3BC6161C5C0E37911A547E48189748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: A7rB6GvieHic3egdiMZfNGfq2m0.roa (hash: HS3mNdYCRI3MKIsdLKnGS/MBr6fXeWlgGEcIpC1Xugc=)
2: y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl (hash: EbtfuQPZX7PwK3UfLaD7qaIT20pA1N5fn4kqftKgE/Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c6:16:1c:5c:0e:37:91:1a:54:7e:48:18:97:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=0e436cf806a23a46a2bb23ceaf152f92a5efdd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:55:42:dc:37:44:21:f0:34:7e:6a:2d:ee:
de:d3:d8:3d:5f:b4:aa:c9:de:40:54:77:f0:72:ef:
71:7b:66:10:5e:02:f9:41:e6:bc:ee:28:f7:2e:d7:
43:0a:8d:f8:83:f5:45:82:8e:58:ae:7f:bc:5e:9b:
40:2e:b9:b7:a7:70:42:83:28:97:33:52:75:14:cc:
66:10:a6:2c:16:a6:a0:ce:91:d6:52:f5:68:19:a7:
ce:07:48:8a:49:49:ed:90:50:1a:72:16:43:00:b2:
93:aa:0c:d3:a6:a6:dc:fd:f4:ad:90:c6:f1:3c:da:
7e:29:2e:28:f6:f1:07:d4:7c:a7:00:1d:e2:02:c9:
e8:8b:02:9c:80:99:41:c4:29:d3:79:94:52:dd:b9:
bb:a0:b4:36:39:a2:b0:24:b0:f1:b3:f1:0c:5a:dc:
e1:b5:40:1a:6c:05:84:68:23:72:dd:b8:01:e6:ac:
95:e7:b8:3a:dc:e8:47:4d:73:b0:d1:b8:70:a1:65:
59:93:a4:ee:35:f4:83:e6:40:7b:9c:a8:96:9f:9d:
77:0e:45:89:65:ef:75:69:b7:d1:7a:e1:0e:49:6c:
d9:dc:2f:5d:0d:b5:fc:b1:7b:25:f3:cd:f2:3b:1d:
62:25:ee:76:39:a0:02:2b:7c:24:6e:e2:5d:66:4c:
f9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:43:6C:F8:06:A2:3A:46:A2:BB:23:CE:AF:15:2F:92:A5:EF:DD:57
X509v3 Authority Key Identifier:
keyid:CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:53:dd:46:38:86:16:1a:c6:9f:16:0d:f4:05:6b:2d:7d:fe:
7e:dc:70:4c:12:48:e2:e2:d9:b8:b6:3e:e9:98:05:c9:c2:10:
9f:a0:d3:28:48:1c:8d:a8:c4:85:b6:4d:0f:1d:1f:62:50:d2:
c7:18:30:50:64:f1:8d:f9:38:44:c9:56:73:fc:55:dc:f9:1f:
cf:f7:78:fc:72:5f:33:3f:13:7b:b1:04:3d:f2:b3:78:d6:62:
68:96:c5:db:60:78:a0:fe:c5:ac:ea:86:c8:96:38:0e:6a:d1:
93:74:70:f8:24:b8:2f:1b:90:e9:a0:96:b5:12:e3:3e:77:ed:
74:63:7e:5a:64:1b:25:6f:af:8c:38:38:50:86:bc:02:13:55:
87:29:c1:6e:2b:40:a9:da:17:29:19:a5:0e:ca:60:1b:1e:d1:
73:2d:7c:48:47:b7:88:73:42:90:b0:e0:8b:1c:35:a2:34:64:
10:3f:bd:21:0e:c7:87:90:ce:32:45:5c:01:e9:71:13:0b:ed:
23:ee:8f:13:c7:ce:17:7f:3f:5c:00:ee:57:c3:b2:37:7e:31:
79:64:21:b6:3b:35:81:0f:3e:49:d0:af:e9:c0:c3:15:91:b9:
d5:ee:b0:13:75:52:39:2a:fb:db:98:e5:06:cc:9d:42:06:b8:
f5:cb:7a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:56 2025 by rpki-client