Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
File: y9_aIe3gGO3_VJgRY1eoxhUux-8.mft (raw, json)
Hash identifier: K1Z5tPxMwcf7h9wT3IX9ZKA/ievOz6XlKyQSb/OuIS4=
Subject key identifier: B6:C8:B8:88:3B:91:E5:49:0B:8F:83:67:C4:0B:4F:D9:63:F8:18:CB
Authority key identifier: CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
Certificate issuer: /CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Certificate serial: 0194BD8532B0A5DD2678103D2850B2B56EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
Manifest number: 079B
Signing time: Fri 31 Jan 2025 18:00:10 +0000
Manifest this update: Fri 31 Jan 2025 18:00:10 +0000
Manifest next update: Sat 01 Feb 2025 18:00:10 +0000
Files and hashes: 1: 9qNQB_i0eu4jjJmVJKka4rzSK5w.roa (hash: NblnquqC2LajKbqJk5Dgnmv5h35qFu2LGP00XRuQHvU=)
2: y9_aIe3gGO3_VJgRY1eoxhUux-8.crl (hash: 1mNZqrZZ6Kjatp2OM5M5Lo07R3YE/bYEQUyU+Xh3sgM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:32:b0:a5:dd:26:78:10:3d:28:50:b2:b5:6e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Validity
Not Before: Jan 31 18:00:10 2025 GMT
Not After : Feb 1 18:00:10 2025 GMT
Subject: CN=b6c8b8883b91e5490b8f8367c40b4fd963f818cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:17:b6:78:cd:72:99:a0:e0:c4:ec:9e:d6:0b:
ca:d0:8c:af:5a:10:bb:b1:e6:60:d5:04:d0:08:6a:
02:e7:5c:98:4b:a1:58:ab:56:c6:f6:c0:e0:c1:5f:
a0:e2:75:63:32:c8:6e:69:fd:64:83:b4:34:33:98:
c6:e6:a9:c7:b7:8b:d9:c6:be:f5:ac:d0:27:e3:61:
ce:93:a7:fc:65:09:a6:25:f0:46:b8:d0:85:3c:39:
71:0b:0f:12:b4:ba:fc:3a:87:79:b6:4f:95:b9:28:
7b:62:b1:96:fa:c6:77:9b:d6:f1:bd:aa:a3:46:e4:
4a:a5:6b:3d:54:69:da:42:76:2a:05:79:3a:81:77:
7d:2f:52:d1:3d:c2:1a:40:15:7a:e2:ff:aa:6c:c4:
c2:bd:f7:88:1c:cb:c5:98:c5:ad:7e:df:4e:51:3b:
f8:02:02:b8:4a:0b:77:54:65:df:3a:b2:32:dc:84:
36:4a:9f:ef:20:ea:9a:ca:6e:a9:91:45:74:e2:21:
13:1c:a8:34:6f:a5:a4:49:2a:e3:7d:c0:76:91:1b:
53:e3:b0:79:86:ad:7c:6e:0a:e8:da:32:b0:e5:ec:
75:d2:57:19:37:aa:11:5a:fd:88:7b:4a:eb:82:5d:
43:28:4e:f9:d4:89:27:2d:41:61:98:3a:a4:41:7b:
f0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C8:B8:88:3B:91:E5:49:0B:8F:83:67:C4:0B:4F:D9:63:F8:18:CB
X509v3 Authority Key Identifier:
keyid:CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:a9:60:8f:f8:86:f2:b9:17:22:c9:3c:69:c6:9f:0b:6e:4e:
c5:27:77:a6:49:e2:09:99:41:3d:44:33:a2:bf:87:dd:f4:36:
8c:3f:e7:3c:27:d2:58:58:8f:dd:b9:e4:39:48:4e:d4:d0:35:
e7:6b:77:21:77:c3:ca:9f:64:0a:22:98:d1:4e:12:af:00:a7:
44:4e:aa:63:47:98:4a:e3:8e:47:74:1a:6f:ec:84:c9:5e:a8:
7d:59:8b:e0:2d:24:cc:32:1c:ff:fd:c5:d2:30:b4:31:55:e4:
d7:2a:89:99:5a:29:5a:af:34:04:35:1f:9c:93:4f:df:b8:d2:
33:67:16:19:32:32:9e:44:c2:76:d7:cd:00:45:87:9e:e6:7c:
e1:7b:f6:74:6e:1b:51:56:62:9c:c7:f0:b0:80:12:c4:75:05:
a8:7f:d8:a3:e5:b2:de:cd:c2:8c:e9:07:16:e0:10:72:f7:8f:
78:e2:76:ff:85:51:e4:a1:7d:14:13:cc:7f:59:0a:4e:d0:e2:
b9:97:5f:58:2b:f8:8c:4f:7e:f9:4f:3d:a5:9e:01:44:c6:59:
bb:25:cb:9a:3b:41:d6:db:fb:ee:80:2f:69:0e:4f:6f:37:e3:
7a:fd:95:67:31:14:ba:79:bc:a0:09:06:bb:65:6b:af:c9:8f:
38:20:0e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:17:48 2025 by rpki-client