Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.mft
File: y2RbwP24YmvOLAQlxAh7VOFQ04Y.mft (raw, json)
Hash identifier: +WN+0Dyv9DOw6UiI0iUbeBfZFvZLHI7Z/6wiEXf+Lyw=
Subject key identifier: B8:A2:CD:3A:60:81:B0:A2:D9:01:8F:67:E0:83:87:09:CA:F5:36:89
Authority key identifier: CB:64:5B:C0:FD:B8:62:6B:CE:2C:04:25:C4:08:7B:54:E1:50:D3:86
Certificate issuer: /CN=cb645bc0fdb8626bce2c0425c4087b54e150d386
Certificate serial: 0194BC3C266A253DFFBB97B6DE32BB8BE858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2RbwP24YmvOLAQlxAh7VOFQ04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.mft
Manifest number: 0FC7
Signing time: Fri 31 Jan 2025 12:00:46 +0000
Manifest this update: Fri 31 Jan 2025 12:00:46 +0000
Manifest next update: Sat 01 Feb 2025 12:00:46 +0000
Files and hashes: 1: 4F-qIQU6J7qjERy1oGQD6D1Af7w.roa (hash: HudXuxrarvSRb7wkKgm0xrHOlWrkjsR2AhX4fbMBkWw=)
2: y2RbwP24YmvOLAQlxAh7VOFQ04Y.crl (hash: hRN/VLf3Yy/FkCHYYws0ARXgqj/+HCCMjrmZYKgMbG4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:26:6a:25:3d:ff:bb:97:b6:de:32:bb:8b:e8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb645bc0fdb8626bce2c0425c4087b54e150d386
Validity
Not Before: Jan 31 12:00:46 2025 GMT
Not After : Feb 1 12:00:46 2025 GMT
Subject: CN=b8a2cd3a6081b0a2d9018f67e0838709caf53689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3c:bd:3e:a0:ab:88:e0:1e:80:e4:4d:2b:61:
17:88:47:6e:ce:46:9e:b4:bb:91:2a:83:16:21:4f:
56:5c:38:6c:ac:77:53:d1:d7:9d:fd:66:63:38:c8:
b1:ea:35:80:4f:23:ef:30:6c:f0:07:77:49:23:d7:
e5:20:d7:e6:8f:d6:81:bd:3e:62:a6:01:1a:54:1a:
b7:9c:80:63:bb:a0:25:8f:96:c4:83:35:3f:48:27:
64:94:5a:47:90:c1:25:b3:59:36:05:5c:05:cc:88:
19:f1:e9:b6:14:5f:3d:66:51:bf:2f:a2:71:bf:a3:
b1:11:cf:13:63:a2:b6:f2:6d:42:7c:37:0e:9a:a9:
dd:d1:d9:fa:cd:db:3a:51:89:8c:98:13:66:f9:a6:
6f:9d:b5:0b:f5:b9:94:fd:2a:7e:9c:77:c3:a2:3c:
3e:58:77:da:f9:29:ea:8a:91:d5:3c:0c:61:ee:de:
dd:b6:90:6d:0b:6c:b1:f4:9c:a0:b4:67:05:b2:6e:
67:94:b2:95:0b:30:aa:97:55:90:62:f9:34:5a:fd:
a0:46:f1:73:3b:1b:5d:30:fe:75:6a:8c:eb:88:31:
2c:34:12:e8:e3:13:fb:2a:45:17:35:1e:ee:d3:17:
1a:04:bd:18:44:f8:a9:6f:65:da:73:04:69:12:ff:
85:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A2:CD:3A:60:81:B0:A2:D9:01:8F:67:E0:83:87:09:CA:F5:36:89
X509v3 Authority Key Identifier:
keyid:CB:64:5B:C0:FD:B8:62:6B:CE:2C:04:25:C4:08:7B:54:E1:50:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2RbwP24YmvOLAQlxAh7VOFQ04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:73:30:4a:4d:16:1d:a8:ac:0a:11:eb:5a:90:a8:7e:53:ec:
f3:5f:95:44:02:47:9a:06:7b:9f:c8:ac:ac:24:cd:36:62:ef:
04:9a:86:28:10:d5:e5:87:93:75:4e:61:83:77:5e:93:ac:f4:
52:3f:df:71:99:f9:9c:1e:93:c5:70:a3:25:21:eb:d0:6f:ed:
63:17:37:07:b0:83:e7:81:06:57:f7:92:3e:66:6a:95:9a:55:
39:26:a3:d7:0e:44:e5:64:df:85:25:17:4a:91:6f:4b:73:3a:
81:ba:08:df:33:8b:b5:7c:5a:df:4e:7d:0d:34:26:b0:eb:61:
58:97:38:e2:43:d1:e3:86:97:7a:93:34:9f:6e:83:5c:b5:84:
4d:3f:4c:dd:06:78:19:ff:e6:cb:e6:d1:54:a6:81:ee:d7:83:
b0:14:69:47:cc:18:5b:e0:b0:9e:3b:01:e4:79:1c:13:e1:90:
ec:ba:b9:56:78:fa:40:c5:7b:0b:83:04:70:77:d5:c2:53:28:
a4:4d:f3:7c:ae:d1:b9:a1:18:d7:1f:14:85:73:6d:3d:59:4a:
cb:d2:ba:79:ba:3c:ca:c6:cf:b0:58:95:02:a3:73:fa:99:d8:
e6:84:d7:42:e7:5a:5d:25:ce:81:27:9d:b3:f5:c3:9d:b1:cc:
55:da:bf:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:31:09 2025 by rpki-client