Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
File: y5-GErfxR1ABa4SMQvYN82rYMtk.mft (raw, json)
Hash identifier: ov4egcjCKTSEN+dae3Whc71GstvvcRsGeAAG3FxybhA=
Subject key identifier: 1E:D4:41:31:7B:31:8B:D5:E1:64:41:49:39:73:62:C1:EC:0B:4B:F0
Authority key identifier: CB:9F:86:12:B7:F1:47:50:01:6B:84:8C:42:F6:0D:F3:6A:D8:32:D9
Certificate issuer: /CN=cb9f8612b7f14750016b848c42f60df36ad832d9
Certificate serial: 0194BBCEB94D4D3D4E53A56E8A03ACB9C32B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5-GErfxR1ABa4SMQvYN82rYMtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: 35Hkh6WGB56LhQUZWJy4fWu8adc.roa (hash: N+zjw78vBIKP/bKJa3b5qGQ6N/RlG9tWFNOT+GZrtRA=)
2: y5-GErfxR1ABa4SMQvYN82rYMtk.crl (hash: a3n8m2yopRVpP444r3UTOeLMIqx+z3icEeq/eBLE07s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b9:4d:4d:3d:4e:53:a5:6e:8a:03:ac:b9:c3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9f8612b7f14750016b848c42f60df36ad832d9
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=1ed441317b318bd5e1644149397362c1ec0b4bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f9:dd:f4:4e:2f:91:f4:35:95:9f:e3:e8:48:
b1:f3:0d:c9:f4:1b:8a:b4:21:35:89:7d:f8:a0:6c:
9e:4b:9c:22:41:89:b1:7b:8a:02:ce:c1:92:6f:06:
7c:d8:a7:0b:16:3a:10:11:7f:a6:3b:10:04:fd:5e:
be:35:aa:3f:9b:0b:9e:33:71:83:4c:40:48:19:0e:
6e:e9:aa:79:95:c7:95:74:c7:68:31:d6:8a:9a:d7:
f8:34:74:9b:c7:a9:d0:16:fa:25:b1:83:a1:f4:a6:
4b:89:66:bf:e1:db:e3:50:64:14:96:02:b0:d4:5f:
60:43:3a:42:69:17:86:b8:9d:19:de:24:f4:ea:96:
d3:54:71:28:0e:f0:6e:50:74:40:0f:d1:0b:9d:9d:
b1:27:47:c7:cc:ac:45:82:7e:54:96:30:69:66:64:
47:a2:6a:a3:e3:93:6d:4c:cb:db:06:62:e5:a5:f7:
ca:91:ce:76:e9:1a:65:36:6f:a1:d2:80:8a:54:2c:
16:27:74:06:50:27:16:47:ff:fc:1b:20:cf:4a:07:
ee:c4:a2:4e:80:ab:d3:0f:dc:36:f5:96:5d:d0:48:
cd:9e:c3:b6:d8:10:04:8d:73:3c:36:b2:a4:3b:68:
58:67:09:d7:e9:12:87:87:fb:a9:9d:ec:08:f9:be:
78:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D4:41:31:7B:31:8B:D5:E1:64:41:49:39:73:62:C1:EC:0B:4B:F0
X509v3 Authority Key Identifier:
keyid:CB:9F:86:12:B7:F1:47:50:01:6B:84:8C:42:F6:0D:F3:6A:D8:32:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5-GErfxR1ABa4SMQvYN82rYMtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:bb:96:22:cd:a2:8a:bb:81:7e:ce:7a:9f:43:50:bb:f0:7c:
42:9d:61:9b:7a:b1:40:bb:cf:a9:08:4e:b4:10:c6:9f:a6:99:
44:44:79:fe:4c:d1:20:ca:9f:1c:81:2b:01:43:2f:a7:23:3d:
e0:6c:38:f5:b7:cc:4a:39:99:3e:49:f0:7a:85:68:79:4f:d3:
3a:97:82:b9:07:49:d0:a3:44:0a:1c:03:bc:a2:7b:8d:cf:22:
2f:af:b5:08:ee:2d:3b:a9:6e:39:61:20:9e:fb:3a:d8:de:ec:
42:aa:3e:73:29:93:f7:61:ff:bc:99:1c:04:89:ba:cf:0f:46:
42:6f:5b:5f:ef:57:fc:2b:c1:37:68:b7:10:1b:68:77:7f:0a:
0f:7e:14:b3:1d:9a:49:f7:c5:12:34:4d:b4:21:75:f8:df:92:
7a:78:89:4d:9a:f4:6f:27:72:ff:2f:dd:ba:8a:41:6c:70:78:
ee:3f:97:43:b9:27:1d:09:cb:54:f5:1f:f4:e1:7f:f1:60:b5:
bf:65:b4:a0:cc:c7:db:b4:ea:74:55:65:45:9d:6a:48:6d:46:
1e:c2:54:fc:a0:e6:4d:af:6f:48:fa:c6:a1:a7:68:03:85:f1:
24:01:89:b8:76:98:e5:12:d7:d8:24:06:9c:1c:bf:a9:1c:48:
e6:53:8c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:31:49 2025 by rpki-client