Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0c6181-218f-400a-bb70-8c523a5bba78/1/y45sWpKLpIynL3B7t5TeSdcKDnc.mft
File: y45sWpKLpIynL3B7t5TeSdcKDnc.mft (raw, json)
Hash identifier: 0kdz7jakK9PNI2/bvacyU5lnlElF74DiGGgN9lE29LA=
Subject key identifier: A5:7B:BC:80:65:9F:B3:22:56:95:68:2E:CA:0B:D6:AB:20:45:B0:40
Authority key identifier: CB:8E:6C:5A:92:8B:A4:8C:A7:2F:70:7B:B7:94:DE:49:D7:0A:0E:77
Certificate issuer: /CN=cb8e6c5a928ba48ca72f707bb794de49d70a0e77
Certificate serial: 0194BBCECD1E14718A6F504FB607414C13E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y45sWpKLpIynL3B7t5TeSdcKDnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0c6181-218f-400a-bb70-8c523a5bba78/1/y45sWpKLpIynL3B7t5TeSdcKDnc.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:01:19 +0000
Manifest this update: Fri 31 Jan 2025 10:01:19 +0000
Manifest next update: Sat 01 Feb 2025 10:01:19 +0000
Files and hashes: 1: kkts0LAJgV8FKzhVvhfU6qpl47g.roa (hash: BwAkSfoe7dBZj+3QP1g2LSE08T2ewWsUf0QmdlkTQ/w=)
2: y45sWpKLpIynL3B7t5TeSdcKDnc.crl (hash: zM/t0R0PD+jp87i/1Em/LNPXG6Jx4D50lkw6xyTW0g8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:cd:1e:14:71:8a:6f:50:4f:b6:07:41:4c:13:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb8e6c5a928ba48ca72f707bb794de49d70a0e77
Validity
Not Before: Jan 31 10:01:19 2025 GMT
Not After : Feb 1 10:01:19 2025 GMT
Subject: CN=a57bbc80659fb3225695682eca0bd6ab2045b040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2f:77:d4:4a:7f:64:94:a5:2d:e8:a3:89:4c:
72:32:45:14:65:c1:27:4d:d0:d3:4f:f8:3e:8c:37:
32:53:62:61:eb:1e:d1:a7:71:f9:94:17:37:f9:d4:
79:9b:bd:2c:85:4e:41:ed:6c:5e:3e:a5:b3:cf:6a:
82:04:a4:b0:6a:eb:35:21:ec:ed:ab:0a:6b:15:5f:
ca:06:5e:c7:4d:c2:85:b7:2e:a5:fe:b7:81:c0:b6:
94:c7:a5:dc:9b:db:f3:24:3b:98:a8:7a:05:3d:f3:
3c:6d:96:a3:4c:bb:b2:a3:00:04:7c:13:51:36:c8:
4e:95:da:f1:6a:3c:e3:86:50:1f:62:b0:a1:2e:d3:
ff:85:0d:47:34:6b:f9:a2:aa:e6:1a:16:6a:8c:fa:
11:27:7c:6e:5b:12:f9:5c:94:48:ec:49:74:a7:bb:
43:06:d1:1c:26:21:88:53:3e:bd:b6:ea:67:91:cc:
b7:4d:5d:5c:da:96:a5:a7:db:10:4c:9e:97:57:f4:
25:8b:e3:48:5a:32:c1:ac:57:50:ff:f9:55:c8:1a:
a2:06:a7:00:ab:7a:29:36:d2:2f:f9:5a:82:b5:bd:
18:a9:cf:e3:0b:29:a8:b3:99:e9:23:35:bc:12:a0:
55:4f:8d:4c:5d:ed:7d:68:81:38:7d:86:ff:02:cb:
e1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7B:BC:80:65:9F:B3:22:56:95:68:2E:CA:0B:D6:AB:20:45:B0:40
X509v3 Authority Key Identifier:
keyid:CB:8E:6C:5A:92:8B:A4:8C:A7:2F:70:7B:B7:94:DE:49:D7:0A:0E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y45sWpKLpIynL3B7t5TeSdcKDnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0c6181-218f-400a-bb70-8c523a5bba78/1/y45sWpKLpIynL3B7t5TeSdcKDnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0c6181-218f-400a-bb70-8c523a5bba78/1/y45sWpKLpIynL3B7t5TeSdcKDnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:8a:c4:df:fe:5a:4b:39:7d:21:93:6b:26:c8:35:48:94:17:
7e:51:e2:66:b3:e1:50:6d:5c:1c:fd:c2:92:ee:29:8d:08:db:
62:68:44:36:18:e7:ad:7a:65:b4:d7:67:d9:a6:40:89:91:4b:
e5:83:bf:ad:8d:08:92:69:93:ea:23:93:64:ba:7d:0d:d6:97:
85:43:a1:cd:3f:0d:73:b3:9c:ca:85:ca:dc:04:4e:96:fe:f8:
0e:1b:00:bc:d9:52:1f:83:ec:61:fe:54:57:a4:be:db:f4:51:
ca:fe:db:dd:b9:c8:e1:30:1b:62:ed:bd:9a:ec:99:af:36:ae:
07:c6:dc:6f:1d:77:1e:53:b1:5f:21:1c:b6:86:0f:d3:f6:73:
ea:36:b8:d9:6d:43:7b:0d:dc:88:52:9e:57:b9:6a:c1:dd:7f:
5f:83:ff:e9:f0:d8:96:72:26:ad:2a:74:c1:5c:4f:47:2d:7f:
dc:78:36:fb:98:49:07:f1:78:a9:56:e0:7c:ee:da:07:f8:5e:
80:a4:62:d5:c8:9d:4e:5f:58:60:c0:8e:ce:69:92:9c:28:d2:
9f:ab:73:1b:63:73:0d:a4:f3:b5:27:e5:f9:b7:5d:d6:c4:ff:
06:71:10:e3:2a:dd:8f:5e:7f:dc:e5:53:19:72:81:f8:3e:20:
91:c9:e6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:08 2025 by rpki-client