Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json)
Hash identifier: tkHG/Rp0+3y0LrpR9tTqd/pXGxgT1RBIggd9A8kIpn8=
Subject key identifier: 01:AF:C3:08:D7:A2:C4:D3:15:E7:A4:EB:EA:1F:25:44:FB:57:0D:64
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 0194BC04F0D03121CC5334380DE068F9E0B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
Manifest number: 0D17
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: 09lPg3280N3ZZ86hKfoO1uBHQzU.roa (hash: nnylAsJyHM10QSoZPAI37zrHno/gVhQAjT+wCMZWOs0=)
2: H_d5LCU4L3XwGqLNkFDXFN1zy2I.roa (hash: 1Qd4GHmykP1jEc8/694tMFaYEbNeBbde2QJNxgvHfMw=)
3: IjrWIh0jzbH9AGDO-Vviq_eBA4Q.roa (hash: 7jujT2Lsuok7oL2vIrgbVf5j8YwADQ9BWos7sqz0ULQ=)
4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: /fX6uU14XhcDmnBYtfmu6E0wh+nszJGDkR7DsUF/Vls=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f0:d0:31:21:cc:53:34:38:0d:e0:68:f9:e0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=01afc308d7a2c4d315e7a4ebea1f2544fb570d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:51:e3:84:19:07:ad:67:14:1f:81:0b:e8:ef:
61:2e:47:c2:76:1a:d0:aa:16:a2:f9:25:46:da:80:
cb:8f:e2:17:44:a2:b2:fb:cb:cc:27:25:6c:d3:19:
9f:d6:c5:a2:f4:2d:ef:19:72:5b:0e:ec:ca:58:75:
bc:c0:2c:14:ea:0a:48:b4:2e:a4:28:dc:5c:d4:c3:
65:74:46:37:08:a4:f7:c3:3d:26:4c:be:09:93:0f:
99:74:88:bf:f6:1d:59:98:f0:bf:10:d3:af:b6:36:
0d:b0:76:ea:b5:29:e1:bc:ff:8f:a7:f7:ad:2a:47:
62:9c:fa:38:fa:24:b5:45:01:8c:8f:71:22:b3:b8:
8a:b6:b9:be:d1:7a:c8:50:6c:91:47:9c:50:42:2e:
ce:2b:be:5c:80:44:39:51:a9:e7:a8:07:22:de:56:
75:35:fb:8c:5a:98:98:2f:04:c2:2e:9a:7e:7b:c6:
42:a2:a8:bf:f5:4c:f0:b8:6a:f7:27:61:98:e7:c8:
a5:cf:65:23:bc:c6:b1:1f:ae:48:fa:15:0f:c6:ce:
49:b4:58:09:a7:26:91:23:c5:a6:01:f9:3c:a3:63:
db:cf:a1:b3:42:77:94:e4:ef:b1:a1:b5:e1:fb:9d:
fd:49:c4:41:31:4d:7b:25:2f:fc:68:cf:f1:6c:91:
c9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AF:C3:08:D7:A2:C4:D3:15:E7:A4:EB:EA:1F:25:44:FB:57:0D:64
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:77:92:9f:ca:8c:91:46:59:c5:86:00:fd:7c:7a:7f:60:85:
2d:a9:c6:db:f3:4c:0e:fb:c4:85:d2:c0:83:78:f9:b6:c1:be:
11:a1:e0:c1:2f:fc:03:74:77:ec:45:d8:a2:40:7a:93:2d:23:
d2:cb:63:00:7b:f5:6b:ba:5c:c6:d6:26:a5:b6:cd:f4:26:3a:
d2:f2:81:26:19:7e:e7:d6:ed:ab:6f:4f:15:f1:85:03:46:2c:
0b:d5:ee:41:eb:82:fe:c5:b4:00:00:2a:7e:df:d1:a3:c9:62:
04:44:b3:eb:e7:98:1d:ff:83:d4:1d:f8:82:48:34:87:c1:d7:
2f:08:30:12:c0:6d:e9:e1:08:a8:8f:aa:75:d8:72:1a:9e:03:
b4:75:cd:f9:50:c0:77:9a:3d:3b:4c:fa:88:c1:d3:d4:f5:73:
4c:3c:dd:92:cc:77:ee:b5:c9:1c:9f:b2:f6:87:1c:9c:6e:cd:
ec:e2:8b:de:f9:71:8e:45:78:88:75:00:b6:e3:49:c7:83:36:
12:8e:67:5b:18:b0:74:43:9e:8b:ca:3a:65:08:3d:01:ad:40:
f3:fb:73:4e:ab:aa:0b:66:a2:15:60:3d:92:80:2f:f7:59:b8:
a7:53:1d:d8:bb:e3:a7:d2:ca:4a:b0:35:84:b0:eb:4c:38:71:
c1:9b:ec:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:24 2025 by rpki-client