Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
File: y28gQNlMmVsEYdxRFKTAhzUemfI.mft (raw, json)
Hash identifier: 13MB+ph8I8FdLwKbwSh9z0Qh2d8ErZKKlTIrkYLYXMk=
Subject key identifier: 18:B6:3C:11:49:CA:D2:3C:A4:0B:F8:3E:F9:3C:47:11:5B:DA:E3:98
Authority key identifier: CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
Certificate issuer: /CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Certificate serial: 0194BD857FFB53BBDFD784B0157BFDA712CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:30 +0000
Manifest this update: Fri 31 Jan 2025 18:00:30 +0000
Manifest next update: Sat 01 Feb 2025 18:00:30 +0000
Files and hashes: 1: GZvlrhLuu4HVXkSTwCKlou9bVWU.roa (hash: 0h9dmtj/ChXszmXCtnSUjPduSyp6Ohgp/17C67cDST8=)
2: _YoOTD4iLAO7_l4DScmyMvRtaX4.roa (hash: DGENdYz2lNUjIanoXnChMfFs5sC04hN+r7u4ABAXLkU=)
3: y28gQNlMmVsEYdxRFKTAhzUemfI.crl (hash: JfXtSSWeoVjnUwAhj0Al93u8GPEbdUBIvyqaThUzBJU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7f:fb:53:bb:df:d7:84:b0:15:7b:fd:a7:12:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Validity
Not Before: Jan 31 18:00:30 2025 GMT
Not After : Feb 1 18:00:30 2025 GMT
Subject: CN=18b63c1149cad23ca40bf83ef93c47115bdae398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:e5:41:1d:e3:82:b8:03:73:35:d0:b3:b4:
ea:3c:7a:98:0c:15:61:f3:fe:8d:3a:c2:90:14:2a:
ef:55:a7:66:54:7d:0e:95:6c:20:0f:80:2a:40:71:
70:f6:1b:7f:d1:07:4d:3b:a4:84:d3:37:0a:41:af:
40:1a:77:fe:98:0b:03:0f:b7:5e:c5:28:c7:cf:ef:
81:0d:49:c3:21:05:7f:c4:09:05:5c:fc:2a:83:7e:
f0:13:2b:90:ae:cb:8d:34:35:37:56:9d:50:bb:76:
f0:14:09:ab:d5:18:3d:6f:f4:af:14:fd:b2:1f:46:
07:bb:2c:b6:f1:42:5d:a9:a9:49:f1:d9:80:04:7b:
b8:cc:18:bb:5b:bd:97:09:88:73:a3:8d:e0:39:a8:
1c:19:e4:ad:26:2a:d6:4f:de:b0:28:00:57:66:9e:
0c:17:c3:a0:2f:6c:2f:97:03:33:45:2d:81:fb:3b:
64:14:0a:57:b3:88:8a:a3:bf:39:1e:93:01:94:48:
79:f7:cb:37:13:fb:b9:e2:bf:7b:d2:41:0b:a4:f3:
d1:b2:d3:f4:13:1b:db:e7:ef:ef:c9:81:3a:f0:ad:
11:d5:65:32:0f:ce:bf:71:11:92:37:a0:79:b6:9c:
64:a3:fa:05:71:13:43:82:f9:ad:d5:29:5e:ab:26:
10:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B6:3C:11:49:CA:D2:3C:A4:0B:F8:3E:F9:3C:47:11:5B:DA:E3:98
X509v3 Authority Key Identifier:
keyid:CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:64:54:b0:44:94:b2:81:32:65:f4:27:aa:92:3a:af:36:a4:
ec:49:3c:bf:4d:3f:7a:43:00:ee:31:12:5b:2b:89:d7:6a:df:
ad:74:34:08:76:8f:2e:c0:99:e4:c9:5a:b2:6c:49:65:a0:55:
8c:e2:48:e8:61:8b:ad:6b:73:33:3e:c6:ac:cc:6a:3b:df:53:
ee:5a:d5:b0:a7:53:82:61:5b:51:28:2e:e0:da:6e:e1:6c:44:
f7:db:91:e4:39:4c:9d:fc:79:f9:f1:ca:a0:ef:c7:f1:23:e4:
9e:da:08:0d:cc:a5:23:17:93:f7:6a:f1:08:1e:5f:a3:ea:bb:
14:cb:93:75:05:2b:62:f8:2c:11:e4:96:a0:51:fb:a7:0c:48:
fb:4b:ee:45:60:02:3b:94:40:08:a6:bd:f7:24:23:df:21:3c:
93:3e:db:67:1f:25:88:e4:12:c1:a6:94:a8:e0:37:4f:6d:e2:
8c:7e:6c:d7:c4:f5:fb:df:71:9b:47:03:85:66:17:52:07:00:
8b:88:d6:5a:2f:91:86:ae:5f:a5:f3:0b:84:da:d2:2e:d9:d1:
dc:af:2a:dd:ad:c5:4a:0b:ec:13:bf:ab:3b:c3:13:45:f1:7b:
7a:c0:a4:dc:d0:9b:8e:e1:b6:d7:f9:7c:6d:22:09:25:ae:5d:
c1:f1:41:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:20 2025 by rpki-client