Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
File: y-tftzOrs-B9dfqA176csYE80-A.mft (raw, json)
Hash identifier: wt/aTZvYrhP8pmHuzpfHCS6+Br1oGlazHGtCDb5jErE=
Subject key identifier: 19:9B:1A:53:04:F5:63:89:51:CB:81:FC:74:F7:7A:C9:65:C9:6F:6C
Authority key identifier: CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
Certificate issuer: /CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Certificate serial: 0194BC3BC3E684B3061C6DB3DC0E9152ACD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
Manifest number: 03C0
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: MwipPwUawCuJkrJRTiNh4fCkKto.roa (hash: 5ZpTx+e30gtrqh8BtmkNV18Y4nMljwf+6r/HDqn1lyA=)
2: y-tftzOrs-B9dfqA176csYE80-A.crl (hash: CDLgqd5/SgJ1GhsrC4yO3k0lgpNC7LNGNITL1glIrxc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c3:e6:84:b3:06:1c:6d:b3:dc:0e:91:52:ac:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=199b1a5304f5638951cb81fc74f77ac965c96f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d0:c4:d6:8d:e1:a3:3a:bd:f1:e4:82:05:dd:
05:c4:83:1b:5d:1b:44:86:de:c2:bf:18:c8:98:6c:
d7:fe:cc:13:fd:b8:a5:92:de:8b:28:61:84:86:87:
a6:58:2e:27:c2:79:93:5a:0e:20:ce:55:b9:18:a2:
62:94:fd:24:ab:39:84:87:29:ba:d1:62:fc:4d:06:
17:72:01:7e:d1:10:d5:6f:57:4c:3f:91:e3:7d:ca:
74:fa:2c:10:80:92:bb:06:17:f2:b7:06:55:33:2b:
72:03:94:ab:05:ad:ff:b9:11:aa:39:e3:22:78:5f:
6c:56:08:fe:fc:74:d1:c2:f7:32:2a:45:6d:c9:95:
a5:d5:4d:e8:bc:05:53:87:11:84:f9:fc:85:01:14:
8a:9a:1d:9a:48:05:13:c8:82:73:09:0e:ca:1e:cf:
77:30:78:4d:d9:cc:3c:15:d1:ea:08:66:b3:c6:77:
78:05:20:63:71:c5:b5:31:90:ae:92:43:40:78:a5:
c6:2a:ab:76:75:b3:23:d5:64:0c:0c:46:47:78:c3:
3e:72:99:cd:31:1c:b5:d3:0d:d0:de:fd:d7:c8:c7:
65:86:f7:59:28:db:95:7f:d6:cd:ba:71:d0:98:ca:
fd:81:23:74:51:c9:72:eb:84:67:82:8e:a3:7e:c4:
27:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9B:1A:53:04:F5:63:89:51:CB:81:FC:74:F7:7A:C9:65:C9:6F:6C
X509v3 Authority Key Identifier:
keyid:CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e8:b1:b2:20:24:c6:86:3b:14:e9:56:68:ac:50:85:ea:fb:
47:57:5e:20:34:75:af:77:d1:02:09:94:d2:03:bc:1d:25:5b:
4d:c8:ce:53:52:cf:a0:94:7f:ae:74:76:78:da:e4:f7:38:51:
86:a8:71:a5:80:4e:fb:1c:3a:1c:6c:02:25:13:35:a7:5f:9d:
ac:3d:2f:7f:bd:6f:dc:5b:6e:2f:02:54:8e:02:32:52:c6:3c:
1e:3e:d5:23:7e:15:01:dd:73:30:75:d7:9f:e7:b3:2b:f6:88:
08:d7:58:da:07:ef:a7:3c:aa:67:53:00:4c:c6:e6:24:0f:65:
81:2e:b4:27:89:61:03:e2:17:27:49:6d:bc:01:32:48:21:9c:
cb:1d:81:05:b0:25:b8:25:ca:48:70:6b:53:d2:d0:0d:e6:48:
a8:4d:bb:db:4c:40:ed:ec:0c:d8:bd:84:38:b0:28:eb:cf:23:
59:06:57:3e:e2:5e:75:7a:2d:79:17:c9:71:91:39:41:fd:32:
50:01:1b:41:5e:ca:48:bd:66:8c:fc:e4:5b:05:7b:0f:ac:9b:
11:ff:37:9c:88:77:20:ef:3c:90:ba:5e:8e:10:16:c7:4e:ab:
1c:75:b5:f3:c7:92:09:9d:65:fe:55:7d:10:d7:0f:21:dc:0c:
5d:fe:9f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:16:40 2025 by rpki-client