Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
File: y6AXGgLV5KdftAY1VFrgBkyMzK0.mft (raw, json)
Hash identifier: s/G5oGj8StYgqnJom0tQDGJN9yHI12Q7i8luk7+Y0Dw=
Subject key identifier: 40:69:EC:BB:05:83:29:62:04:D9:A6:44:8B:22:87:3D:D0:CF:C5:8A
Authority key identifier: CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD
Certificate issuer: /CN=cba0171a02d5e4a75fb40635545ae0064c8cccad
Certificate serial: 0194BC72E1444246C4DE6182E31B2AB4844C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
Manifest number: 1137
Signing time: Fri 31 Jan 2025 13:00:32 +0000
Manifest this update: Fri 31 Jan 2025 13:00:32 +0000
Manifest next update: Sat 01 Feb 2025 13:00:32 +0000
Files and hashes: 1: mj2SP2YUf8OOW3PWyfsSenlnbcQ.roa (hash: 7rYL22HIBA9YP5PrLL9E5bTyxJEJdAa2DC73cuHwaP4=)
2: y6AXGgLV5KdftAY1VFrgBkyMzK0.crl (hash: wS9b3DhRA+dtKKsr2CdP4eYnDlJdfkGZzylC2XDRDBA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e1:44:42:46:c4:de:61:82:e3:1b:2a:b4:84:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cba0171a02d5e4a75fb40635545ae0064c8cccad
Validity
Not Before: Jan 31 13:00:32 2025 GMT
Not After : Feb 1 13:00:32 2025 GMT
Subject: CN=4069ecbb0583296204d9a6448b22873dd0cfc58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c5:f4:df:78:e4:2c:02:5f:86:90:0d:00:eb:
37:49:ff:fe:2e:1c:38:d0:f9:6c:43:d5:ba:d6:05:
17:69:23:1b:69:a6:13:df:6a:21:c1:75:c2:e9:9d:
32:f7:f8:a0:3e:55:65:61:f4:af:14:78:3f:a3:6e:
95:51:17:31:27:5c:3e:fc:26:ef:97:b0:a5:c5:ef:
7c:bd:53:a9:9f:9b:4a:e2:1a:7a:9a:99:9f:3b:14:
b2:ea:11:81:b2:52:81:0f:2c:1b:ba:2f:00:15:5d:
c8:ee:16:00:0b:d3:6f:60:65:6e:64:7b:c5:35:99:
69:3b:f0:c4:6f:b0:d6:70:9d:e0:6f:13:48:48:b1:
2a:44:03:71:bb:71:c3:00:b4:41:ea:e4:f1:3d:55:
c2:85:50:2d:5c:f6:b7:22:13:dc:a3:1e:9e:60:26:
18:34:fc:49:56:77:19:b0:51:7e:59:b2:b0:ad:22:
4d:af:fa:b2:71:6b:25:16:72:cc:fa:78:4c:24:af:
ae:28:39:6f:cc:4c:c7:d4:ae:0e:5c:44:c0:61:6b:
11:9d:bc:8a:dc:b6:81:eb:79:49:80:8a:b7:4b:a5:
33:74:13:38:c2:f6:db:f6:53:5f:5e:8c:23:a6:30:
8e:66:45:63:e8:f9:9c:b2:f2:cb:9d:e9:3d:3b:16:
af:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:69:EC:BB:05:83:29:62:04:D9:A6:44:8B:22:87:3D:D0:CF:C5:8A
X509v3 Authority Key Identifier:
keyid:CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:98:e5:4d:21:bc:61:93:ab:ff:87:f7:85:93:52:2e:86:d1:
74:c4:88:72:4b:c3:fa:29:0f:e1:6c:c0:65:c0:c5:3c:d4:2e:
fb:ea:f6:88:89:40:d5:c6:b5:c4:94:19:b1:f5:27:f9:7a:30:
7a:79:5f:46:93:d3:cd:4e:63:fe:85:10:d8:1e:bc:90:97:ae:
ba:83:8e:bc:e4:50:62:0f:04:e5:a3:8d:24:e0:47:c3:c2:48:
0a:90:16:fb:af:5a:0b:e8:5e:bf:72:96:c6:93:a3:d6:e4:75:
25:06:87:c7:6e:79:e9:84:25:22:92:ef:3c:d1:a8:67:db:d4:
a1:3a:80:e1:31:51:03:3c:9a:de:cf:d9:8d:7a:d3:07:60:9e:
19:b7:82:81:0c:63:88:3f:14:d1:54:70:90:b7:71:24:9c:6f:
d7:3c:47:76:1a:fe:5a:0d:98:28:a2:64:47:de:0f:df:66:5f:
48:16:5c:5f:a3:78:95:f9:d5:78:60:5e:7d:7b:f5:1b:b0:46:
bb:5e:3d:60:d7:59:50:90:f3:23:45:a0:01:90:c0:fd:5d:a3:
bf:60:df:7f:2e:59:a6:c3:a5:06:f4:7e:65:c6:ee:16:d4:f7:
6a:46:d9:98:02:ed:14:8b:76:7d:41:0d:1b:16:e2:3b:74:33:
86:60:0f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:27:08 2025 by rpki-client