Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
File: y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft (raw, json)
Hash identifier: aY8LmW3hJgLe69NwEukR13TFkpQF7J3yLt3yheaYcTU=
Subject key identifier: 99:E4:0D:43:B6:5A:1F:74:0B:0D:CA:D3:2A:BD:B4:90:49:EB:71:1A
Authority key identifier: CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
Certificate issuer: /CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Certificate serial: 0194BD4E6F20484A05E6945FEF352C543497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
Manifest number: 04EF
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: CJzjdjvv4FGhNJdLtLXWzDG2qxM.roa (hash: LgF/Ta729VSsHPxynFr9+mRLhRpy51NkOyQe2/JSJU4=)
2: y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl (hash: K5icEsIk0pEAahhIk5k3QyKqYJ5JtiGnSinnlaagiAo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6f:20:48:4a:05:e6:94:5f:ef:35:2c:54:34:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=99e40d43b65a1f740b0dcad32abdb49049eb711a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:13:7f:8a:ba:78:f6:cf:51:d7:1b:29:4b:ed:
a7:ba:24:75:33:c2:b1:2a:1e:23:5d:c6:ea:81:12:
73:ce:70:a9:8f:4a:96:15:63:c2:92:52:84:b7:fe:
b1:5b:e5:ed:7f:2a:cb:5d:e2:ad:7f:a2:79:d5:42:
97:fa:72:7f:a0:e7:4e:5e:b0:e3:34:50:33:84:f7:
8d:22:8f:93:da:48:30:b6:ef:30:75:eb:be:d1:8b:
96:66:d9:ea:36:07:c3:07:c6:f5:a4:ad:b7:5a:b6:
70:be:6a:31:cb:60:ce:1e:ed:9a:ac:ed:d6:a9:dc:
52:34:b9:6e:ea:97:c7:d5:65:65:05:7c:3e:0c:1e:
87:4a:ff:cf:c4:8e:12:cb:a1:7b:fc:71:f8:ee:e1:
d7:83:85:d1:08:d1:b1:9f:c1:79:fe:41:f9:97:53:
80:b5:3c:e5:c3:d8:88:5a:bc:03:9e:d6:05:70:26:
cd:ef:7c:75:c5:cf:80:45:51:55:15:93:0d:fa:e2:
ef:4b:ef:eb:85:09:8b:7c:64:1a:cb:8c:15:fd:31:
c3:89:59:8c:35:5a:88:e1:81:2a:62:50:a2:53:ce:
4f:f8:86:98:c3:8c:1b:5e:2c:98:62:ac:3c:95:5b:
b7:84:04:63:16:df:3d:06:f8:d1:c5:e7:41:e8:cd:
19:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E4:0D:43:B6:5A:1F:74:0B:0D:CA:D3:2A:BD:B4:90:49:EB:71:1A
X509v3 Authority Key Identifier:
keyid:CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:42:9f:73:ce:07:7f:51:a7:ef:f1:58:ce:81:a3:47:86:19:
e6:a5:ee:71:c4:e3:0c:3a:9e:ec:b6:34:8c:a9:9a:01:fb:79:
15:61:0d:20:2c:89:1a:54:fa:2b:14:44:62:9c:7b:15:21:28:
14:49:0a:75:44:5b:9b:83:d3:81:9a:47:a3:c6:31:d0:b0:11:
4b:13:3d:77:b9:f5:43:fe:de:8d:61:51:f5:6b:dd:e9:12:22:
3b:26:28:6f:73:dc:58:61:f1:3b:dd:0c:1a:1e:9c:25:41:a2:
dc:3e:25:63:23:72:79:38:74:85:6f:52:53:85:f1:82:fa:a2:
47:d1:bc:72:da:56:79:41:59:ab:a5:dc:cc:44:28:a4:b6:f9:
aa:ab:a1:ae:65:7c:da:12:90:b6:e3:fb:bb:be:29:3c:51:17:
39:f6:04:67:8f:08:9e:a7:8a:4b:6c:42:8b:62:65:47:7a:de:
03:c4:40:5f:c9:c4:08:80:75:19:f3:d0:21:fb:26:44:2c:e7:
23:95:f7:c8:63:13:0d:23:d0:79:f6:e9:a6:62:d4:bb:fe:97:
17:7d:3e:bb:ea:27:85:e0:81:af:c4:da:94:58:86:57:e4:e7:
57:e3:06:95:57:61:c6:13:27:79:c0:64:95:ee:f0:06:af:c4:
d2:a3:2b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:02:38 2025 by rpki-client