Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
File: y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft (raw, json)
Hash identifier: dLxUUAyQbBCH+eSIYgo95kBJSBxMXICaopzJPdVxXpk=
Subject key identifier: DA:7F:CD:CC:8E:BB:B0:FC:7A:54:10:7C:DE:5C:11:33:67:EB:BC:22
Authority key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
Certificate issuer: /CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Certificate serial: 0194BC72D553DD83D0311AB34F81F2AAEDEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 13:00:29 +0000
Manifest this update: Fri 31 Jan 2025 13:00:29 +0000
Manifest next update: Sat 01 Feb 2025 13:00:29 +0000
Files and hashes: 1: 7ZEG0z_Osqd4q9aW4GX-pynJwVw.roa (hash: 878HhGYlePO6JgY3PtW7VLOGBnrfdtyTWzeH4xsP4g8=)
2: VeBtVkpIYodNfDVL9q0zO2G9fI4.roa (hash: 69DCX1Y+C0YR951ujfa1InW/UlkkHLEEqX2IFa0T65Q=)
3: WFk1Sbl9ffKO0_c5-wWqDgx_UdY.roa (hash: 17TQJSkjsNV4kLocHOeLmKp8frraMCHjxrwGJ2DZ/TA=)
4: YQH8RWxADt9aJV8FpUmZfLr_4hA.roa (hash: as+j57YQ6lscVO9lYUdKRdByZHNNE4AzI7PATyHo/j0=)
5: qB1Zo9eTq0Gf6RAAveJrJzHjkfE.roa (hash: k2V4zT3lW1qBoAk74wdn7K6a/aSM0/Ew+2PcshHyMps=)
6: y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl (hash: L+WygUP03ciy0yKphhngYfN32fnr/RSKgTiTfb/u6w0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d5:53:dd:83:d0:31:1a:b3:4f:81:f2:aa:ed:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Validity
Not Before: Jan 31 13:00:29 2025 GMT
Not After : Feb 1 13:00:29 2025 GMT
Subject: CN=da7fcdcc8ebbb0fc7a54107cde5c113367ebbc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c1:5a:9e:08:4a:a6:e9:ca:67:45:d8:2a:51:
00:e8:eb:e1:b9:99:3b:4b:f5:6a:1a:64:d6:f0:c6:
e8:4d:97:56:58:6f:72:09:59:4b:04:2f:7a:6f:3c:
90:d5:53:ec:0f:b1:10:fb:38:49:2d:d2:81:9b:81:
37:24:3c:38:ae:0e:48:9e:0b:39:a7:e6:b4:3b:50:
96:37:12:4a:d8:91:e9:bd:bc:47:45:09:2a:b0:06:
3c:99:b4:fd:69:9d:2c:56:37:2e:86:d0:22:38:1f:
88:c3:70:f7:94:06:b3:83:a8:db:c9:05:27:b5:95:
d5:a7:91:3a:34:a7:cf:3b:1d:3b:56:a1:45:16:54:
84:56:b5:1d:ec:c5:05:14:2b:03:68:fe:5b:28:e7:
3b:3a:d1:13:da:54:eb:67:dc:71:df:28:9c:42:5c:
9b:ec:40:b6:26:79:81:e9:65:25:a8:b9:ea:67:45:
d4:6d:70:19:a7:f0:47:78:b4:78:11:58:46:d3:cb:
07:5c:4f:d2:c2:c0:3b:33:cb:98:19:d9:58:b5:b0:
0c:ae:7e:cc:53:28:a3:16:8d:45:c8:db:4d:a6:b4:
3c:80:9b:af:67:63:3d:c2:67:a0:0e:13:8e:9b:50:
f3:ed:03:89:f1:c4:0e:86:b7:66:be:aa:a1:14:12:
84:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7F:CD:CC:8E:BB:B0:FC:7A:54:10:7C:DE:5C:11:33:67:EB:BC:22
X509v3 Authority Key Identifier:
keyid:CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:2c:9f:87:0f:c5:5d:7e:90:06:60:7b:60:9e:70:1f:72:47:
ad:24:18:09:ec:26:41:a5:ae:46:3c:7b:fa:96:04:fc:1c:6e:
26:61:a9:2f:d1:36:0d:a2:02:16:ab:83:16:84:a6:e5:a8:fd:
10:7b:6a:ca:2e:16:b7:91:6d:d0:a9:34:19:88:44:be:2c:63:
c8:48:d6:e3:ff:8e:f2:f2:a0:b6:98:e8:1c:d4:96:f4:24:6b:
ea:06:85:7a:50:9c:74:f2:83:e8:47:ba:81:68:20:4f:58:85:
09:b7:50:55:51:d7:ed:b2:3e:26:e0:59:76:f2:34:3e:05:5e:
39:9f:43:93:fd:c9:e8:7a:6a:23:40:2d:5b:3b:84:7a:c8:05:
ee:0c:8d:4f:d4:01:ba:ab:d8:0a:2c:5d:8b:f3:ed:df:89:cf:
07:b8:f8:00:3f:a5:28:29:dd:b4:32:ef:bc:a2:d6:04:ac:38:
07:45:44:39:8b:6c:1e:2d:b6:45:e2:43:ff:3f:7e:1e:d9:16:
0c:43:ac:68:ae:c9:20:09:0c:9c:b0:1c:c7:ec:09:ba:63:b5:
50:cc:f5:4b:e5:01:ae:86:0a:2c:d8:c9:04:5f:c2:a8:dd:6e:
0e:11:4e:11:bc:9d:06:b5:3e:18:24:84:86:01:b2:54:99:3c:
12:68:77:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:33:04 2025 by rpki-client