Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
File: y9_OOlNV-GH9xIwyASx4ydr5paQ.mft (raw, json)
Hash identifier: RltwIDQH/rlIVClYMIELGjw/Jy51JxSlseuovOPFRcE=
Subject key identifier: 82:49:F6:7A:E3:89:98:F8:4A:BE:AD:F6:9C:1A:10:C9:2D:BB:D3:A3
Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
Certificate issuer: /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Certificate serial: 0194BC05155DA9D60CE3749EB9DC6CF8BB46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
Manifest number: 1413
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: mkk-KHtVpdSjRTu_tkkdV37L-30.roa (hash: ivbrYqlxOhyTn42BC3RV5SMdz9F9dKpqo8vRZ2G2vog=)
2: y9_OOlNV-GH9xIwyASx4ydr5paQ.crl (hash: lcx455/7/NeBeZ0RXIoQwZ02x+qOVPjRRa3KyiiMtv8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:15:5d:a9:d6:0c:e3:74:9e:b9:dc:6c:f8:bb:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=8249f67ae38998f84abeadf69c1a10c92dbbd3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:80:4c:df:e1:e7:5a:ce:1a:d9:46:2c:7d:a5:
94:50:f0:5e:65:bd:ed:f1:92:fd:a2:ed:18:4b:10:
7a:ba:ae:48:6f:aa:9b:a2:35:ee:4e:b7:90:80:59:
26:df:88:56:d3:9b:1d:82:ad:9e:e6:d2:f3:e9:61:
a7:15:43:7c:e5:c8:cb:33:17:67:26:a5:b9:6e:b9:
97:d9:31:a0:64:3d:41:8f:49:73:b9:91:87:79:19:
8c:f4:08:cb:51:87:21:ba:42:fd:58:af:b6:24:92:
2b:93:0b:7f:1a:03:81:52:87:57:a9:fd:fa:57:33:
5b:81:16:66:26:da:9c:3f:2e:a3:41:1f:38:4c:63:
ec:8e:da:cd:83:3a:15:a4:0f:35:bb:43:34:4e:cc:
9f:38:a8:7b:84:39:e2:dc:22:63:d4:e3:f6:71:26:
99:c2:d0:ec:89:b3:04:7e:7a:66:f7:88:1a:44:13:
25:84:89:be:0c:3b:ad:f2:d5:ba:33:a1:3e:8a:ed:
f7:93:35:0b:3d:62:ff:0c:74:07:75:15:7e:75:ea:
98:e4:30:ed:d8:ff:fb:c2:1e:21:3c:4f:b6:e7:4d:
43:34:d3:3d:b4:de:77:bb:a5:1f:51:2b:d0:84:a2:
66:25:68:63:f7:63:98:8b:eb:e0:b4:69:e0:11:aa:
e2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:49:F6:7A:E3:89:98:F8:4A:BE:AD:F6:9C:1A:10:C9:2D:BB:D3:A3
X509v3 Authority Key Identifier:
keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:22:78:64:29:91:c0:b4:20:27:1f:42:a7:3d:68:41:f6:6c:
53:55:23:df:f2:bf:a6:df:d1:b1:26:2d:93:59:6d:3d:ce:94:
1f:24:3e:87:63:ea:b0:26:e0:91:3c:d8:07:26:32:db:88:ff:
29:61:17:2f:aa:95:cf:7e:8b:8a:07:23:85:c5:36:0a:4f:08:
7a:2e:03:d6:39:3f:34:41:e3:c3:bb:f1:7e:19:ba:c5:32:8d:
bb:0c:5d:3e:33:fd:55:11:5f:5f:c4:c4:60:e3:5b:c9:f4:03:
4b:98:81:68:50:60:b4:07:d5:bf:6d:81:a5:42:45:76:19:fe:
ce:3c:44:63:8c:5a:62:eb:f0:9a:6a:25:bd:74:39:46:fb:55:
e6:af:06:1b:4e:58:2a:1a:1b:9f:c5:75:5e:fe:41:1f:73:9f:
c3:96:63:89:1a:83:e9:f1:a5:a5:97:59:b1:bd:b7:de:f5:6c:
ae:40:e0:e2:ce:3e:c4:bb:6a:86:e5:47:c5:82:fa:d6:2e:a6:
6d:41:33:9f:d3:51:99:8f:ca:bf:58:c2:39:db:4c:fa:54:b9:
51:c7:13:e6:1e:d7:00:57:b9:be:65:89:27:84:01:be:2e:95:
8d:9b:fc:c6:57:5f:1a:0c:c3:59:68:91:08:5f:54:cf:ae:6b:
ea:5d:36:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:02:48 2025 by rpki-client