Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
File: y9lerW0qHa8u9oestMKedgdrKAk.mft (raw, json)
Hash identifier: uHRVQ9SUHRZSCNo7XiTFt7qWUcz+HNqR+9sJxMoD9h0=
Subject key identifier: 1B:1B:E9:8B:92:27:EF:C2:66:F1:30:09:CE:FB:48:CF:D8:FA:8D:A5
Authority key identifier: CB:D9:5E:AD:6D:2A:1D:AF:2E:F6:87:AC:B4:C2:9E:76:07:6B:28:09
Certificate issuer: /CN=cbd95ead6d2a1daf2ef687acb4c29e76076b2809
Certificate serial: 0194BCE07BD0660AB870E86D4DC1F53AC589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
Manifest number: 080C
Signing time: Fri 31 Jan 2025 15:00:15 +0000
Manifest this update: Fri 31 Jan 2025 15:00:15 +0000
Manifest next update: Sat 01 Feb 2025 15:00:15 +0000
Files and hashes: 1: dLJ0i3DKxKOgLSZU6DT_1_-wzDs.roa (hash: R+7BGQyfLFShlywgi4Re33H2XJ0XnH/YSJRVXJB4EDE=)
2: y9lerW0qHa8u9oestMKedgdrKAk.crl (hash: WG8J7ImgtDqbbs9xMQYcuk2spUaC8eo0sjD3D48TuKI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7b:d0:66:0a:b8:70:e8:6d:4d:c1:f5:3a:c5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd95ead6d2a1daf2ef687acb4c29e76076b2809
Validity
Not Before: Jan 31 15:00:15 2025 GMT
Not After : Feb 1 15:00:15 2025 GMT
Subject: CN=1b1be98b9227efc266f13009cefb48cfd8fa8da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0e:5c:e6:8e:a1:29:e2:22:72:28:98:7f:24:
50:7b:e3:7b:77:77:24:9e:b6:d2:96:72:f3:6f:29:
29:e7:87:dc:ba:d4:18:cd:ec:27:97:af:4f:b4:0e:
16:2b:b4:5d:54:4e:e3:fa:6b:11:a7:02:72:07:2f:
c4:f4:c7:74:9e:f4:c0:29:2d:73:a3:7e:13:72:da:
e4:b5:b6:ca:74:d4:e5:46:85:82:dc:8f:c9:dd:86:
f7:89:7f:eb:15:47:0f:b9:2c:b1:78:39:16:1f:42:
7c:48:27:b1:76:44:30:c5:ee:61:79:d7:f6:c2:11:
66:71:75:1e:b9:8e:af:b3:e3:bd:eb:1f:6b:ce:2e:
4a:ee:e5:a7:09:65:be:56:3f:24:72:43:67:81:dd:
7c:d9:3f:6b:23:c5:a4:ed:df:e2:6b:32:27:f2:b6:
7f:9d:c4:2d:d0:98:81:8a:8f:96:d5:b3:e1:6b:44:
7a:6d:68:a4:59:f6:75:86:9f:d2:08:3b:6d:4f:66:
a2:8b:c7:8f:f4:c1:cd:25:e6:37:61:6f:02:58:7e:
5e:b3:c4:e6:4e:7a:64:4f:da:f6:c4:e2:12:5e:6f:
24:e1:35:4d:25:fe:af:e7:2e:1d:3f:64:c0:93:33:
df:5e:50:6c:34:53:7c:29:6a:53:df:7d:ee:5e:81:
d7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1B:E9:8B:92:27:EF:C2:66:F1:30:09:CE:FB:48:CF:D8:FA:8D:A5
X509v3 Authority Key Identifier:
keyid:CB:D9:5E:AD:6D:2A:1D:AF:2E:F6:87:AC:B4:C2:9E:76:07:6B:28:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:22:ac:7e:cc:6f:1e:c8:aa:b1:28:c4:89:d5:44:f4:f6:da:
b3:7d:f3:9a:29:6a:d0:5b:0d:f7:27:6c:77:ab:a5:c7:3e:b0:
ce:d5:fa:67:28:04:90:fd:1f:1e:d0:4d:ab:58:94:9a:ec:fe:
c1:c2:78:26:37:97:76:c4:d7:77:ef:d8:28:1c:5b:4d:ec:78:
d2:bb:be:2c:20:d6:79:6c:4b:0c:7a:63:3a:94:ab:fa:27:ae:
4f:b1:cf:76:db:e5:7b:d3:9b:0b:98:88:18:1c:cf:32:aa:f6:
64:d7:84:6a:73:4a:5d:cf:b8:ca:e0:0a:24:8e:5c:00:f7:03:
6c:54:4d:62:e4:c5:e7:6b:4d:63:8c:01:2d:e9:c5:26:8a:22:
f7:c6:d4:6f:9a:13:7d:b2:47:e0:e3:78:99:2d:35:d1:8d:ac:
2e:d9:98:40:b1:77:b7:77:15:18:cd:3e:b8:9e:cc:42:25:95:
af:30:82:27:c1:7a:25:d3:67:f5:6d:3b:35:e3:a7:c3:0f:0b:
40:8c:23:db:b4:2c:13:1a:ea:88:e1:82:bf:9f:e9:0a:37:35:
b3:39:6b:13:a0:8a:9e:fa:34:24:4e:cd:50:e1:25:5e:b3:f4:
7b:62:8b:b6:b0:20:75:dd:35:1a:94:ec:03:91:4e:b9:d4:ae:
09:3f:94:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:05 2025 by rpki-client