Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
File: y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft (raw, json)
Hash identifier: NeyKjkcjrFqRqnVJZK1aB4eFx59rvynR0jFIkaxYUrw=
Subject key identifier: 60:12:26:76:C9:AD:B7:2B:9E:01:90:93:36:08:0F:4B:FD:53:45:62
Authority key identifier: CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1
Certificate issuer: /CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
Certificate serial: 0194BD858CAC5BC98BCF7F754F36E3EBA8FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
Manifest number: 0533
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: Kukv8lguLlqo8syva8to6ZRKCQQ.roa (hash: 6TsYNWvLqQDFoSOz1kHCV3IHIsfRZkDxe8fDivBN+2k=)
2: y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl (hash: DKrIStqZKtcvHykcY4wNFOgo0M6Ya7qM8r+3w9kdxYg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8c:ac:5b:c9:8b:cf:7f:75:4f:36:e3:eb:a8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=60122676c9adb72b9e01909336080f4bfd534562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:f4:3c:cb:ea:91:bf:73:fd:89:c1:2a:4b:
10:48:6c:7b:76:d1:70:9c:b7:49:d3:f5:4e:31:e3:
ef:e8:17:23:e2:e1:fb:3e:28:72:0c:da:8a:56:c7:
5a:ba:7c:0a:25:57:87:d0:14:fe:ad:75:6b:26:4d:
3b:88:44:fd:8b:0d:29:58:12:27:25:34:4c:4e:9f:
1e:b0:e4:e6:64:3c:ea:ba:a1:c2:c8:ae:96:a0:56:
d0:b5:05:63:a7:dd:62:39:81:7b:ff:04:bc:39:5b:
14:ae:36:9e:87:2d:d0:2a:af:14:4f:d2:7c:a8:7a:
7c:6b:40:ce:b8:55:58:fa:3c:37:64:9a:de:a3:2d:
73:f6:df:e3:3b:e6:39:05:0f:a6:d1:8e:cb:45:60:
ab:7c:83:70:0f:6a:79:27:6e:de:30:ea:01:29:00:
d8:81:f2:e4:4a:a6:db:f1:8d:65:0f:89:16:1f:de:
96:5b:c9:9b:45:e4:a9:8e:64:79:69:a0:60:26:66:
de:09:61:63:ac:3f:0e:f6:4e:bb:32:30:28:46:43:
bf:43:92:28:b8:c4:79:81:ca:f1:26:93:0b:7e:60:
32:0c:34:a3:c7:d9:d2:5a:00:12:c8:bd:86:9b:5d:
c2:c3:76:e0:c3:a1:e0:e4:29:e4:30:a8:66:f8:66:
81:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:12:26:76:C9:AD:B7:2B:9E:01:90:93:36:08:0F:4B:FD:53:45:62
X509v3 Authority Key Identifier:
keyid:CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c0:ce:e7:da:f3:bd:d6:e2:57:89:de:6c:9e:f4:76:d0:08:
1d:59:4a:4a:ac:15:e6:21:a5:65:b4:ac:21:e4:8a:a5:89:64:
38:fb:34:6e:a8:fb:d0:40:61:bd:2d:19:18:99:a5:9d:81:18:
28:3e:d3:d9:d5:4c:86:b5:92:27:67:56:cb:23:54:70:d9:26:
55:9e:b4:33:83:9d:84:f0:7f:36:75:fd:71:2b:d2:34:6e:64:
9a:c4:1b:fe:70:c9:f8:4e:92:27:97:f5:02:7d:56:a6:7e:b4:
5b:94:72:9a:ff:87:44:34:cc:5c:26:db:70:b3:11:06:04:d6:
81:0a:c9:43:9d:bd:39:ce:98:86:47:3a:30:4b:07:72:97:7f:
e8:90:12:b4:e5:8f:4c:c3:72:fa:ef:3e:62:d7:ee:c3:ca:e0:
cf:87:7a:c5:01:42:c6:52:bd:4a:2a:f8:a7:ee:1e:29:49:7d:
d2:d3:61:1d:e2:22:08:82:ac:a4:6e:ac:83:10:83:88:c0:3b:
6d:7f:0a:e3:e9:e0:4d:8c:a6:a7:d0:5e:8d:2c:10:89:b7:1a:
47:66:ad:0c:9a:51:8e:86:61:76:ed:71:dc:f1:0b:43:75:01:
1a:72:51:2f:d6:8f:4f:91:f4:81:6a:10:ae:65:ad:c2:8f:f5:
92:37:38:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:37 2025 by rpki-client