Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
File: y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft (raw, json)
Hash identifier: wZOE01amVFhocM/tHx+h7sFPWoMqgSzhha6h4RRwQEQ=
Subject key identifier: 93:19:2B:8C:FA:42:2D:9B:04:86:50:20:D4:94:D2:65:E9:FD:EB:02
Authority key identifier: CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93
Certificate issuer: /CN=cb55656c69d553da92b783850e15b1704e876d93
Certificate serial: 0194BBCE5A69F84319C40F3817EADC290B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
Manifest number: 1170
Signing time: Fri 31 Jan 2025 10:00:50 +0000
Manifest this update: Fri 31 Jan 2025 10:00:50 +0000
Manifest next update: Sat 01 Feb 2025 10:00:50 +0000
Files and hashes: 1: YyOogR6T7jG6zD-5lx-V8y_JBFA.roa (hash: jTd/5MNcv4fqMfKWtnfVXAAWAN6UzlPvaAV2hpZQQJw=)
2: y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl (hash: G+jWKlqJJdHtjPYN+uXkaCQVtqmZ8C9ux2+zJbYZ2oQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5a:69:f8:43:19:c4:0f:38:17:ea:dc:29:0b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb55656c69d553da92b783850e15b1704e876d93
Validity
Not Before: Jan 31 10:00:50 2025 GMT
Not After : Feb 1 10:00:50 2025 GMT
Subject: CN=93192b8cfa422d9b04865020d494d265e9fdeb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:66:bd:84:77:34:00:ac:42:b5:c9:c9:5c:
6c:de:47:c3:36:82:9a:aa:a6:58:39:cd:f0:f3:a2:
79:40:71:ad:20:01:25:98:b7:d1:a5:0f:44:c8:0f:
27:92:f8:d4:06:b0:91:9c:c7:3d:1c:7e:ad:7f:8e:
10:80:2c:dd:a4:7a:b0:de:cd:57:23:a5:8b:8a:66:
c7:45:ff:f3:0e:f1:ab:11:72:4c:8b:77:25:fa:0b:
77:fc:c8:d5:19:d3:71:4f:cc:92:aa:7b:0e:34:ec:
cf:0e:35:0f:b9:12:5d:0e:17:c9:2b:95:f3:73:3b:
34:cc:bf:92:11:6d:ff:51:be:da:c8:92:26:ed:ab:
b7:5a:f1:14:b5:4e:78:e8:93:74:02:ed:75:5f:bd:
9a:bd:fb:8f:bb:7c:b6:ed:26:61:23:ce:f4:c5:26:
7c:31:8a:da:97:c0:b7:1e:0b:9b:59:c8:96:5e:57:
41:ac:7c:f7:64:de:ea:b9:d4:9e:4b:d3:f7:75:89:
bf:f7:e7:2e:76:64:95:8a:67:9d:13:64:8d:89:19:
31:39:1b:38:1f:45:e4:c3:31:a9:ff:d6:51:b8:d1:
11:96:1e:d7:fa:7e:e6:d2:32:d2:22:dd:b9:25:dd:
fb:a8:78:dc:c0:b9:5d:1d:47:c5:5b:dd:cf:38:bb:
b5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:19:2B:8C:FA:42:2D:9B:04:86:50:20:D4:94:D2:65:E9:FD:EB:02
X509v3 Authority Key Identifier:
keyid:CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:96:32:7d:21:24:af:57:d6:69:46:8b:27:1b:a3:a5:b8:b1:
6a:28:87:9a:20:50:52:43:e0:36:50:99:9c:dd:42:5b:db:89:
5b:ce:8b:be:50:45:57:59:1b:06:c1:12:e1:d1:4c:d4:4b:69:
e8:1f:36:f1:83:9f:95:6a:fe:27:fb:be:d5:80:d0:48:e5:bd:
43:0d:b4:0f:7b:04:ba:c7:a1:cb:c8:70:71:c7:a1:c6:dc:33:
21:7c:64:af:72:6d:61:0f:b7:a8:42:47:32:58:bf:7c:ef:46:
e5:45:dc:8c:e2:41:6f:ea:c2:1a:76:9f:23:96:dd:0c:4e:7e:
eb:33:3c:fb:21:b1:52:0b:c2:2b:ed:47:46:73:87:0c:4a:ca:
b4:06:e0:04:f5:4d:22:cf:79:eb:50:6b:d3:77:be:fa:ad:60:
0f:7d:7d:6e:69:e7:94:68:b4:c4:09:6d:22:4c:47:2c:c1:84:
b3:36:02:51:90:95:80:2f:e6:29:15:18:9a:8d:9e:8d:0c:bd:
a9:ec:2e:7b:91:4d:2c:e3:5a:83:41:22:76:99:54:33:49:2d:
2b:f6:4f:74:b9:04:ee:91:b0:00:08:4f:bc:17:17:e7:56:7e:
6f:49:7e:00:07:96:59:a7:3d:c0:eb:62:91:e2:d8:a3:12:5f:
e0:bc:8e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:38 2025 by rpki-client