Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier: utThNb6BnfOZmIsYutH8yMwozELOPrkfQzJZvqzeTzo=
Subject key identifier: 43:9A:92:C2:31:C5:36:90:9A:BB:27:5E:D0:4F:43:EC:7E:29:6E:7A
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 0194BCE0F6860E5B7272C905904E74263A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number: 0B11
Signing time: Fri 31 Jan 2025 15:00:47 +0000
Manifest this update: Fri 31 Jan 2025 15:00:47 +0000
Manifest next update: Sat 01 Feb 2025 15:00:47 +0000
Files and hashes: 1: 73c0jhSky3BnN0TXunRjeB--q1A.roa (hash: 1Lx5ICQYUA/HUXjaB+c1tYSpkcTCOv6g20/mLwIRufE=)
2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: tlD8Scimqg+EXV6gMmxwC38zLG8lWrKw4KJL2QaUmls=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:f6:86:0e:5b:72:72:c9:05:90:4e:74:26:3a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Jan 31 15:00:47 2025 GMT
Not After : Feb 1 15:00:47 2025 GMT
Subject: CN=439a92c231c536909abb275ed04f43ec7e296e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:d3:5b:25:2a:b4:50:a2:ba:e3:d3:e4:f3:
9f:3d:68:9a:2f:38:83:c3:65:ef:b3:94:ea:34:0b:
5a:4b:7f:c5:48:0f:b5:d9:ad:60:09:5f:b4:a3:d6:
87:66:5a:76:aa:03:82:53:c4:ac:4e:8f:64:61:9b:
1e:8d:16:7d:39:d6:92:6b:5c:fe:eb:82:65:b1:14:
9c:a9:c3:59:e7:d4:33:36:c3:8a:0d:6f:80:e9:65:
e4:97:66:37:3d:5e:04:06:55:53:7a:70:ca:e5:91:
57:27:fc:d4:3d:6e:05:1e:90:c3:81:ad:31:97:86:
38:57:c4:e4:41:cb:e1:a1:cd:b5:c8:43:20:35:53:
0c:34:aa:e2:b9:0d:f1:62:fd:cb:b4:90:de:41:f9:
1d:6e:b3:38:40:c1:ac:cf:e1:2a:d3:9c:ad:3d:36:
eb:a1:25:80:76:3b:c0:17:b9:5f:21:be:49:18:fd:
4f:b2:0f:ec:37:1a:6b:0f:bf:e6:df:11:33:96:eb:
f4:7a:71:04:8e:91:7e:11:78:49:9c:83:cf:80:23:
6a:cc:e1:48:8d:d1:c0:b0:b5:35:11:e2:9d:24:7f:
d0:09:a0:ed:7c:bb:99:9c:62:76:c4:f6:84:34:71:
82:74:24:3c:60:5e:c5:4b:5d:d7:82:eb:9d:bb:53:
ee:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9A:92:C2:31:C5:36:90:9A:BB:27:5E:D0:4F:43:EC:7E:29:6E:7A
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:a4:06:21:c5:7a:b8:53:9c:2a:d0:0e:76:a5:20:cf:bd:a3:
4f:5f:36:ba:a5:a3:4b:aa:b3:96:29:c2:e4:13:c2:69:71:c2:
a4:c5:a9:42:81:09:cc:dd:5b:a7:52:5c:30:5d:ff:67:fb:65:
6c:00:88:b7:01:17:57:40:b2:e0:fd:14:65:c9:d8:4c:57:fd:
2f:52:b1:99:22:51:7e:bf:8e:93:80:6c:c6:17:36:32:f2:b7:
13:e0:af:05:3d:13:31:ba:47:bb:06:ff:81:4c:54:e8:73:4d:
22:6d:57:ac:d4:ae:de:ca:2a:4b:a6:f4:61:63:85:d2:54:69:
c9:c0:e7:4b:64:51:e5:75:ab:0e:15:61:3c:5e:56:10:98:d6:
75:f8:96:f4:f6:3f:8b:f3:59:e9:41:63:99:73:49:29:ea:63:
06:12:a8:46:11:cb:9a:e5:8a:0d:30:f4:e1:73:60:c3:40:d3:
a1:30:43:19:e6:b0:23:29:73:a3:45:3b:fb:87:52:8d:90:2a:
6c:00:9e:a1:49:f9:4d:0e:d1:bf:ac:a4:36:be:09:28:eb:88:
26:79:74:60:e2:d6:58:ae:6a:d1:10:7a:ee:f3:21:68:bb:78:
a8:78:80:03:6f:61:0b:5c:5b:2e:0a:f3:eb:96:a2:85:4d:77:
92:f5:c5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:53 2025 by rpki-client