Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
File: y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json)
Hash identifier: SzeRRRLMP/SFe5EOEs2wg182/es7OZ/g01wynXOxT6Y=
Subject key identifier: 92:80:A0:FC:54:8E:E1:FC:E4:95:4D:96:AF:79:38:77:4C:32:DE:B4
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Certificate issuer: /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial: 0195E0EB81004977BB3707FBCD4C94D3CF3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
Manifest number: 0F5F
Signing time: Sat 29 Mar 2025 08:01:24 +0000
Manifest this update: Sat 29 Mar 2025 08:01:24 +0000
Manifest next update: Sun 30 Mar 2025 08:01:24 +0000
Files and hashes: 1: rfAqhHSyB0bVC5i8dVtfZe-treM.roa (hash: tI9pAzBOPcqsKJP119w8Wmg6uhaucxG8mazRidS4T3g=)
2: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: Kwy+79sM4po3kBGI+ky/6By/YcsEX/vHd23AVPHoTZo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:81:00:49:77:bb:37:07:fb:cd:4c:94:d3:cf:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
Validity
Not Before: Mar 29 08:01:24 2025 GMT
Not After : Mar 30 08:01:24 2025 GMT
Subject: CN=9280a0fc548ee1fce4954d96af7938774c32deb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:23:04:3c:f9:d1:f7:9c:e3:1d:6e:fe:99:
cb:9b:6e:ff:1d:4b:39:0c:a8:73:8a:d4:12:59:0d:
76:2e:5e:02:04:ba:9d:dc:35:2d:db:37:b5:a9:71:
ad:73:bd:52:d7:91:e4:71:a6:05:32:9c:62:d6:db:
78:61:d0:7c:31:6c:e7:26:ab:13:69:8a:d8:e7:97:
f0:a6:62:3f:38:c2:24:79:2c:17:77:b1:a9:80:aa:
e3:15:1e:90:5f:99:eb:90:3d:8d:33:86:7c:6c:e5:
45:b7:ce:6d:c3:36:7f:0e:d8:c2:f2:2b:50:c8:bb:
37:46:cf:be:66:30:1b:92:5e:f1:fc:10:da:a1:b3:
eb:94:b1:07:70:06:7c:96:29:a5:41:8c:27:4e:d9:
5a:27:4d:31:a8:39:b9:5e:2e:f6:67:5a:96:d7:0e:
4d:b8:d6:11:30:fd:1e:ea:21:37:64:b0:dd:89:41:
76:86:58:9f:47:04:5f:75:cf:05:2e:de:9c:38:80:
cc:fe:69:38:6f:b5:d5:fb:8b:a7:10:83:72:fd:4e:
c4:21:45:9a:45:f0:eb:ca:24:e6:42:40:42:9d:40:
5d:6f:48:fc:d5:bc:05:b0:0b:37:86:71:23:b3:58:
8b:5a:78:40:54:3d:88:a7:e7:f1:f1:4f:32:0a:38:
bc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:80:A0:FC:54:8E:E1:FC:E4:95:4D:96:AF:79:38:77:4C:32:DE:B4
X509v3 Authority Key Identifier:
keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:08:cb:4f:c9:3f:bb:e9:6e:30:42:4c:1a:50:db:9f:ea:c5:
4e:e7:d7:1b:24:7f:81:f9:57:ca:32:83:2d:92:1d:44:f6:ea:
c1:b4:7f:32:9c:5e:5d:80:f8:51:e6:4f:6b:c0:93:c2:6c:c2:
e5:0f:11:22:28:b9:99:96:73:ef:9c:7e:ec:82:96:08:98:3d:
fa:fc:4b:72:e0:2e:e1:34:bc:d9:82:57:e2:f3:3c:67:19:5b:
c1:dc:cb:80:a5:cb:47:8f:dc:f5:c6:e6:06:61:59:8f:4c:3d:
8a:9e:c2:9b:af:8a:20:ec:4a:29:19:70:64:82:7c:b0:98:9e:
43:72:50:45:7a:80:29:8d:8c:41:06:49:c8:07:52:d8:8c:b4:
e9:55:6e:11:38:ba:83:9f:e2:fe:0d:84:0a:18:7a:90:3b:ec:
e2:9a:70:84:b4:19:5a:8f:6d:df:75:64:30:05:30:5b:37:39:
e1:44:82:76:4f:de:41:96:56:72:6e:ff:fc:f5:0f:bf:98:45:
6c:e6:44:45:82:03:db:70:1b:c5:47:36:c5:d4:8b:bf:12:f5:
cf:0d:a8:84:4f:2d:6a:3d:3d:29:40:d4:26:0c:8a:25:cb:e4:
6e:6d:17:4c:69:67:d6:b2:1b:c5:d8:75:bd:07:08:ad:53:34:
63:b8:6b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:21:30 2025 by rpki-client