Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0b709f-53ab-49c9-8b83-5ae957f2cdbb/1/y2knsWnj0PXLlLNDOBmS9IU2yFU.mft
File: y2knsWnj0PXLlLNDOBmS9IU2yFU.mft (raw, json)
Hash identifier: OLJLsWJK2NZIaqAY+7pppy/z9id5Xai3lCbMX2nfqv0=
Subject key identifier: 72:00:20:C6:01:1E:0A:06:56:F7:5E:5D:5F:C8:3D:C7:27:F8:D6:CF
Authority key identifier: CB:69:27:B1:69:E3:D0:F5:CB:94:B3:43:38:19:92:F4:85:36:C8:55
Certificate issuer: /CN=cb6927b169e3d0f5cb94b343381992f48536c855
Certificate serial: 0194056A5FAF0DB9145E150070A8F39CDF69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2knsWnj0PXLlLNDOBmS9IU2yFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0b709f-53ab-49c9-8b83-5ae957f2cdbb/1/y2knsWnj0PXLlLNDOBmS9IU2yFU.mft
Manifest number: 0B50
Signing time: Fri 27 Dec 2024 00:00:44 +0000
Manifest this update: Fri 27 Dec 2024 00:00:44 +0000
Manifest next update: Sat 28 Dec 2024 00:00:44 +0000
Files and hashes: 1: fRBwgy1K9bGKR9WYtSBQX2DRh6M.roa (hash: SZg3Y2zqtGN8BwO/QOMSeB1QWPqPhORil7K5PVsHpOU=)
2: y2knsWnj0PXLlLNDOBmS9IU2yFU.crl (hash: jqC9myKTGoFH/ooBsRtl2H3h3yBvyL+Y/Eh2O9n1bU8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:05:6a:5f:af:0d:b9:14:5e:15:00:70:a8:f3:9c:df:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6927b169e3d0f5cb94b343381992f48536c855
Validity
Not Before: Dec 27 00:00:44 2024 GMT
Not After : Dec 28 00:00:44 2024 GMT
Subject: CN=720020c6011e0a0656f75e5d5fc83dc727f8d6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:b4:9b:79:d3:92:4a:8a:c1:23:f0:e2:e3:
7c:bb:3c:fd:5a:bf:e3:d7:47:be:b2:68:f6:7b:b5:
b3:89:fe:e6:71:38:b9:67:bf:80:27:01:77:8d:dc:
f6:a4:4d:ae:93:bc:a9:49:06:5d:4e:88:1b:7e:95:
54:f4:0e:ec:a6:cb:67:b9:9c:fe:9d:d1:f9:eb:07:
ae:f7:92:cf:a9:da:1a:a0:b6:95:7e:41:9b:82:34:
1c:af:1d:bd:a7:cf:7c:25:f5:84:89:30:7b:61:9f:
77:c4:39:2f:67:55:87:30:30:ea:30:c6:96:42:89:
e6:88:f3:66:c3:73:f6:2f:23:2e:1e:b7:a7:ab:e6:
97:dc:38:f4:71:49:2a:ef:45:db:9e:a6:11:e6:41:
64:8c:61:fd:f4:61:d2:4c:3a:ff:b6:22:e2:d1:b7:
72:a0:7e:2f:f0:4f:a0:c0:52:65:cd:49:5a:50:b1:
72:42:80:52:0e:bc:91:68:c4:72:b9:f1:c6:17:e9:
74:c0:f6:e6:e2:b9:45:83:af:0c:83:d5:e6:51:6f:
98:9c:56:44:db:13:14:6d:b6:92:e2:82:d7:e2:a2:
91:6b:1b:45:39:a4:19:f5:85:cd:e2:74:c8:6a:20:
3f:86:1e:aa:2d:4c:e4:27:e8:43:a7:18:cd:77:79:
99:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:00:20:C6:01:1E:0A:06:56:F7:5E:5D:5F:C8:3D:C7:27:F8:D6:CF
X509v3 Authority Key Identifier:
keyid:CB:69:27:B1:69:E3:D0:F5:CB:94:B3:43:38:19:92:F4:85:36:C8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2knsWnj0PXLlLNDOBmS9IU2yFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0b709f-53ab-49c9-8b83-5ae957f2cdbb/1/y2knsWnj0PXLlLNDOBmS9IU2yFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0b709f-53ab-49c9-8b83-5ae957f2cdbb/1/y2knsWnj0PXLlLNDOBmS9IU2yFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:62:69:8b:fa:ae:d1:32:44:e6:87:c1:89:1a:64:77:f1:26:
84:0b:64:82:74:a1:b7:1d:9d:a4:85:f2:f5:8c:f2:73:79:08:
f8:d8:39:5e:fd:27:50:ba:07:83:26:bf:c0:24:1c:cd:a2:8b:
d9:53:7f:bf:ef:6f:07:a2:f2:ca:de:9a:1d:1b:cd:93:00:61:
2e:b5:b9:07:5c:5b:13:84:29:b0:c6:e7:72:bb:37:fd:30:32:
95:3e:d8:92:c2:f3:36:e6:b4:b4:16:d8:bc:db:6c:92:5d:dd:
00:2a:a9:d9:b2:6c:ed:bc:66:c4:22:c8:9b:69:f7:65:1f:d6:
ed:f6:5a:b9:c1:79:fd:96:cf:96:59:e2:0b:5f:1c:3d:02:86:
7f:48:fc:2c:4e:50:e8:38:18:28:c0:01:f2:b1:f5:dd:fb:67:
12:51:21:e2:b4:e3:23:59:7b:47:20:9c:78:42:10:dc:29:17:
ff:96:29:e7:a5:06:d5:3d:f0:7c:df:0c:82:c7:b4:e6:5e:26:
95:4e:a8:e0:ed:59:84:5e:b2:37:a1:8f:ae:1a:02:16:6f:dc:
96:2a:b1:b2:6c:b6:a1:8b:ec:75:65:61:f7:6b:8e:aa:1c:6f:
ad:b7:ee:e2:50:9e:bc:63:20:ab:e8:82:3a:d6:55:69:03:e1:
3f:b5:0c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:09:02 2025 by rpki-client