Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0b709f-53ab-49c9-8b83-5ae957f2cdbb/1/y2knsWnj0PXLlLNDOBmS9IU2yFU.mft
File: y2knsWnj0PXLlLNDOBmS9IU2yFU.mft (raw, json)
Hash identifier: W1V4HhPzxRcCxEyCzTPLDmnA0U9BtbEwEpaAfHxm+84=
Subject key identifier: A1:1F:5F:A0:40:A6:AB:5D:0E:5F:D7:83:F5:DF:68:D7:F9:63:36:BD
Authority key identifier: CB:69:27:B1:69:E3:D0:F5:CB:94:B3:43:38:19:92:F4:85:36:C8:55
Certificate issuer: /CN=cb6927b169e3d0f5cb94b343381992f48536c855
Certificate serial: 019407590F25D04BCBE11E936BDAD4F54F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2knsWnj0PXLlLNDOBmS9IU2yFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0b709f-53ab-49c9-8b83-5ae957f2cdbb/1/y2knsWnj0PXLlLNDOBmS9IU2yFU.mft
Manifest number: 0B51
Signing time: Fri 27 Dec 2024 09:01:04 +0000
Manifest this update: Fri 27 Dec 2024 09:01:04 +0000
Manifest next update: Sat 28 Dec 2024 09:01:04 +0000
Files and hashes: 1: fRBwgy1K9bGKR9WYtSBQX2DRh6M.roa (hash: SZg3Y2zqtGN8BwO/QOMSeB1QWPqPhORil7K5PVsHpOU=)
2: y2knsWnj0PXLlLNDOBmS9IU2yFU.crl (hash: vJPsyN+6jBVo97+PpB7bcgQkEFb7uxK0NXCCvbnm75o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:59:0f:25:d0:4b:cb:e1:1e:93:6b:da:d4:f5:4f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6927b169e3d0f5cb94b343381992f48536c855
Validity
Not Before: Dec 27 09:01:04 2024 GMT
Not After : Dec 28 09:01:04 2024 GMT
Subject: CN=a11f5fa040a6ab5d0e5fd783f5df68d7f96336bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b8:a4:e8:df:c1:66:7f:54:6d:1f:d6:7a:0c:
07:2c:96:bb:aa:28:7e:50:3e:11:f7:37:1f:2f:1c:
de:95:8b:8d:b0:e8:10:a9:72:8a:08:04:4b:54:d9:
96:9a:2c:b7:da:21:a7:13:5a:5a:fe:45:23:2f:48:
c6:96:47:c7:1f:81:35:0e:3b:2e:10:d7:74:24:b0:
fe:99:42:b4:1a:bb:22:7a:75:05:51:eb:aa:05:c1:
c3:66:43:13:ad:4d:c8:af:06:03:08:38:2c:fd:97:
f8:b8:35:6e:ce:3f:d4:dd:11:18:62:97:48:1a:fe:
c7:3d:89:56:28:f5:cf:96:6b:a2:3b:96:4c:9e:c4:
ef:e9:b3:31:df:fd:f2:7b:1f:a4:8b:70:83:ef:be:
26:14:46:ec:d8:ec:e5:71:4c:86:04:1b:12:9a:48:
f5:a0:e8:90:57:6e:e1:1d:65:da:41:56:00:d4:39:
8c:ba:b1:93:f3:bf:fd:78:1e:8d:21:73:05:19:5a:
e8:01:1a:5d:24:c0:c3:45:9c:0e:3b:0b:bb:89:47:
80:3d:2a:94:40:97:61:a5:ef:f8:10:58:5e:b4:3b:
b6:c0:a1:01:7b:f0:f1:54:b0:01:82:64:36:58:42:
02:cd:82:0e:28:d7:71:1c:07:f0:60:e0:f2:45:f8:
c9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1F:5F:A0:40:A6:AB:5D:0E:5F:D7:83:F5:DF:68:D7:F9:63:36:BD
X509v3 Authority Key Identifier:
keyid:CB:69:27:B1:69:E3:D0:F5:CB:94:B3:43:38:19:92:F4:85:36:C8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2knsWnj0PXLlLNDOBmS9IU2yFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0b709f-53ab-49c9-8b83-5ae957f2cdbb/1/y2knsWnj0PXLlLNDOBmS9IU2yFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0b709f-53ab-49c9-8b83-5ae957f2cdbb/1/y2knsWnj0PXLlLNDOBmS9IU2yFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ed:2f:54:0c:c9:3c:fd:f2:4e:a3:ff:1b:c6:4c:a9:6c:59:b1:
0c:dd:5c:e4:7a:81:69:7e:2f:5f:b5:29:47:00:3c:11:ef:8b:
66:bf:77:5d:f7:f5:75:65:b5:75:9c:8f:3f:d4:f1:46:a4:f9:
69:44:5d:8c:63:e3:98:49:bf:db:c5:2c:15:e6:4f:df:e3:ff:
66:de:40:79:3d:c3:55:99:4f:ca:a0:b1:2e:2a:bb:cf:a1:9e:
87:18:5d:59:a3:72:2d:80:6d:9a:5b:99:61:84:22:ce:55:4d:
80:d9:a1:0b:ae:0b:88:e1:02:3d:86:71:f8:be:76:13:3a:e3:
f1:46:b4:cb:3d:8a:1b:e5:b1:29:f6:6f:1a:8c:45:87:70:49:
f1:44:60:8a:66:8c:1e:fb:1d:50:da:3b:b3:d9:5b:d0:70:43:
8f:1d:36:34:ca:fd:80:df:2f:01:d6:1f:fc:73:44:5f:84:8b:
63:b0:b5:7b:f2:0f:0f:f6:4d:cd:34:d0:c0:f3:c9:3d:ce:b5:
d7:ca:05:54:17:1d:48:3c:81:70:d3:b8:93:cc:f9:ad:b7:fe:
4f:6f:b2:51:9f:37:d4:35:95:1b:ab:e8:ed:f3:c9:8e:b7:ea:
95:6a:47:54:d9:a1:91:77:31:75:0e:c6:5a:38:6a:c6:cd:e8:
32:8a:5e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:25:33 2025 by rpki-client