Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft
File: Y01u7EA-_4a0D5xZgJHdQwKppyE.mft (raw, json)
Hash identifier: Iu/GRRHc6vl9Ym793ccugWqgW9nfYdCGOv2F/B84cHs=
Subject key identifier: C6:CE:A4:A1:82:82:78:25:98:09:85:7C:19:B4:E6:37:4E:14:9D:67
Authority key identifier: 63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21
Certificate issuer: /CN=634d6eec403eff86b40f9c598091dd4302a9a721
Certificate serial: 0196D889C2C24EA1806FB0821DC90A1D17D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft
Manifest number: 0861
Signing time: Fri 16 May 2025 10:00:28 +0000
Manifest this update: Fri 16 May 2025 10:00:28 +0000
Manifest next update: Sat 17 May 2025 10:00:28 +0000
Files and hashes: 1: UZAf8A9-pMDfvYbHB760wm3mim8.roa (hash: j34ASxN7++MCsv3IXa3rAjo5KvWthukAGWu5QUJzwPY=)
2: Y01u7EA-_4a0D5xZgJHdQwKppyE.crl (hash: /VgsrwLwk/cT6UOGYikD6wBwEIsiV0I5g7n7VDikj8A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:89:c2:c2:4e:a1:80:6f:b0:82:1d:c9:0a:1d:17:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=634d6eec403eff86b40f9c598091dd4302a9a721
Validity
Not Before: May 16 10:00:28 2025 GMT
Not After : May 17 10:00:28 2025 GMT
Subject: CN=c6cea4a1828278259809857c19b4e6374e149d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:09:c4:97:69:71:7e:cd:e1:69:8b:a7:3c:a3:
f2:3b:8d:97:e8:a2:c2:f0:f5:e7:67:2b:a1:e1:43:
1d:c7:a4:15:39:3b:37:e7:4d:b9:40:b8:ff:04:a7:
70:42:8c:15:26:73:e5:94:0f:6b:05:e4:49:1f:99:
17:b6:4c:10:d2:f1:73:41:15:af:91:4e:5f:cc:f1:
1c:18:18:2e:28:33:da:b8:67:8a:11:de:26:f7:10:
db:2e:64:51:9d:02:9e:b9:f9:d7:1d:cd:aa:53:d3:
07:2c:93:79:d6:7a:03:cb:bd:8b:4d:74:5d:09:2f:
a8:05:db:9f:02:e9:f9:d2:65:d4:7c:bc:d4:e0:fb:
98:f1:6b:5c:75:45:57:32:b8:8a:e3:47:7b:dc:9c:
fe:ce:db:0b:55:e8:a1:55:84:3a:0d:14:41:fa:69:
73:18:45:4a:57:38:70:05:73:01:6d:46:cd:f2:38:
dd:ed:b2:c0:df:2c:14:25:eb:33:a1:42:0c:9d:fc:
56:90:5b:6d:43:76:b3:89:58:07:fd:cf:2c:d7:7f:
e6:be:90:01:de:b2:7c:20:ed:5b:fd:01:86:c7:53:
c0:f3:97:9b:67:aa:7d:0b:47:dc:d2:a2:60:09:1c:
e9:59:a7:af:27:2b:ee:45:22:f2:a3:f4:09:9f:75:
98:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CE:A4:A1:82:82:78:25:98:09:85:7C:19:B4:E6:37:4E:14:9D:67
X509v3 Authority Key Identifier:
keyid:63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:28:6b:d5:ce:5f:01:58:3c:ec:d9:81:66:4c:bf:8b:67:f3:
4b:e0:bd:ef:4b:07:bc:77:ac:37:ed:33:e2:c5:3d:11:6a:ca:
d4:61:91:54:59:24:5e:56:d1:c8:b6:5c:b8:bb:98:57:c4:2e:
63:d3:0e:44:df:1b:66:31:e2:41:a1:6e:8c:3c:c3:69:58:11:
f6:f2:91:e0:b7:e4:59:25:62:33:95:e3:cf:c8:53:98:2c:a2:
7d:61:14:25:58:d0:90:2d:95:f0:47:e2:71:87:8f:62:76:fb:
5e:45:21:eb:6e:18:2b:7b:67:c9:4b:48:64:fc:3d:b0:18:f0:
56:e9:50:b5:cb:59:8c:aa:27:35:d2:46:6a:97:b6:e8:b5:bd:
7f:6c:07:1d:1a:43:c8:d1:c9:35:40:91:a2:18:5a:80:49:eb:
6a:c6:59:94:f5:81:68:c6:6a:72:8c:75:bd:cf:d9:6d:06:d1:
18:fb:3a:75:a1:5b:9d:86:21:97:c1:dd:c1:90:c8:8e:a9:df:
68:fe:52:34:e7:c4:6e:b6:79:63:56:38:ec:20:15:ca:3d:7e:
10:4e:f0:e5:65:9a:3a:0f:4c:7e:e7:aa:d4:cb:c8:da:09:04:
53:9f:b0:dd:91:ce:43:1d:1d:85:fb:cf:c0:45:25:b6:70:94:
ef:e0:e1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:49:57 2025 by rpki-client