Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/yPb13sCbx6EgMEVpm6BYKV0440Y.mft
File: yPb13sCbx6EgMEVpm6BYKV0440Y.mft (raw, json)
Hash identifier: ZGdYnpG6WDn+UghgOnKAQFLMBugqTasGSYHnXCQfxeg=
Subject key identifier: 6F:66:F8:8F:EB:10:33:65:7C:4B:A2:CC:23:37:2E:A8:8D:DF:48:51
Authority key identifier: C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
Certificate issuer: /CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Certificate serial: 018CAE95E0F6F0383C0E0924899812161184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/yPb13sCbx6EgMEVpm6BYKV0440Y.mft
Manifest number: 0D1A
Signing time: Thu 28 Dec 2023 04:01:47 +0000
Manifest this update: Thu 28 Dec 2023 04:01:47 +0000
Manifest next update: Fri 29 Dec 2023 04:01:47 +0000
Files and hashes: 1: 2wHwx53AaZsSYQj4wKw1mI2KXko.roa (hash: FPJ8G3x34zRheQnxxBbWNrXDtbCK8yRNdqk0WZl8ook=)
2: 5LnfbURgWimr8F-YI-VSyM7CXO8.roa (hash: DR8/omtulgApOdaoBxVf7F7xTPonfWpkFej/eWopPOo=)
3: GwBEBvAR3yW1yb3TXubMIRO8E1Q.roa (hash: iwDyoZXcE/TXKl3z0rK73Cx1hbzOwSV8XOCkWp4O6nQ=)
4: V-3XZqCs2B52hTBoKVo8yFxuQts.roa (hash: l6GyUT6Tk/ZMVfPNJMEXdyh7EJxIvVCfP6BdoZ5A/YI=)
5: _wxIpWqyIqcwT0jIFu3wHCtTeaU.roa (hash: xOk/21eFHjKuIzv68qQ9JRiKqa1DmIrIgWrxs+VwFgc=)
6: u7eVzy3nZcY96z3a3SxDjvtd-n8.roa (hash: xNoG9r1C894TrzFOQ9s2ttLTrtgtpstx0HfZc5TMdn8=)
7: vP2XIRxXZu3n6HMkgo_bxrja08I.roa (hash: 27UMiWkept90GDt3TlpgIhzAKXi7ZFBzyJvgogNoQ2w=)
8: wphPd9tKUrTLTYzUp52n0m2Peco.roa (hash: SooncV60gLtkhDvuSRl8K3GWYPLTeeozVnBqsUnxe0U=)
9: wwmauHS-PnCCwp0FY4mkzjMmXtA.roa (hash: /B29fJDdfq7kG6dby3pT36U9CLvboCPRzgG66gw+xBc=)
10: y4QVmAXcms0cdgo6XsesAJBVa2M.roa (hash: OEaqDCFI1Hn754G2KUdIgx5PpxfVH1tS9p9yajKssLk=)
11: yPb13sCbx6EgMEVpm6BYKV0440Y.crl (hash: iPD0XAvcF7UECZqH+iodRTl/gYPaVskg6uOjiMk+cIs=)
12: zNANJS2SOg4mEMYsA0mzzh-NTVc.roa (hash: Sk8uqP/wy5dRQMxkrppiKmjHGEFGiOvtOFEPkVOkZjU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ae:95:e0:f6:f0:38:3c:0e:09:24:89:98:12:16:11:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Validity
Not Before: Dec 28 04:01:47 2023 GMT
Not After : Dec 29 04:01:47 2023 GMT
Subject: CN=6f66f88feb1033657c4ba2cc23372ea88ddf4851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:9a:76:5a:eb:18:04:ba:31:c3:f3:08:15:
9b:31:ac:ea:23:7d:f0:02:56:65:2b:45:d2:a5:2a:
bf:48:7c:6f:e7:0d:83:5f:a1:53:42:cb:2e:44:62:
cc:cd:83:08:1e:68:69:e4:81:a5:c4:af:f8:d1:53:
35:92:cc:2f:1a:a9:29:12:6c:01:80:ff:5f:43:cb:
12:63:c5:90:33:3e:61:16:78:63:fc:82:82:2c:90:
81:a6:07:62:a7:54:7c:9a:ac:1d:b0:c1:e5:82:e3:
13:5e:8b:59:98:54:9d:f3:45:aa:5e:e2:e2:ba:16:
02:dc:48:8e:b2:a6:7c:fa:26:2d:72:bb:46:c0:e3:
36:b3:da:c8:23:88:fd:c9:da:23:f1:34:fd:d7:de:
00:b0:1f:4c:07:32:c8:d9:b4:1e:88:23:5b:55:15:
f7:fa:57:9e:40:13:ca:9c:30:d9:cd:30:19:5f:c1:
92:62:df:95:24:f4:63:72:b2:57:e5:1e:c7:70:48:
92:cb:78:39:fa:6e:a3:c7:e0:b2:9b:6f:d8:08:d5:
3e:cf:c3:2b:88:49:6d:1f:f4:2d:36:13:65:14:0d:
f8:9b:0c:cf:ef:bf:56:d9:0d:f1:ec:76:6b:8a:db:
f8:c3:7b:9f:84:fe:c2:c2:7b:7b:ac:18:71:c3:4d:
0e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:66:F8:8F:EB:10:33:65:7C:4B:A2:CC:23:37:2E:A8:8D:DF:48:51
X509v3 Authority Key Identifier:
keyid:C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/yPb13sCbx6EgMEVpm6BYKV0440Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/yPb13sCbx6EgMEVpm6BYKV0440Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:18:bb:d1:64:5f:60:d1:d1:93:25:15:f8:83:0a:49:ec:10:
1f:7e:dd:fc:fb:51:98:55:de:d5:66:c6:30:0d:bb:8d:d2:03:
5b:e8:e1:2d:c8:3b:a2:a9:bd:3f:95:2b:b2:50:ff:0f:64:94:
9b:87:86:53:22:b2:72:30:fb:c5:63:b8:ae:f4:5f:97:cd:e7:
16:3d:ad:e8:0d:4c:c0:c8:99:2e:de:42:51:c6:88:36:80:40:
3a:f1:05:7d:d9:00:be:3f:ca:9e:45:9c:73:cc:e6:18:3b:9e:
c4:72:cb:f3:97:a0:fb:9d:01:cc:1f:8f:59:08:74:d1:2f:80:
28:96:39:2e:59:c5:00:d2:6a:94:f2:36:1a:f2:7f:07:9b:50:
7e:b4:48:5e:f6:71:ef:16:5a:56:e0:fa:e5:3f:ec:75:fd:92:
17:c6:74:45:f0:dc:ed:90:b4:ff:23:84:40:33:19:4a:81:78:
b9:a9:25:9b:de:14:f5:fd:4b:41:42:16:a5:36:df:bf:0f:96:
07:8c:fd:7c:df:0a:d4:8a:bf:81:d5:27:18:fe:af:be:a6:85:
12:35:4b:8b:e0:f0:e8:8a:b2:70:1c:d7:d3:94:29:35:ae:39:
93:6f:f3:18:55:b9:cd:f7:76:e3:91:d2:d3:30:ce:6e:e1:2d:
f2:2f:15:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 18:39:40 2025 by rpki-client