Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/bc2ba5-0d6b-4ae9-ad76-50764f377d14/1/y7Cobpj9j_o1A47rCKroUPuQnys.mft
File: y7Cobpj9j_o1A47rCKroUPuQnys.mft (raw, json)
Hash identifier: sWcpFtohvkXF5QLQ8kxI2dsbw8oEk3G0yGaCO5xfVmU=
Subject key identifier: F9:46:8D:E6:90:AA:D2:DA:8B:78:6B:4F:78:80:AD:A3:A7:F6:16:8E
Authority key identifier: CB:B0:A8:6E:98:FD:8F:FA:35:03:8E:EB:08:AA:E8:50:FB:90:9F:2B
Certificate issuer: /CN=cbb0a86e98fd8ffa35038eeb08aae850fb909f2b
Certificate serial: 01884FFBFBCFC4B1B6BA7B6EE8AED2A4F1D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7Cobpj9j_o1A47rCKroUPuQnys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/bc2ba5-0d6b-4ae9-ad76-50764f377d14/1/y7Cobpj9j_o1A47rCKroUPuQnys.mft
Manifest number: 0A72
Signing time: Wed 24 May 2023 22:58:13 +0000
Manifest this update: Wed 24 May 2023 22:58:13 +0000
Manifest next update: Thu 25 May 2023 22:58:13 +0000
Files and hashes: 1: R7Ffu7GpbgRgWA53glyG5xNZfsE.roa (hash: +VjyudQDBbGUaSZzSFzaRq/LTLdR8XVfTpYYuCVZKO8=)
2: RVpavK33LEycoox3-d3BLqndDmk.roa (hash: 9KG8MXMaphlS8ackQNlC1q4JPAIeoRL6nM8wWwGJrcI=)
3: y7Cobpj9j_o1A47rCKroUPuQnys.crl (hash: nxZmbTfpN/70t81f0sK7Gnd13xMtVzVjcMQTDWPc4XU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4f:fb:fb:cf:c4:b1:b6:ba:7b:6e:e8:ae:d2:a4:f1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb0a86e98fd8ffa35038eeb08aae850fb909f2b
Validity
Not Before: May 24 22:58:13 2023 GMT
Not After : May 25 22:58:13 2023 GMT
Subject: CN=f9468de690aad2da8b786b4f7880ada3a7f6168e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:67:cc:26:2a:7e:7a:28:a9:8a:77:01:24:7d:
fc:da:93:a3:97:00:a1:a5:8d:93:3b:e1:8c:5e:c1:
ae:67:36:aa:3a:d1:4c:70:87:e8:ac:a4:a5:de:ba:
b5:65:ea:e6:91:0e:e4:72:75:2b:b2:15:8e:0a:50:
7b:0f:2d:90:e5:8b:9c:8d:e8:19:99:13:1b:02:1a:
ec:1f:58:fd:ee:ef:4c:eb:af:52:91:bb:ab:de:62:
d6:98:ba:ec:9e:13:d9:e8:1e:53:5c:c6:7b:a5:ed:
9d:33:db:8d:54:df:14:be:31:48:cd:a5:aa:0d:c9:
28:b9:43:a8:af:9f:53:55:28:1c:3c:39:3a:8f:78:
d1:a0:85:a0:aa:cf:b7:2e:cc:02:8f:f1:32:88:23:
2e:fc:e2:f8:11:e1:f8:50:af:7a:5a:76:d6:6f:46:
db:53:a1:8e:b6:a9:a5:c9:6f:5b:a0:82:dc:f5:03:
fe:83:1b:f2:b1:9e:13:ec:36:89:2e:6d:4e:a0:c9:
e1:56:0f:5e:04:8f:49:49:10:a4:8f:92:1b:28:06:
ea:7b:9c:e4:16:bc:9c:7c:2d:f4:27:f8:8d:fd:91:
bf:54:f3:78:63:02:3f:ed:97:29:d2:60:a0:2b:63:
88:63:11:9a:a6:70:bf:c3:b9:45:68:d1:48:fb:39:
92:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:46:8D:E6:90:AA:D2:DA:8B:78:6B:4F:78:80:AD:A3:A7:F6:16:8E
X509v3 Authority Key Identifier:
keyid:CB:B0:A8:6E:98:FD:8F:FA:35:03:8E:EB:08:AA:E8:50:FB:90:9F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7Cobpj9j_o1A47rCKroUPuQnys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/bc2ba5-0d6b-4ae9-ad76-50764f377d14/1/y7Cobpj9j_o1A47rCKroUPuQnys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/bc2ba5-0d6b-4ae9-ad76-50764f377d14/1/y7Cobpj9j_o1A47rCKroUPuQnys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2a:87:eb:03:de:7e:a3:38:2e:c8:ea:83:e0:2b:91:d4:17:
ba:84:73:86:1f:4e:8b:77:b1:2b:23:53:e9:a4:35:5b:77:8b:
7a:47:c7:83:88:3d:d6:17:a2:ac:cd:76:7d:1c:5c:8c:cb:83:
4e:18:fb:5c:b5:28:b0:b0:a5:f1:ad:0d:11:06:42:d7:d9:59:
5f:16:d6:33:09:61:c1:9d:fb:cd:c6:93:64:de:42:99:24:63:
4c:bf:82:ce:20:58:48:04:1d:39:85:89:3e:57:ee:fd:bc:e3:
5d:84:3e:d5:0d:64:73:a5:db:e6:39:e2:b9:18:0d:de:f7:4a:
8c:7c:1d:bc:cb:e9:11:4b:29:ac:20:b1:78:f3:12:9a:6d:cb:
80:c0:97:c1:3a:ac:d2:9f:79:93:d5:ff:48:5a:da:6d:84:ce:
5c:83:d2:b7:58:82:87:3b:83:25:3d:63:5d:0e:25:33:38:ba:
79:65:5b:e5:fa:a6:c3:3f:dc:77:dd:14:2e:79:aa:f6:28:0a:
27:22:ab:2e:11:96:7b:cc:6b:24:b3:b8:5a:6d:df:87:d2:39:
56:86:0d:32:e6:f7:57:33:be:4b:44:9a:04:71:48:cb:af:52:
45:17:f7:2e:81:13:4f:1b:b0:85:ba:33:f0:36:78:ce:55:d2:
ca:4c:88:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:49 2025 by rpki-client