Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0c6181-218f-400a-bb70-8c523a5bba78/1/y45sWpKLpIynL3B7t5TeSdcKDnc.mft
File: y45sWpKLpIynL3B7t5TeSdcKDnc.mft (raw, json)
Hash identifier: zOXoDP2ZlPKgPJ+IZNbsTW+DTHn8PqzPxU2J4mfBisY=
Subject key identifier: F4:52:0C:6E:DC:E8:83:6E:44:5E:F7:6C:61:8C:7C:41:6A:61:F9:EA
Authority key identifier: CB:8E:6C:5A:92:8B:A4:8C:A7:2F:70:7B:B7:94:DE:49:D7:0A:0E:77
Certificate issuer: /CN=cb8e6c5a928ba48ca72f707bb794de49d70a0e77
Certificate serial: 0195E15975771145555E26493A2372B1DC71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y45sWpKLpIynL3B7t5TeSdcKDnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0c6181-218f-400a-bb70-8c523a5bba78/1/y45sWpKLpIynL3B7t5TeSdcKDnc.mft
Manifest number: 14C0
Signing time: Sat 29 Mar 2025 10:01:31 +0000
Manifest this update: Sat 29 Mar 2025 10:01:31 +0000
Manifest next update: Sun 30 Mar 2025 10:01:31 +0000
Files and hashes: 1: kkts0LAJgV8FKzhVvhfU6qpl47g.roa (hash: BwAkSfoe7dBZj+3QP1g2LSE08T2ewWsUf0QmdlkTQ/w=)
2: y45sWpKLpIynL3B7t5TeSdcKDnc.crl (hash: Hrjkac1F9rnEzDYPXD3OXY++H3JD1cRZI19uFDfKvbI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:75:77:11:45:55:5e:26:49:3a:23:72:b1:dc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb8e6c5a928ba48ca72f707bb794de49d70a0e77
Validity
Not Before: Mar 29 10:01:31 2025 GMT
Not After : Mar 30 10:01:31 2025 GMT
Subject: CN=f4520c6edce8836e445ef76c618c7c416a61f9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:49:ea:f4:54:ff:f5:43:af:8c:0f:b2:98:fd:
e6:0c:09:9d:d0:f0:b5:5e:a8:bb:bc:21:8f:21:bd:
27:30:40:6c:f1:93:3f:86:b2:56:ea:86:50:2b:dc:
c4:49:3a:76:86:3a:99:9c:52:49:14:89:eb:4b:09:
b1:b7:7b:e1:6a:10:c7:43:68:76:1d:a8:7b:bd:bf:
d8:83:72:08:1e:18:d2:e7:bb:b8:68:44:c5:d8:da:
be:65:7e:5c:35:bc:19:cd:1a:fc:2f:71:b3:16:ae:
73:2a:49:45:8e:47:a2:62:89:19:75:ab:0e:0c:aa:
e6:51:6b:87:30:ea:fe:81:5d:32:2f:5e:7b:e4:aa:
58:25:73:c7:db:be:28:76:d4:76:dd:9d:3e:6a:5c:
71:03:ee:5c:e2:58:e7:7c:a0:05:e4:58:a3:a5:f9:
8a:ac:ac:96:2a:bb:d5:0a:54:85:9c:20:5b:91:03:
e4:3b:61:61:01:7d:3e:af:e1:f8:81:05:cf:c2:90:
32:1b:cc:de:36:0c:c6:d2:98:ce:df:f2:ea:6e:28:
42:65:d9:5f:a9:2a:5b:eb:85:35:55:07:2e:77:c7:
5b:e6:f9:d6:2d:89:83:2f:a1:21:ba:ec:ff:31:26:
cb:e0:b8:36:36:18:6f:59:eb:b7:74:1a:ab:9f:64:
d3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:52:0C:6E:DC:E8:83:6E:44:5E:F7:6C:61:8C:7C:41:6A:61:F9:EA
X509v3 Authority Key Identifier:
keyid:CB:8E:6C:5A:92:8B:A4:8C:A7:2F:70:7B:B7:94:DE:49:D7:0A:0E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y45sWpKLpIynL3B7t5TeSdcKDnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0c6181-218f-400a-bb70-8c523a5bba78/1/y45sWpKLpIynL3B7t5TeSdcKDnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0c6181-218f-400a-bb70-8c523a5bba78/1/y45sWpKLpIynL3B7t5TeSdcKDnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ed:d9:87:fc:0f:b5:c3:1e:26:a1:d8:20:34:da:80:6e:74:
f1:07:ca:1f:cf:a4:aa:b1:d8:8e:2e:00:a9:6e:ca:56:c3:c7:
70:16:68:3f:57:3c:03:57:64:2a:fb:05:5e:6d:d8:90:49:9a:
41:b9:91:89:4b:b0:70:1e:96:ae:08:45:eb:e9:42:17:e6:14:
41:ce:e3:9a:ad:48:60:1e:2b:e0:aa:32:17:7e:b7:14:50:d4:
22:25:52:a8:dd:63:5d:84:cc:6c:a5:8a:37:d0:74:88:77:aa:
75:a5:9b:36:f5:72:39:3a:d5:05:9e:d5:7c:ac:11:66:11:65:
d4:90:81:62:3a:62:69:29:32:a2:d3:c2:a7:b3:6f:42:26:95:
e4:46:82:56:b2:81:14:7a:82:31:48:e1:61:9a:12:95:77:81:
7b:98:fc:98:17:b1:57:7f:ec:c9:f5:43:f8:36:29:d1:5c:1d:
10:b3:df:95:d5:41:90:a8:76:0e:8c:c5:84:3b:ec:bf:ae:c0:
c9:5a:ba:b3:15:7d:d6:65:b4:b7:08:e3:6e:8a:98:4b:48:6b:
5d:c5:a7:45:2e:5b:55:0a:0b:89:0d:46:91:a2:66:08:72:b2:
f4:ce:64:d7:8b:ba:63:76:57:19:99:73:69:a0:f0:72:b2:d8:
9a:f2:6e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:04:51 2025 by rpki-client