Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3a6650-32c9-405f-8510-da491957b015/1/y3K6uX16K5Z1xzVOVhxdakiA0ds.mft
File: y3K6uX16K5Z1xzVOVhxdakiA0ds.mft (raw, json)
Hash identifier: m0/QmfONMkm5DEDYb54Lm2EIU3qz6UZzlZbZKQjxQ3c=
Subject key identifier: 03:8A:FA:B2:F3:23:4A:E1:C1:61:F4:AD:CD:B3:02:C4:92:0D:55:2B
Authority key identifier: CB:72:BA:B9:7D:7A:2B:96:75:C7:35:4E:56:1C:5D:6A:48:80:D1:DB
Certificate issuer: /CN=cb72bab97d7a2b9675c7354e561c5d6a4880d1db
Certificate serial: 019231DA90BC5B21BDEA39599ED6BDECDA5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y3K6uX16K5Z1xzVOVhxdakiA0ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3a6650-32c9-405f-8510-da491957b015/1/y3K6uX16K5Z1xzVOVhxdakiA0ds.mft
Manifest number: C5
Signing time: Fri 27 Sep 2024 05:01:00 +0000
Manifest this update: Fri 27 Sep 2024 05:01:00 +0000
Manifest next update: Sat 28 Sep 2024 05:01:00 +0000
Files and hashes: 1: y3K6uX16K5Z1xzVOVhxdakiA0ds.crl (hash: pB1YkJPhg1791h0IX/gioXalkFTfDKSh6PjnGZGwjUw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:31:da:90:bc:5b:21:bd:ea:39:59:9e:d6:bd:ec:da:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb72bab97d7a2b9675c7354e561c5d6a4880d1db
Validity
Not Before: Sep 27 05:01:00 2024 GMT
Not After : Sep 28 05:01:00 2024 GMT
Subject: CN=038afab2f3234ae1c161f4adcdb302c4920d552b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:38:1c:74:3f:fb:2d:e0:19:97:83:15:da:
3b:03:2e:09:b3:69:cc:e7:41:5d:a6:c4:9f:5c:9a:
fc:9f:38:f4:4d:67:28:e1:15:e8:7a:7c:f2:21:e8:
ce:24:6a:0d:10:e0:4d:8e:a7:57:f9:a9:69:c1:9d:
36:36:05:56:43:6e:6c:d2:ed:bc:4f:9a:4d:c9:41:
4c:04:b5:cc:eb:00:d8:77:08:0f:6b:95:00:a6:b0:
a1:b4:15:f9:cd:d9:a3:2a:76:44:03:11:1d:19:ca:
a6:e7:d4:ef:9b:f6:33:8a:a3:f3:35:0b:8f:7b:72:
4c:54:25:10:fe:8f:8e:23:52:f1:ae:4f:02:cc:1f:
0c:30:15:33:96:4b:10:1e:aa:80:35:cf:6f:c9:4c:
5f:23:f7:47:09:dc:4d:91:a0:fd:61:88:0b:fa:d6:
dc:3a:9e:7b:e0:b6:1c:7c:c9:73:39:aa:64:7f:65:
7e:da:ca:f9:d2:0d:20:d8:95:63:19:71:24:d0:63:
4e:87:6e:b1:e4:18:e4:4d:31:d4:7c:ff:95:52:d8:
eb:30:45:24:a0:13:bc:13:53:5c:89:7b:46:fc:e7:
45:00:34:b5:35:15:9a:07:ca:33:fe:12:87:7e:78:
04:48:84:37:94:b3:68:2d:63:97:c3:65:a4:0f:3d:
31:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8A:FA:B2:F3:23:4A:E1:C1:61:F4:AD:CD:B3:02:C4:92:0D:55:2B
X509v3 Authority Key Identifier:
keyid:CB:72:BA:B9:7D:7A:2B:96:75:C7:35:4E:56:1C:5D:6A:48:80:D1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y3K6uX16K5Z1xzVOVhxdakiA0ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3a6650-32c9-405f-8510-da491957b015/1/y3K6uX16K5Z1xzVOVhxdakiA0ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3a6650-32c9-405f-8510-da491957b015/1/y3K6uX16K5Z1xzVOVhxdakiA0ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:d7:ed:3c:00:f9:b1:3b:6e:00:53:76:5b:1d:2a:2c:04:ff:
34:a1:22:9c:fa:bf:6f:8c:0a:53:67:a1:b5:ba:49:ae:4e:57:
8b:8d:80:ff:8a:21:5e:6c:e6:b6:79:6e:d6:96:a9:3b:97:a5:
73:0f:44:94:c8:37:d7:5d:2c:00:04:19:7b:b5:7e:34:2f:7a:
a7:16:d3:ae:8f:12:c1:b3:d4:8f:54:78:82:85:ff:70:78:d2:
ab:f1:78:24:20:cc:b3:98:81:8f:79:d9:40:28:87:8c:7f:15:
d0:67:20:d1:8d:37:95:95:9c:0e:a8:25:da:ad:8d:12:44:30:
25:60:e7:dc:b3:7a:8a:c0:0c:82:70:c1:fd:32:9c:31:7d:c4:
a8:2d:9e:30:50:30:f1:d3:f0:1a:67:55:6b:97:ae:bc:12:02:
25:35:b3:81:43:b6:d2:65:a6:a6:a7:3c:16:79:69:d5:ad:da:
f8:99:3f:4a:47:b6:6b:ec:51:6e:21:49:e8:db:0b:da:7e:72:
10:ae:c3:b3:e4:61:94:5b:6e:0e:5e:9e:7e:20:d7:80:a0:85:
63:7d:0a:10:ce:e7:69:6a:2d:08:12:d4:6c:46:9b:6a:dc:e6:
86:25:f0:da:a9:46:77:62:cd:7c:03:0e:59:d2:4b:d8:30:d7:
22:07:6c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:27 2025 by rpki-client