Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
File: y-tftzOrs-B9dfqA176csYE80-A.mft (raw, json)
Hash identifier: 1PdykOeTue2SVEM6+D0JOXySjYG91WZyhNzgtZeN3qs=
Subject key identifier: 81:16:E5:0C:41:EB:C4:E7:B5:76:5C:8F:8A:F6:26:03:85:24:5C:88
Authority key identifier: CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
Certificate issuer: /CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Certificate serial: 0195DFD9434AF439F4CD5B17954E75608251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
Manifest number: 0457
Signing time: Sat 29 Mar 2025 03:01:51 +0000
Manifest this update: Sat 29 Mar 2025 03:01:51 +0000
Manifest next update: Sun 30 Mar 2025 03:01:51 +0000
Files and hashes: 1: MwipPwUawCuJkrJRTiNh4fCkKto.roa (hash: 5ZpTx+e30gtrqh8BtmkNV18Y4nMljwf+6r/HDqn1lyA=)
2: y-tftzOrs-B9dfqA176csYE80-A.crl (hash: ZKyvxue5p/naD9lXj+0rcf6vyH9coZvmKcyoi5A+L6Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:43:4a:f4:39:f4:cd:5b:17:95:4e:75:60:82:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Validity
Not Before: Mar 29 03:01:51 2025 GMT
Not After : Mar 30 03:01:51 2025 GMT
Subject: CN=8116e50c41ebc4e7b5765c8f8af6260385245c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:82:44:bd:88:53:86:f7:c7:9e:35:67:7e:3c:
ca:fc:ee:5f:eb:e1:22:40:5f:9a:a3:58:65:7f:a9:
91:2b:89:cc:d1:37:ec:0b:81:4b:39:92:3d:bd:e5:
20:d5:7c:05:21:40:5a:84:d7:5f:a8:50:be:c7:44:
11:d1:34:67:75:f4:ff:3d:e2:09:a4:b6:66:a3:d6:
07:e7:9f:6c:21:b8:53:9e:ae:28:f2:d0:14:47:de:
3b:f9:3c:63:dd:f9:60:67:a9:87:5a:74:76:9e:10:
40:ba:e5:0e:8d:65:7f:5f:f3:3b:88:87:7d:19:ab:
6f:06:7f:89:83:88:f3:f4:c7:5a:4a:eb:f0:e0:34:
92:4d:f5:64:eb:15:01:71:6a:c7:56:c2:9c:0e:7a:
1d:f3:99:b4:22:e5:9e:be:ec:88:37:c3:68:eb:86:
80:8f:72:fa:4b:79:c0:0d:a0:cc:7c:52:5e:0b:72:
15:b5:94:64:cf:f3:9a:d7:67:09:a6:4a:c6:ea:2f:
aa:a9:c7:d0:df:4f:09:cc:79:02:e8:a5:99:25:c8:
ac:40:54:07:b5:0d:26:42:d7:1c:db:ed:f9:1b:f7:
a4:68:ac:b3:37:44:03:f1:6b:17:c8:14:d4:d8:9b:
2c:40:7d:5c:96:ad:29:d9:fc:69:4d:d0:e8:90:26:
2c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:16:E5:0C:41:EB:C4:E7:B5:76:5C:8F:8A:F6:26:03:85:24:5C:88
X509v3 Authority Key Identifier:
keyid:CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:96:f8:6c:82:f9:bf:a0:1b:b9:9f:d9:0c:df:04:5e:2d:0e:
39:13:a7:ed:ea:1b:d5:9e:a4:6a:4f:28:a4:82:e9:45:6d:54:
39:83:8f:2b:f1:5f:2f:9e:d4:44:9f:93:cd:74:d3:44:c1:74:
4b:cf:ca:8c:82:bc:4c:9c:22:38:c2:fd:31:a7:6b:70:ea:24:
69:5d:b2:5e:39:21:64:24:6f:41:0a:44:0e:dd:8f:07:2e:ed:
f4:60:24:6f:1e:70:c4:bf:ad:b1:77:2d:d1:4f:a9:8a:92:ff:
f6:4e:9d:dd:ac:a6:e6:0f:72:32:b4:94:c0:b6:eb:1d:3b:de:
f4:f7:63:d7:b3:bf:aa:93:f7:12:68:a0:a2:a1:36:54:44:89:
16:1d:3a:bb:be:3a:db:cc:7f:79:a2:75:8c:ed:0c:e6:ad:f4:
21:d8:e9:6f:5d:1b:ed:21:b3:e9:13:e3:c3:96:01:b7:87:65:
1c:ef:7f:59:b0:ac:4b:c9:14:bc:90:c8:59:ea:6f:6f:e5:31:
f7:2b:08:5d:12:c6:8b:03:8e:78:c2:5c:32:d5:63:8d:3e:91:
4b:8c:da:b1:1a:d2:cc:fc:ea:ed:f1:9e:02:b2:1f:57:cb:19:
d1:c0:ed:78:86:d8:e7:16:77:43:24:92:cc:52:23:e3:d8:fc:
50:38:3f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:36:36 2025 by rpki-client