Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8f95cd-a797-4780-855c-7e42c15a8a1d/1/y-wkh-l6aZtUUaQp593a8pW1I_E.mft
File: y-wkh-l6aZtUUaQp593a8pW1I_E.mft (raw, json)
Hash identifier: 4myNTYJ9tYpYKPGLeX75Fy9R65oUyIBxrXp2qwmopww=
Subject key identifier: DF:AB:01:E9:9C:78:BA:2A:48:52:8B:07:43:34:D1:80:81:B3:B0:FF
Authority key identifier: CB:EC:24:87:E9:7A:69:9B:54:51:A4:29:E7:DD:DA:F2:95:B5:23:F1
Certificate issuer: /CN=cbec2487e97a699b5451a429e7dddaf295b523f1
Certificate serial: 018BFA56A49A8572F706C214C77185B805B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-wkh-l6aZtUUaQp593a8pW1I_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8f95cd-a797-4780-855c-7e42c15a8a1d/1/y-wkh-l6aZtUUaQp593a8pW1I_E.mft
Manifest number: 0770
Signing time: Thu 23 Nov 2023 04:01:04 +0000
Manifest this update: Thu 23 Nov 2023 04:01:04 +0000
Manifest next update: Fri 24 Nov 2023 04:01:04 +0000
Files and hashes: 1: umurG5d5064RXjGp-JVqwO5rLdY.roa (hash: Jrk+lB3G/aP2OcluAfgIe5dqKwSsF6KmgsTIfzbpNaI=)
2: y-wkh-l6aZtUUaQp593a8pW1I_E.crl (hash: epeztoebfX153ol0JZz3j2xO86ociOInA2KNFw9xhUU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fa:56:a4:9a:85:72:f7:06:c2:14:c7:71:85:b8:05:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbec2487e97a699b5451a429e7dddaf295b523f1
Validity
Not Before: Nov 23 04:01:04 2023 GMT
Not After : Nov 24 04:01:04 2023 GMT
Subject: CN=dfab01e99c78ba2a48528b074334d18081b3b0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ad:51:0b:4e:c3:5c:1e:f2:d8:41:19:3e:61:
8d:a0:06:6e:ad:61:a8:c9:83:e7:64:1d:5b:ea:be:
78:45:79:67:03:06:71:96:39:91:71:24:40:5d:d5:
c6:4d:85:ea:74:ac:36:53:38:6d:13:fb:f9:74:e0:
4c:45:22:7c:27:82:f7:d3:1c:2c:43:b0:4e:96:a5:
55:87:22:f7:90:19:39:bc:c6:10:b7:30:b9:23:f2:
fd:b7:93:31:ca:8e:75:0f:26:d2:1a:c0:ec:da:98:
68:c7:e6:58:09:de:12:5b:b6:ef:d8:17:47:2e:46:
59:e5:b5:fb:63:ec:52:43:cf:cd:49:cc:4f:d6:75:
76:66:73:05:53:a5:b7:08:60:b6:fc:5c:a1:82:2a:
49:ee:ec:68:83:52:b9:56:d6:62:56:05:58:a3:ca:
33:77:8d:97:f8:41:96:f7:a4:8e:43:54:19:6b:7a:
d8:2a:6a:1e:70:01:6b:74:93:11:2f:bb:af:ec:2e:
65:83:ac:f0:11:24:79:81:b9:52:34:ea:04:88:3e:
50:27:3e:a7:32:b4:02:21:55:ff:a2:05:74:14:11:
1b:a2:db:2d:11:cc:4a:2f:7a:23:02:ad:03:14:20:
d5:35:59:b6:e9:6f:0c:09:1d:17:da:1e:a7:42:df:
a2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AB:01:E9:9C:78:BA:2A:48:52:8B:07:43:34:D1:80:81:B3:B0:FF
X509v3 Authority Key Identifier:
keyid:CB:EC:24:87:E9:7A:69:9B:54:51:A4:29:E7:DD:DA:F2:95:B5:23:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-wkh-l6aZtUUaQp593a8pW1I_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8f95cd-a797-4780-855c-7e42c15a8a1d/1/y-wkh-l6aZtUUaQp593a8pW1I_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8f95cd-a797-4780-855c-7e42c15a8a1d/1/y-wkh-l6aZtUUaQp593a8pW1I_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:57:f2:23:40:11:ce:b9:69:82:49:b8:61:0f:d9:92:d1:a7:
be:f4:6d:25:e9:9a:a7:e3:18:1a:85:3b:c2:25:0d:a0:82:26:
8a:26:59:42:57:f9:44:03:1e:f7:a3:e4:d3:f1:07:52:ed:00:
f6:bb:8b:d6:98:c9:9a:9d:02:bf:84:0a:c4:33:6f:86:62:9c:
52:a5:7d:52:93:29:31:69:1e:a6:b0:33:51:27:14:e0:3c:a2:
37:48:13:3f:e5:93:7d:f3:22:0e:4c:e4:ce:f5:34:98:8a:c9:
e3:8f:22:3e:a9:e9:34:f7:34:80:30:83:9a:3c:57:0d:59:18:
dd:07:a3:9f:90:62:d0:e2:d6:69:fe:42:20:4a:b3:5a:ef:fa:
c8:32:90:05:ef:18:22:ba:9e:67:20:af:21:4e:84:f6:38:22:
97:05:bb:97:93:bb:d1:8a:cb:61:42:67:1f:4a:77:1e:bc:e6:
ba:f4:21:b0:2c:a5:09:4c:b4:60:31:83:ab:67:31:0c:c2:8a:
f1:85:c9:d3:ad:79:90:57:58:f4:21:21:e2:5d:68:aa:89:3c:
3f:a3:64:9f:1f:d5:b2:82:80:c9:19:3c:d4:19:ea:b7:a5:9d:
6d:a6:91:a8:06:4d:a4:5f:7d:18:08:d9:cb:53:fb:e2:13:c6:
e5:c3:94:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:36:03 2025 by rpki-client