Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/2709b0-f269-46be-afde-d56b36bdfc97/1/y3fzqtFUx-X6ZSTattIYhV0Xrfc.mft
File: y3fzqtFUx-X6ZSTattIYhV0Xrfc.mft (raw, json)
Hash identifier: jWQ80ryvWyn0DrXcEmwdIIEyuUkbyDTxBMEFMjlrylM=
Subject key identifier: 98:C6:F6:85:C2:DC:7F:1A:F2:C0:26:C6:82:0E:9D:CC:AB:12:7F:46
Authority key identifier: CB:77:F3:AA:D1:54:C7:E5:FA:65:24:DA:B6:D2:18:85:5D:17:AD:F7
Certificate issuer: /CN=cb77f3aad154c7e5fa6524dab6d218855d17adf7
Certificate serial: 018F2D2A1A76C2AB40B6D234481049A9742A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y3fzqtFUx-X6ZSTattIYhV0Xrfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/2709b0-f269-46be-afde-d56b36bdfc97/1/y3fzqtFUx-X6ZSTattIYhV0Xrfc.mft
Manifest number: 0D1B
Signing time: Tue 30 Apr 2024 04:01:24 +0000
Manifest this update: Tue 30 Apr 2024 04:01:24 +0000
Manifest next update: Wed 01 May 2024 04:01:24 +0000
Files and hashes: 1: KY-8tyxm8krun-KcnLj1YGl4-Ss.roa (hash: tdhsl9bzRHCl9P43Dk8MItRy+yi11GJdg7XgF4mepA0=)
2: y3fzqtFUx-X6ZSTattIYhV0Xrfc.crl (hash: innLICt267BfR56gPZe1aR4WfvKR5LJi1vSrxqq7Z4s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2d:2a:1a:76:c2:ab:40:b6:d2:34:48:10:49:a9:74:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb77f3aad154c7e5fa6524dab6d218855d17adf7
Validity
Not Before: Apr 30 04:01:24 2024 GMT
Not After : May 1 04:01:24 2024 GMT
Subject: CN=98c6f685c2dc7f1af2c026c6820e9dccab127f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d4:b7:c6:f5:04:b1:7c:cb:fa:4e:c0:ff:e3:
7a:90:ec:e5:6c:29:30:29:5f:80:92:74:57:da:b9:
66:bc:d3:7a:4e:c4:ee:44:d1:cd:98:bd:b4:4e:37:
ad:18:4b:38:d1:fe:c1:f5:74:0b:ce:f4:cf:de:39:
e9:46:15:a4:33:9c:70:3a:78:50:a9:92:bd:ef:42:
8c:f1:71:ea:29:03:36:df:e1:17:70:6c:2d:ed:f2:
9f:6c:75:2c:13:0c:6e:4c:25:85:a4:29:45:78:59:
11:0e:c9:75:ab:09:c2:4e:91:4b:3f:12:bf:41:50:
6d:43:75:f2:9f:19:61:d8:21:96:f7:e5:d7:a9:50:
fe:42:2e:fe:d5:e5:23:01:05:fc:b1:ea:12:0e:06:
35:b8:02:59:d7:05:3c:55:54:21:8c:05:c7:4b:cc:
80:03:dc:c3:5f:2b:65:e1:43:90:78:3b:bf:1c:c9:
7a:92:5d:0f:fc:05:47:12:17:16:9e:3e:98:25:af:
37:18:a7:be:d0:9b:b3:08:69:ac:bf:95:41:5b:b6:
24:86:6d:96:05:3e:ba:72:16:c4:8e:39:73:ab:57:
0b:b5:6b:95:ab:2d:ac:a9:da:57:6c:1e:a4:76:fb:
04:ea:54:51:21:b0:8d:fa:b8:84:f0:99:c2:b6:8a:
2b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C6:F6:85:C2:DC:7F:1A:F2:C0:26:C6:82:0E:9D:CC:AB:12:7F:46
X509v3 Authority Key Identifier:
keyid:CB:77:F3:AA:D1:54:C7:E5:FA:65:24:DA:B6:D2:18:85:5D:17:AD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y3fzqtFUx-X6ZSTattIYhV0Xrfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2709b0-f269-46be-afde-d56b36bdfc97/1/y3fzqtFUx-X6ZSTattIYhV0Xrfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2709b0-f269-46be-afde-d56b36bdfc97/1/y3fzqtFUx-X6ZSTattIYhV0Xrfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:cd:4f:ef:3c:08:34:2c:11:90:83:6d:8f:e1:43:d5:cd:a8:
2e:04:29:85:a6:76:9b:e5:70:33:49:fb:af:ab:fb:24:c2:f1:
ac:5b:ea:c5:ef:ef:81:79:61:03:2e:11:01:27:b9:6d:fd:28:
92:2b:2f:b3:86:00:00:98:22:80:ff:2f:f4:3e:9c:99:50:4e:
bc:95:ff:bd:45:7c:e2:46:42:f6:56:10:0a:d1:90:e4:39:3b:
9f:e7:de:7e:f0:b8:1c:a4:7d:fd:f1:55:17:24:6a:5d:3c:fd:
7a:52:c5:b1:4a:46:c7:40:0e:50:04:a4:35:09:66:bc:1a:9a:
f9:d8:49:9b:4b:95:ed:24:b9:aa:54:dc:2b:15:56:8b:ff:fd:
f5:d2:88:93:f9:04:b5:e1:0e:af:31:43:9e:0b:42:ed:19:83:
6f:27:83:98:ec:4f:be:04:48:34:6b:ef:bb:34:97:14:93:5d:
a6:70:d8:72:d1:e6:50:6e:bf:e8:89:47:21:ab:da:b4:a1:01:
77:a6:39:0f:08:05:f6:af:39:66:1b:21:0b:3a:a1:17:bd:f1:
26:c9:f6:60:28:61:5e:e5:66:e7:b7:90:b3:82:d4:52:ab:69:
d0:c2:59:24:64:d7:28:68:50:3e:c0:97:06:85:d1:83:8f:f0:
23:86:63:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:11:03 2025 by rpki-client