Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b81499-be00-4e58-bde2-9a91dd2b03d9/1/Y4bd41wUj4l-nCddgGJ-CS6jwMc.mft
File: Y4bd41wUj4l-nCddgGJ-CS6jwMc.mft (raw, json)
Hash identifier: ppIqwDIKjzwu/ifbNXOJnPdRt9/etCKl2q7lhZmyBvQ=
Subject key identifier: 15:7B:B6:72:61:D1:65:CF:AE:FB:6E:0E:8E:B0:FF:8C:BC:19:8A:F0
Authority key identifier: 63:86:DD:E3:5C:14:8F:89:7E:9C:27:5D:80:62:7E:09:2E:A3:C0:C7
Certificate issuer: /CN=6386dde35c148f897e9c275d80627e092ea3c0c7
Certificate serial: 01941B84E84671651B7B5EEF4A701F0B600D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4bd41wUj4l-nCddgGJ-CS6jwMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b81499-be00-4e58-bde2-9a91dd2b03d9/1/Y4bd41wUj4l-nCddgGJ-CS6jwMc.mft
Manifest number: 13D9
Signing time: Tue 31 Dec 2024 07:01:22 +0000
Manifest this update: Tue 31 Dec 2024 07:01:22 +0000
Manifest next update: Wed 01 Jan 2025 07:01:22 +0000
Files and hashes: 1: Y4bd41wUj4l-nCddgGJ-CS6jwMc.crl (hash: sofp28RMJ6NV7hDrpG0mqXcJ6ba9zL6mmKcS7X3sfdo=)
2: qEt2NasBEmy5I3_U0Tqhyp_GRi0.roa (hash: 5tJo6wx0v1zsGQqNeVwXYRKbBk9j6lgU2vmvS3QlzFg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1b:84:e8:46:71:65:1b:7b:5e:ef:4a:70:1f:0b:60:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6386dde35c148f897e9c275d80627e092ea3c0c7
Validity
Not Before: Dec 31 07:01:22 2024 GMT
Not After : Jan 1 07:01:22 2025 GMT
Subject: CN=157bb67261d165cfaefb6e0e8eb0ff8cbc198af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f4:b9:78:48:d5:53:c8:98:da:fc:53:d4:8b:
f5:01:8b:ad:48:46:9b:86:bd:b6:dd:36:ff:36:29:
e3:76:6d:04:4b:98:46:bf:9d:10:03:54:9e:f7:e6:
59:96:11:c6:ad:f5:c5:e9:f9:03:5e:be:1c:0a:98:
a3:3b:31:b6:3b:c4:6f:b2:dd:58:82:4f:73:f8:43:
33:4c:e4:e2:1b:42:8b:e3:fd:3f:45:a9:75:6b:c7:
5e:9a:f0:ab:e2:e2:35:26:b2:1d:a4:06:7b:42:90:
5d:db:be:e5:db:cc:21:45:63:3e:4b:63:ab:57:9f:
37:1e:9d:e1:c8:7f:5a:23:18:dc:3e:8e:1a:22:ec:
db:94:4b:f3:f0:e6:e1:35:38:37:c9:f4:0d:21:a8:
14:7d:9b:27:74:ed:eb:93:95:fe:39:a6:65:fa:15:
ed:3c:87:31:b7:41:33:1b:97:04:14:11:e3:0f:b0:
b1:d4:ba:2d:44:f9:57:ff:be:dd:4d:17:2f:e3:8e:
5d:93:b0:1b:02:2e:0c:10:27:20:4d:28:27:88:40:
a1:d5:ef:b1:9f:dc:80:9f:32:e6:6b:ad:da:c3:39:
79:9f:c2:03:b9:9b:73:74:04:50:e1:02:57:73:cd:
08:86:a0:f0:6c:93:b1:ad:25:06:31:27:4f:f1:bf:
71:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7B:B6:72:61:D1:65:CF:AE:FB:6E:0E:8E:B0:FF:8C:BC:19:8A:F0
X509v3 Authority Key Identifier:
keyid:63:86:DD:E3:5C:14:8F:89:7E:9C:27:5D:80:62:7E:09:2E:A3:C0:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4bd41wUj4l-nCddgGJ-CS6jwMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b81499-be00-4e58-bde2-9a91dd2b03d9/1/Y4bd41wUj4l-nCddgGJ-CS6jwMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b81499-be00-4e58-bde2-9a91dd2b03d9/1/Y4bd41wUj4l-nCddgGJ-CS6jwMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7b:81:e6:3c:57:70:8c:c4:06:90:a5:60:ef:41:d8:02:d5:
c7:5e:ee:fa:6e:ba:80:73:9a:c7:d1:4d:02:49:b1:0c:b3:1a:
9f:9f:5c:92:bb:7f:90:62:b8:a6:d9:6c:56:c1:49:bb:12:77:
60:55:23:31:15:ec:26:d5:59:1b:de:25:68:cb:b0:2b:13:48:
1e:39:c6:57:c3:46:a2:33:46:29:36:47:27:57:b4:47:1c:a0:
91:85:ac:4b:ce:f7:c3:75:88:e9:fb:cc:12:b7:1f:a9:ee:90:
5f:87:1d:4b:d8:dd:54:fa:5d:13:95:bc:7e:8d:3b:37:b3:4b:
2b:6c:0e:2a:93:1d:1d:8d:fd:30:1c:ca:11:b8:9a:f3:2c:55:
96:82:1d:42:46:a4:23:a2:e9:c8:29:17:6c:20:e3:f1:17:b3:
d0:39:f3:3d:9b:0a:74:13:94:ee:a0:59:aa:92:19:3e:47:af:
58:17:8b:2b:ac:a9:83:2a:f0:ba:2e:90:d5:a6:15:96:d1:37:
fe:61:97:8a:c4:2d:c5:eb:19:40:82:7a:65:91:4d:7d:6a:62:
6b:4c:b9:78:91:e4:21:9b:88:cc:c8:b8:d5:63:5c:3e:ba:1d:
6f:42:f8:1b:5a:14:74:f2:3d:35:c0:0f:09:fc:99:15:d0:9f:
f5:9e:08:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:38:02 2025 by rpki-client