Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fd8116-5e98-45ef-af74-073a5db0efb5/1/Y-JJd5k8FbzBNLF0k39BshKfVtE.mft
File: Y-JJd5k8FbzBNLF0k39BshKfVtE.mft (raw, json)
Hash identifier: RjCsaAUDAqF3BIbKP43uyZM3+FREgJzCa7LaIYQvUS0=
Subject key identifier: CB:E2:89:91:7A:1B:3F:21:B4:E5:CC:F7:2D:14:E4:9B:08:55:66:65
Authority key identifier: 63:E2:49:77:99:3C:15:BC:C1:34:B1:74:93:7F:41:B2:12:9F:56:D1
Certificate issuer: /CN=63e24977993c15bcc134b174937f41b2129f56d1
Certificate serial: 0195930757602F15D60AE591FDEBA008DAD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-JJd5k8FbzBNLF0k39BshKfVtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fd8116-5e98-45ef-af74-073a5db0efb5/1/Y-JJd5k8FbzBNLF0k39BshKfVtE.mft
Manifest number: 0B4F
Signing time: Fri 14 Mar 2025 05:01:26 +0000
Manifest this update: Fri 14 Mar 2025 05:01:26 +0000
Manifest next update: Sat 15 Mar 2025 05:01:26 +0000
Files and hashes: 1: Wmoua6Bek1BvL5BzT3hBNIdVtPE.roa (hash: QWQ5/ZJfO47Ea0W1h4jxe7swaA6tftuCEXI4M08N2Ik=)
2: Y-JJd5k8FbzBNLF0k39BshKfVtE.crl (hash: oT7Huuj5NYbmT5KjBVi525zKLLC1HIrkGFLvojAneAA=)
3: jAZ9TXopo_P_4C_FXjvo3LrR8II.roa (hash: ohtX71y5hM3Lm5IjLDjXf517zOnzK86kCaHV4kyIPyA=)
4: uAFxYF4j1WjzEir1q_ppYn5ONVw.roa (hash: F4KXPif5dPc1ItKXpEL/Yr73q0hiilxiS6Ngz185AOU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:93:07:57:60:2f:15:d6:0a:e5:91:fd:eb:a0:08:da:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e24977993c15bcc134b174937f41b2129f56d1
Validity
Not Before: Mar 14 05:01:26 2025 GMT
Not After : Mar 15 05:01:26 2025 GMT
Subject: CN=cbe289917a1b3f21b4e5ccf72d14e49b08556665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:8a:36:72:89:08:c3:5a:20:a7:cd:65:ed:
c7:bd:55:62:85:57:b0:ed:cc:f8:ef:61:ba:6d:74:
c1:83:25:0a:b2:80:ba:56:67:f3:d8:94:ff:42:ca:
e7:94:d1:8c:d5:ad:f8:53:c7:c2:3d:6f:29:23:6f:
ec:2f:49:24:e7:92:94:13:3d:ba:76:a1:f8:03:5d:
74:ce:d6:6f:18:52:b5:9b:09:d9:00:3f:ee:16:bd:
4c:81:be:b3:86:42:99:db:c7:12:7c:4f:e8:1f:b0:
6f:31:d1:8d:1c:0b:2a:13:1b:57:a9:cf:77:34:9b:
d6:84:20:fb:22:b0:b2:65:fb:38:34:dc:47:1b:71:
3d:ce:f9:2d:bc:27:78:2d:d3:fd:2a:b2:b2:14:47:
00:3b:13:bb:2e:de:c3:67:8a:f0:2b:f6:ce:f4:e9:
56:3b:b3:bb:79:0b:ab:bb:9b:2e:af:1f:81:cc:0f:
f6:5a:ec:d9:fa:6b:56:1d:bd:d0:83:be:1b:b5:d5:
a7:9a:92:87:7e:2a:a4:62:ef:e2:20:ba:62:26:cc:
e9:3c:8a:4f:99:e2:b3:db:7f:2b:c2:ce:6b:91:bb:
18:26:2e:02:18:e1:13:4d:82:cf:f2:62:8e:62:38:
b3:db:77:c0:30:0c:a9:ee:11:50:6a:aa:72:fe:7e:
93:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E2:89:91:7A:1B:3F:21:B4:E5:CC:F7:2D:14:E4:9B:08:55:66:65
X509v3 Authority Key Identifier:
keyid:63:E2:49:77:99:3C:15:BC:C1:34:B1:74:93:7F:41:B2:12:9F:56:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-JJd5k8FbzBNLF0k39BshKfVtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd8116-5e98-45ef-af74-073a5db0efb5/1/Y-JJd5k8FbzBNLF0k39BshKfVtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd8116-5e98-45ef-af74-073a5db0efb5/1/Y-JJd5k8FbzBNLF0k39BshKfVtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5c:02:78:c3:33:1d:c6:83:fd:0f:03:15:9e:b6:13:37:53:
74:7b:0b:2e:68:e6:47:2f:fc:c3:08:0b:26:62:40:0c:fa:e5:
36:ab:8f:12:7e:6e:28:b1:37:71:b3:1d:97:90:47:ad:ce:c2:
c3:ea:ea:b7:e6:8a:0b:e4:64:31:73:81:09:f8:cb:33:b2:ab:
02:66:e7:8c:52:45:dd:8c:41:ac:18:86:87:06:d8:41:78:48:
3f:5e:5b:8a:b9:57:fe:8f:de:0e:ee:56:c2:10:46:c7:54:78:
fd:56:c3:43:45:d7:4c:09:fa:36:a6:b3:cb:5c:91:45:90:9e:
8e:85:4a:2a:df:c9:ea:db:8e:99:67:9e:62:ee:6a:f7:81:1b:
2c:7d:35:4e:d3:e6:18:c6:9a:f6:13:15:a8:0e:64:a3:00:68:
0d:ab:3d:57:b2:24:5c:f1:c3:82:ef:9c:d5:1c:39:2c:0b:f3:
42:10:c0:f9:86:31:fe:b5:4f:72:a5:ed:b6:48:84:24:8a:25:
41:00:25:27:05:7d:3e:fe:f4:61:d1:f5:e2:18:23:08:aa:d0:
a1:8c:7f:ee:1e:ca:87:84:d0:b7:e6:2f:d0:8d:d5:19:52:9d:
2f:0b:9e:0c:6d:ae:89:d5:d9:23:2d:6e:ac:50:60:97:11:8d:
e8:60:fb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:37:16 2025 by rpki-client