Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/2709b0-f269-46be-afde-d56b36bdfc97/1/y3fzqtFUx-X6ZSTattIYhV0Xrfc.mft
File: y3fzqtFUx-X6ZSTattIYhV0Xrfc.mft (raw, json)
Hash identifier: s/sEbP1DH7w+OwzcbGrvssuyNQ0uxwiBJVJsVEiROiI=
Subject key identifier: D8:3B:3F:EB:CD:11:0C:C1:6E:02:62:BD:93:6D:B4:66:3D:13:09:94
Authority key identifier: CB:77:F3:AA:D1:54:C7:E5:FA:65:24:DA:B6:D2:18:85:5D:17:AD:F7
Certificate issuer: /CN=cb77f3aad154c7e5fa6524dab6d218855d17adf7
Certificate serial: 018F294D10DC93185F9BAE51A2C162F27486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y3fzqtFUx-X6ZSTattIYhV0Xrfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/2709b0-f269-46be-afde-d56b36bdfc97/1/y3fzqtFUx-X6ZSTattIYhV0Xrfc.mft
Manifest number: 0D19
Signing time: Mon 29 Apr 2024 10:01:07 +0000
Manifest this update: Mon 29 Apr 2024 10:01:07 +0000
Manifest next update: Tue 30 Apr 2024 10:01:07 +0000
Files and hashes: 1: KY-8tyxm8krun-KcnLj1YGl4-Ss.roa (hash: tdhsl9bzRHCl9P43Dk8MItRy+yi11GJdg7XgF4mepA0=)
2: y3fzqtFUx-X6ZSTattIYhV0Xrfc.crl (hash: QO64MgtBe5aJ+Yrcfih2M3HDA0pgs50ny+A/dqt1mz4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:29:4d:10:dc:93:18:5f:9b:ae:51:a2:c1:62:f2:74:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb77f3aad154c7e5fa6524dab6d218855d17adf7
Validity
Not Before: Apr 29 10:01:07 2024 GMT
Not After : Apr 30 10:01:07 2024 GMT
Subject: CN=d83b3febcd110cc16e0262bd936db4663d130994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f6:2e:03:40:0d:71:f0:a3:13:42:06:d1:42:
13:c4:64:b1:53:db:10:7a:32:56:23:0a:05:3a:47:
2f:87:40:01:cd:7f:87:bf:5f:ff:66:78:71:b6:72:
db:ed:3c:0c:2b:7c:f9:46:ac:4e:4b:70:6c:35:cd:
e9:30:08:c0:88:b1:8b:d6:11:d7:cf:c6:cc:4c:84:
35:fe:90:ab:6a:96:8c:e0:d2:b1:c6:d3:65:1c:cb:
48:a2:f6:bc:5e:8c:b6:cc:1a:95:50:ce:6e:7d:56:
3e:3a:4b:9a:b7:12:a5:5e:b9:56:25:8a:3b:4f:11:
db:d6:52:82:eb:ca:e3:73:c3:fa:51:fe:b9:63:89:
2f:14:b6:5a:8a:b1:1b:ec:48:f9:4d:5b:74:3a:8a:
f8:28:29:fc:20:17:30:45:ad:56:40:01:34:fc:25:
68:e5:49:06:6e:78:6a:cd:42:ee:a5:49:6a:6c:16:
00:e2:d0:1e:b1:4b:c3:d5:71:3b:17:26:3e:47:35:
c2:6b:00:2f:1b:d7:63:21:04:80:4c:0b:80:fb:78:
0f:14:54:d1:d4:7e:d6:97:3c:fc:6b:66:28:10:d7:
db:24:38:c2:67:88:01:02:b8:27:4b:55:65:2f:1b:
97:10:e9:59:4b:b4:11:18:62:17:02:80:78:15:0e:
48:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3B:3F:EB:CD:11:0C:C1:6E:02:62:BD:93:6D:B4:66:3D:13:09:94
X509v3 Authority Key Identifier:
keyid:CB:77:F3:AA:D1:54:C7:E5:FA:65:24:DA:B6:D2:18:85:5D:17:AD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y3fzqtFUx-X6ZSTattIYhV0Xrfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2709b0-f269-46be-afde-d56b36bdfc97/1/y3fzqtFUx-X6ZSTattIYhV0Xrfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2709b0-f269-46be-afde-d56b36bdfc97/1/y3fzqtFUx-X6ZSTattIYhV0Xrfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3d:0a:ee:73:aa:dd:82:df:6a:a8:95:ff:4b:a3:3b:14:dd:
60:3f:8c:51:82:70:30:9b:53:20:ba:78:34:78:b2:72:67:dd:
15:bc:5c:ba:ff:9b:20:6f:48:f6:c3:27:f1:26:be:e1:70:2b:
9f:e0:2f:6a:d3:54:c8:0d:85:94:29:90:1f:a4:9c:07:25:de:
44:76:5d:bf:ae:62:bb:78:7d:b4:5b:9b:82:45:09:25:28:bc:
2e:80:d8:67:23:0d:0d:51:50:a5:30:05:c9:62:b8:4a:8e:ba:
e8:43:96:8d:fa:7f:81:eb:c5:68:be:bc:a6:47:3d:54:1d:f9:
09:2e:06:89:04:76:bd:50:32:60:e2:0a:16:0c:1d:29:7c:1d:
1e:85:28:97:86:b7:51:ba:2b:04:a4:60:d3:d4:1d:2a:34:64:
4e:3c:74:23:6c:48:38:07:4b:d3:d6:86:4f:e2:3c:f4:a9:be:
c2:f5:cd:2a:35:2b:e1:b8:8a:97:ba:dc:d2:fc:81:08:6f:5f:
bd:ce:3e:3f:fa:72:de:8e:dd:a2:68:d6:b8:44:fe:38:5a:8a:
b5:16:30:2d:35:1d:1e:6a:40:22:8c:9e:96:8d:10:27:d9:9c:
fb:91:cd:c7:35:88:fa:71:52:bb:d5:ef:d2:24:a5:66:f1:9c:
9e:80:c1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:01:00 2025 by rpki-client