Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
File: y-lwmA1WXMdK2ylKpox7BvUTKJA.mft (raw, json)
Hash identifier: uK9fcmWGz4wZPZC876sSEm1Ut42ii2EOsK4pqwUsB8Q=
Subject key identifier: C1:1F:BD:66:D8:E5:13:98:F1:D7:CC:C8:80:DD:46:13:BC:53:83:BA
Authority key identifier: CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
Certificate issuer: /CN=cbe970980d565cc74adb294aa68c7b06f5132890
Certificate serial: 01962E2B37CAC81E6FFF25B77CDAF82EE182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
Manifest number: 07F5
Signing time: Sun 13 Apr 2025 08:01:46 +0000
Manifest this update: Sun 13 Apr 2025 08:01:46 +0000
Manifest next update: Mon 14 Apr 2025 08:01:46 +0000
Files and hashes: 1: w3_nPHf7a07mKfqvAI84MjCWgdc.roa (hash: zETLR/82/cCeh7r1wtGHL+Bc+UNE2hnrIZTGYx5oKPQ=)
2: y-lwmA1WXMdK2ylKpox7BvUTKJA.crl (hash: yLtcyUrXczf2xwlAfanyQCAjNkFWll/uiZs4eN0APDc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2b:37:ca:c8:1e:6f:ff:25:b7:7c:da:f8:2e:e1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe970980d565cc74adb294aa68c7b06f5132890
Validity
Not Before: Apr 13 08:01:46 2025 GMT
Not After : Apr 14 08:01:46 2025 GMT
Subject: CN=c11fbd66d8e51398f1d7ccc880dd4613bc5383ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:86:99:0c:0d:24:40:fe:90:59:1a:18:72:fb:
7c:26:fb:9e:a8:a5:fd:dd:1b:3f:c1:0f:25:e6:f6:
dd:e5:01:99:f7:f2:06:fd:44:b2:6b:64:76:e2:a5:
dd:c3:ae:9e:2f:a7:08:e4:ce:7e:04:5e:06:47:2b:
b4:eb:98:bd:c9:ca:65:f8:b0:b0:d1:bf:3f:ad:0c:
cf:f3:f7:00:a8:b1:31:e6:ac:5c:00:17:49:73:f7:
4d:92:99:b9:ff:ba:01:82:3c:79:c5:de:dd:9b:fd:
8b:2f:97:d0:80:c6:b4:51:7e:96:9a:e1:e1:ab:c5:
68:e1:09:db:25:54:0d:78:7c:b8:20:0b:28:d5:b5:
b2:c6:8e:73:1e:6e:b0:17:be:65:82:b4:82:bc:42:
39:24:3e:fe:f0:40:f5:b9:d1:05:4f:42:09:29:d1:
11:4d:75:10:57:c5:d7:85:d0:c7:72:d0:59:b8:e0:
d3:64:29:eb:27:07:6b:51:4f:1c:7f:51:43:2d:13:
1d:fa:44:8b:54:14:0f:4b:8c:f7:44:1b:a9:cb:56:
3a:a8:d2:e1:fe:05:07:46:71:0e:cb:54:71:b9:96:
ff:5a:d9:49:08:3f:ec:e6:fd:44:e7:ed:7d:f1:d4:
8d:e1:49:0a:d6:9c:c5:a7:67:24:15:16:40:18:8e:
a9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1F:BD:66:D8:E5:13:98:F1:D7:CC:C8:80:DD:46:13:BC:53:83:BA
X509v3 Authority Key Identifier:
keyid:CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ec:79:3f:f0:2d:9c:4f:06:86:ad:08:5a:f0:6f:42:58:1a:
f2:b2:af:be:f0:cd:75:30:7a:88:8c:15:b0:98:0c:57:f8:20:
ee:56:5e:a4:60:79:27:81:1e:b6:4d:f7:03:ea:17:1c:40:fd:
49:81:c5:ba:0a:fa:6d:6f:f3:57:5b:5b:31:58:de:9d:c1:69:
1b:7b:e7:d6:fe:ed:d3:fd:da:fa:93:b0:f8:a3:2d:a0:63:fb:
f5:62:c7:c2:dc:32:df:4b:bf:c2:59:53:c4:e1:58:79:6d:2c:
62:7c:68:d7:9a:1c:b2:d2:2a:d9:7f:38:0b:c2:e6:f8:be:45:
80:37:ea:b9:fa:b8:3b:bb:b3:1e:6e:2b:b2:16:19:bf:1c:41:
80:03:ff:8d:37:4f:ba:13:47:40:54:47:de:e1:29:d3:5d:b7:
b1:17:35:d6:e2:c9:5b:32:40:96:a0:54:3f:69:6e:62:97:0f:
0f:6a:8a:6c:2f:de:01:00:a0:6d:3f:18:6d:e8:a9:73:23:ea:
7f:a0:50:ce:d5:2b:4c:17:57:b4:ca:87:d1:77:fb:9e:3b:14:
d6:29:3f:b6:b3:59:ad:39:c1:09:dd:c6:8f:a1:15:75:c4:d7:
ef:09:1a:27:d1:94:37:9d:c6:82:fd:dc:5f:27:a6:81:aa:2c:
b9:e0:6f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:34 2025 by rpki-client on console.sobornost.net