Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json)
Hash identifier: MkxucdMklY+tzxqJC4vuhtspXhy2DpFFtLo53f9uyiw=
Subject key identifier: 4F:50:4B:7E:1A:03:DB:16:09:24:91:09:A4:03:17:1E:6F:1E:F0:8B
Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Certificate serial: 01962ECF5FDC45A3275A0AB2123B443B08F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
Manifest number: 1543
Signing time: Sun 13 Apr 2025 11:01:04 +0000
Manifest this update: Sun 13 Apr 2025 11:01:04 +0000
Manifest next update: Mon 14 Apr 2025 11:01:04 +0000
Files and hashes: 1: 46nBDvj667zfOAp042BssRV0tGo.roa (hash: ijvMinyi7MX0fq0QyRdi2Vr4DZ+zPLFltRyx4COFtiw=)
2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: +SzURTyee0W0msfaHGH2tm6hjaE43SV2rJbJN4/gdVc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:5f:dc:45:a3:27:5a:0a:b2:12:3b:44:3b:08:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Validity
Not Before: Apr 13 11:01:04 2025 GMT
Not After : Apr 14 11:01:04 2025 GMT
Subject: CN=4f504b7e1a03db1609249109a403171e6f1ef08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4b:8f:a1:a6:cf:32:71:de:75:6f:9a:17:3f:
0d:1c:e3:9b:b5:ec:22:b6:74:0e:60:d8:7c:9c:a3:
7e:fc:45:8b:e8:da:e9:fd:5c:f0:cf:cb:49:bd:1b:
32:e5:77:e5:9f:ce:c6:f2:44:2a:7a:cb:af:13:eb:
1c:62:8a:fa:08:92:5a:e8:06:ca:cf:10:d0:64:10:
45:87:1f:b6:e8:d3:aa:26:c2:71:54:b2:55:4c:62:
12:f1:53:0d:e7:50:9e:eb:f6:29:d7:ab:ba:de:ea:
36:53:3f:68:86:8c:db:4a:10:4f:8e:77:d8:60:5d:
54:e8:ac:fc:3b:a1:8e:69:e3:3f:3d:0c:ab:b6:54:
ec:7c:10:17:e3:ea:bf:61:9c:73:8e:fc:bb:ce:6e:
04:0c:7d:b6:4f:09:89:8f:85:4a:eb:d1:69:e4:09:
bd:16:b8:22:0b:f1:98:d2:b1:5c:c2:96:2c:78:2d:
54:87:9a:7e:56:15:7c:29:b7:9e:66:ec:23:1a:2e:
e5:2a:a7:3e:1b:68:b8:cb:8b:fc:4d:b5:97:a3:82:
fa:9a:d6:97:bf:5d:1e:73:51:92:2b:60:34:0d:5b:
bd:33:54:c4:25:6e:ca:e0:d2:c1:07:15:ab:63:7e:
cd:44:70:f4:0e:74:00:2a:1d:17:19:7b:94:88:60:
97:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:50:4B:7E:1A:03:DB:16:09:24:91:09:A4:03:17:1E:6F:1E:F0:8B
X509v3 Authority Key Identifier:
keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:47:b3:94:09:b6:c1:d3:ce:54:c9:1c:ff:7c:b0:a0:c0:ae:
9e:7f:5f:c8:f7:c2:77:c0:69:a5:83:d8:88:c6:65:4d:5a:b6:
b8:79:07:7a:79:32:ab:6b:c7:b9:3a:b9:02:1d:85:ef:4d:6c:
c8:aa:b6:b0:12:12:77:5b:3d:a3:ff:cc:eb:fc:22:73:ba:9d:
cc:f0:3b:b3:f6:db:97:f3:33:a3:34:90:f9:c0:ac:2f:f1:39:
5b:3d:d8:18:a7:f1:f8:13:40:b5:52:02:1a:8c:a8:00:d0:2c:
86:aa:e0:41:5a:0c:ea:5c:fa:5a:73:63:1d:86:5b:57:64:37:
ef:8c:9a:2c:2d:d0:7f:29:41:c4:8b:34:65:95:37:2c:fb:33:
fe:2e:ba:19:16:3c:43:bb:ce:bb:76:0e:86:b9:34:e2:82:70:
02:f7:16:04:53:90:4e:a8:67:6e:eb:f7:82:6f:da:cc:9f:ff:
3a:39:a8:e8:5b:1b:40:e3:88:ce:9a:fd:7e:f6:3b:98:56:2a:
8a:7c:b5:c6:5f:d9:d8:c0:2e:7f:6f:22:8c:ab:b6:1d:20:4c:
b9:77:f7:4a:de:5d:5d:fc:90:a1:fc:36:da:69:5b:ad:8e:de:
0a:6c:3a:a6:29:41:53:6f:d1:8b:3b:b3:20:18:ac:24:3c:06:
33:bb:78:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:47 2025 by rpki-client on console.sobornost.net