Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0ddbdc-5e22-4945-bdcd-a09854ab65a2/1/yhoaYsgLDzM0xdwY3GS3v5eIkBM.mft
File: yhoaYsgLDzM0xdwY3GS3v5eIkBM.mft (raw, json)
Hash identifier: 1mHxafHwayE7BY7kr395ZkfqEZrP6HeGWYNI88pmEfo=
Subject key identifier: F1:25:58:9C:A5:53:0C:A6:1F:86:59:99:7B:D0:DE:14:71:33:2D:BC
Authority key identifier: CA:1A:1A:62:C8:0B:0F:33:34:C5:DC:18:DC:64:B7:BF:97:88:90:13
Certificate issuer: /CN=ca1a1a62c80b0f3334c5dc18dc64b7bf97889013
Certificate serial: 0194BCAA1F83A3E2EB45B9705E276385AC60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhoaYsgLDzM0xdwY3GS3v5eIkBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0ddbdc-5e22-4945-bdcd-a09854ab65a2/1/yhoaYsgLDzM0xdwY3GS3v5eIkBM.mft
Manifest number: 0742
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: yhoaYsgLDzM0xdwY3GS3v5eIkBM.crl (hash: AJoKgASLONqKcijnAeztecXZzIjUmI8V5zSp4cxh+28=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1f:83:a3:e2:eb:45:b9:70:5e:27:63:85:ac:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1a1a62c80b0f3334c5dc18dc64b7bf97889013
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=f125589ca5530ca61f8659997bd0de1471332dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:41:39:66:1b:ea:7d:f1:85:03:31:63:78:
35:88:39:bd:0a:7d:30:d2:30:5e:b7:60:35:c7:c8:
4b:c1:32:59:3b:ca:45:88:0a:1e:cb:4e:36:c9:27:
d3:d5:d7:04:3e:1d:4b:b4:86:c4:1c:f8:1f:98:16:
a9:3b:2c:c6:f8:3e:2d:99:4d:e5:b3:4f:32:46:9c:
bb:86:b3:54:13:ea:61:26:a5:38:89:14:3b:2e:12:
35:01:8a:98:0e:d9:50:b8:ca:56:38:8c:c2:38:9d:
96:f2:01:44:40:27:be:b4:2c:41:21:9f:14:3e:1f:
d4:f0:de:35:7a:3b:7c:ac:bf:fc:f0:87:f4:47:21:
6d:48:29:1d:4a:fb:f7:8f:37:47:91:8a:66:df:55:
44:6f:d0:0c:7b:0d:c3:fa:9e:af:03:a2:12:e3:03:
8d:83:5b:92:e5:a8:7e:ea:b7:b7:a3:fb:41:72:d3:
45:43:2d:fa:7a:26:ef:7e:ec:6e:f2:13:d7:2f:e5:
3d:a5:0a:a3:07:a5:e9:4f:0a:d2:a4:c2:d5:f4:13:
fe:04:fc:96:cd:87:48:07:8d:f9:b1:19:17:db:3b:
11:06:6d:d3:58:cd:e5:48:c5:49:93:a2:0c:70:5c:
0b:03:72:f3:4c:08:a3:95:ac:42:bd:25:e6:44:a6:
20:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:25:58:9C:A5:53:0C:A6:1F:86:59:99:7B:D0:DE:14:71:33:2D:BC
X509v3 Authority Key Identifier:
keyid:CA:1A:1A:62:C8:0B:0F:33:34:C5:DC:18:DC:64:B7:BF:97:88:90:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhoaYsgLDzM0xdwY3GS3v5eIkBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ddbdc-5e22-4945-bdcd-a09854ab65a2/1/yhoaYsgLDzM0xdwY3GS3v5eIkBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ddbdc-5e22-4945-bdcd-a09854ab65a2/1/yhoaYsgLDzM0xdwY3GS3v5eIkBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3f:e2:1e:36:16:2a:70:6f:3c:02:f9:2a:3e:85:e9:41:7c:
49:32:78:06:6c:3b:80:f6:8f:ce:30:77:fb:2b:99:4b:9b:b5:
a6:3a:30:67:15:42:de:17:09:77:9e:34:f9:cb:3a:a8:34:09:
f7:99:1b:8f:22:00:e2:55:94:f8:74:29:eb:c7:bb:4b:b6:8f:
11:01:57:91:8b:04:4f:08:84:57:f9:88:91:18:77:c3:85:d9:
fa:90:3b:b3:22:2c:64:fd:63:ab:1f:67:2f:16:1d:95:ff:c8:
97:67:6d:39:7b:77:95:f9:a0:00:de:b0:bd:b7:b2:14:60:83:
94:01:26:24:05:45:38:af:0c:8b:6a:6e:9d:00:33:1e:e4:00:
b1:c2:8f:60:e9:c6:9b:2e:48:5d:cd:d2:c9:43:cf:fd:ab:cd:
c5:70:0f:64:1a:0d:1e:54:43:17:e0:7c:05:d0:52:77:9c:71:
bd:58:d2:47:fa:8f:01:93:d0:c8:fe:99:75:96:5d:e3:db:ff:
91:2c:fb:05:4d:29:c7:89:ab:31:96:15:ba:d1:a2:6a:83:49:
f5:11:d5:54:58:5d:8d:e5:2a:12:dd:9f:07:2b:dd:85:77:9d:
0b:5e:b0:26:28:9e:77:58:ec:9a:43:42:55:e8:8b:8f:e1:4e:
c2:56:e4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:32:42 2025 by rpki-client