Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
File: Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft (raw, json)
Hash identifier: jZJHu5Ok5S8H5clGry5v8zvZzGl0D/269RlPuyAWUGk=
Subject key identifier: 29:F1:71:C6:F2:20:74:1B:A8:C4:72:C5:5F:FC:47:B6:D6:64:00:F1
Authority key identifier: 62:D6:E4:BF:FA:2B:4D:1B:C4:0E:92:B3:0A:F0:D2:1A:74:B0:BB:D0
Certificate issuer: /CN=62d6e4bffa2b4d1bc40e92b30af0d21a74b0bbd0
Certificate serial: 0194BBCEFDFC71DE4E67CEBCAC1D226CD503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl (hash: GWweEo2iHr4n0/IfvQrTRCv6tAQCUI80cnH/UkE2ZDc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fd:fc:71:de:4e:67:ce:bc:ac:1d:22:6c:d5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d6e4bffa2b4d1bc40e92b30af0d21a74b0bbd0
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=29f171c6f220741ba8c472c55ffc47b6d66400f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5d:91:db:7e:fc:e2:d8:79:65:63:0c:e4:c0:
72:b2:66:42:70:34:9f:da:2e:ce:2b:b9:93:a9:28:
b1:2b:d7:43:ce:41:56:38:4c:58:48:90:7c:75:b9:
d1:63:39:43:0b:68:ee:2f:18:5d:e1:7d:70:95:c5:
c0:e9:25:6f:75:b9:bd:ce:02:29:de:7a:ac:75:fd:
13:f2:47:00:f2:8a:ae:66:ce:56:ba:0b:b6:47:27:
ca:e2:ff:5c:7b:5b:c8:14:16:27:34:4d:1a:37:66:
19:cb:5c:81:1e:b2:34:b2:ac:40:1c:01:50:09:9a:
cd:1b:a4:53:ea:fa:d2:7d:cf:d1:f6:42:ed:d6:0a:
fb:63:ed:88:00:5a:39:45:60:f2:35:70:99:5a:f5:
b5:f7:8d:30:d2:ad:0c:7c:ed:44:d6:5a:df:6e:a5:
d5:65:5f:fd:7d:53:0e:7d:76:22:3f:98:c5:e5:67:
ce:96:9f:7b:99:b9:a0:be:c5:59:1f:42:52:3d:eb:
bc:b8:19:d6:ee:1e:5b:f7:22:bc:25:d0:eb:56:5a:
1e:f2:33:b8:00:fc:76:0e:c6:66:89:08:16:0e:69:
a3:4d:4e:d9:aa:95:71:ae:d8:39:72:01:49:37:79:
a0:1d:f6:4c:a0:39:c9:ad:3b:62:f5:0d:a9:63:91:
21:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F1:71:C6:F2:20:74:1B:A8:C4:72:C5:5F:FC:47:B6:D6:64:00:F1
X509v3 Authority Key Identifier:
keyid:62:D6:E4:BF:FA:2B:4D:1B:C4:0E:92:B3:0A:F0:D2:1A:74:B0:BB:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4d:b4:4a:d4:02:c8:fb:8a:77:dd:1e:4e:63:d0:0d:5e:ce:
8b:8a:6f:22:a4:cd:ea:47:43:39:72:7b:2d:8e:17:1f:a5:8e:
7f:f0:7f:46:b6:26:8b:d5:67:90:e3:d5:ea:64:9d:7b:27:6f:
38:88:a7:ca:cb:73:1d:f4:56:5b:21:86:a5:3c:ec:f4:b9:d1:
b0:80:03:7d:ce:ba:d7:cd:7a:64:e0:bc:c5:22:0b:d6:b6:f9:
2e:21:30:76:df:83:2d:29:56:6f:85:39:1f:9f:89:ef:47:3c:
70:c7:41:0f:ba:90:2c:c6:06:1e:80:a3:fd:6e:85:8c:d9:ea:
1e:2b:55:bd:c2:fa:5e:82:d9:31:7c:a0:57:fb:12:13:67:98:
30:be:86:b9:dd:fb:cd:be:dd:ea:4c:d1:b7:65:f5:4b:21:c0:
2c:7a:20:5f:60:6c:22:cb:22:a0:be:2c:3c:79:92:0d:41:48:
17:69:ef:71:ec:e4:67:88:67:5f:94:3a:8b:8f:a7:28:9f:6b:
19:b2:83:17:e7:49:98:b5:3c:79:eb:93:bf:38:d0:b0:1b:55:
54:39:75:88:7c:5c:63:f9:ff:44:cd:c6:bc:b8:84:1a:86:7d:
c7:ab:a6:7a:04:85:87:85:b8:6f:b6:c8:47:b9:62:88:36:7e:
38:5d:34:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:16 2025 by rpki-client