Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
File: yJtbKWmeLdQYBAwO33UAhdhyBEI.mft (raw, json)
Hash identifier: ZOYOXXOSByCuwA0inGuU6r+n+Nuw8PKWdy9oL04Ni2g=
Subject key identifier: 3D:5C:82:E8:B3:44:54:A0:DA:48:46:C2:16:B2:47:77:D7:08:68:A4
Authority key identifier: C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
Certificate issuer: /CN=c89b5b29699e2dd418040c0edf750085d8720442
Certificate serial: 0194BCA9826C6DF3E8A84472925A115ADF7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
Manifest number: 0AFC
Signing time: Fri 31 Jan 2025 14:00:13 +0000
Manifest this update: Fri 31 Jan 2025 14:00:13 +0000
Manifest next update: Sat 01 Feb 2025 14:00:13 +0000
Files and hashes: 1: yJtbKWmeLdQYBAwO33UAhdhyBEI.crl (hash: S0LeQ8uO1ECUjPoDmXkN78Fcai0OQFy5/b1ApUwYFMQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:82:6c:6d:f3:e8:a8:44:72:92:5a:11:5a:df:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89b5b29699e2dd418040c0edf750085d8720442
Validity
Not Before: Jan 31 14:00:13 2025 GMT
Not After : Feb 1 14:00:13 2025 GMT
Subject: CN=3d5c82e8b34454a0da4846c216b24777d70868a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9e:e6:1c:d0:50:57:fa:b3:02:52:5c:38:49:
42:f8:95:62:06:df:17:df:1a:f9:07:cc:94:15:d1:
b9:44:1e:04:11:79:68:a7:fb:88:39:45:80:be:de:
c7:cc:1d:1e:00:17:c5:cf:dd:78:43:63:48:6a:a5:
c0:ea:aa:d0:61:b7:24:57:0a:19:52:46:28:f7:ea:
af:ae:19:e8:d2:44:bf:bc:1f:66:ab:f0:e8:cd:84:
16:23:f1:48:45:b0:ae:ca:bb:d9:b5:6f:e3:61:00:
33:6d:a1:d2:64:b3:9c:44:4e:80:7c:44:0a:83:45:
a2:cd:fd:f6:0a:46:0d:db:cf:33:6c:43:c8:0b:0b:
a7:1a:a9:3b:f2:6d:3d:27:2b:f5:ca:a7:73:25:95:
57:0c:45:5a:80:ea:82:6e:1b:bb:21:a1:60:94:4b:
95:ae:43:0a:04:e1:5a:f4:2c:51:bf:17:8b:86:92:
37:42:91:b9:86:78:d4:f2:b2:77:87:78:3b:a6:01:
18:8e:92:7a:34:bf:b6:ac:7a:db:4c:12:95:1d:8f:
3c:f9:1e:1a:ee:0e:6b:d8:49:ac:94:3c:ba:4f:bf:
c9:a8:c1:ea:b6:24:a5:b4:b9:76:31:43:c8:2d:6c:
3f:fa:0e:da:1f:2c:87:84:5e:c0:82:69:f8:9c:56:
70:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5C:82:E8:B3:44:54:A0:DA:48:46:C2:16:B2:47:77:D7:08:68:A4
X509v3 Authority Key Identifier:
keyid:C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:97:21:b6:9f:22:76:a6:28:e3:d3:bb:ab:7d:9e:dc:ad:06:
32:16:92:19:a6:98:99:43:cf:39:35:2d:54:c2:c3:fc:1f:0f:
a1:3b:24:3b:ec:90:04:5c:17:02:95:10:cf:98:a3:65:e1:49:
7d:3d:62:40:ab:e1:1d:4d:61:e1:2c:71:aa:12:6c:5f:d1:ff:
70:ee:79:c9:67:ee:05:03:ed:e4:4d:e1:4b:e2:ff:57:15:d8:
b8:d7:ac:43:c6:e9:fd:15:96:65:ee:08:9c:42:e6:86:83:b2:
e8:7e:2e:38:11:95:27:65:ea:f3:dc:6b:bd:41:28:28:3e:d8:
47:c5:c8:31:60:9d:45:41:44:14:02:8d:0f:10:03:32:92:41:
4e:eb:ca:6f:f0:03:74:20:72:d3:84:20:3b:52:26:5e:e1:b1:
11:6c:73:ae:34:14:ea:c3:c0:e7:75:2a:db:ed:83:e7:af:0a:
0f:53:9c:b9:03:90:61:91:e0:62:39:25:c6:94:c9:df:49:d4:
0f:a9:77:4b:5e:9d:a1:88:81:b5:f3:e1:dc:53:69:bb:47:36:
63:6f:39:5e:69:5c:84:e8:14:66:4c:f0:a8:dc:90:04:4d:45:
d6:0f:05:80:fc:23:3a:c6:cc:ad:54:04:41:52:7a:6e:a7:e0:
91:67:a7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:36 2025 by rpki-client