Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
File: 0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft (raw, json)
Hash identifier: glu3QCAOVfxvLJtMFDHu8KJIDS2K8fz+vp2zUhGexPk=
Subject key identifier: 47:CF:7E:3D:38:C7:AF:F6:D9:15:E6:BC:6F:E9:66:72:F4:8F:14:D3
Authority key identifier: D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54
Certificate issuer: /CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054
Certificate serial: 0194BCA9FFB7CBF220B24ACFBF314533294A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
Manifest number: 050F
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: 0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl (hash: PtWjg65qR1LNErEzlALGoi1g5VejDSMOB7lje9pd3EM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ff:b7:cb:f2:20:b2:4a:cf:bf:31:45:33:29:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=47cf7e3d38c7aff6d915e6bc6fe96672f48f14d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:cf:3f:1d:c4:bd:af:38:6d:74:33:2c:97:
88:ed:5f:30:cf:41:ae:1e:06:cf:38:f3:02:3f:74:
8b:d7:b0:bd:0c:36:df:e6:60:02:1d:7c:2a:3b:15:
a7:53:9c:da:40:48:da:b0:0a:1b:6b:a0:fc:69:8b:
5e:90:35:fa:fa:f8:ef:24:82:0e:a7:e9:55:fa:83:
70:55:6c:f9:3f:63:21:7f:30:d4:2d:47:df:f0:d8:
3d:a8:96:58:9a:a1:62:aa:2e:c6:b1:58:6c:31:a0:
36:92:32:da:7b:22:19:c4:1b:09:ef:cd:13:dc:5a:
1b:33:7a:30:3a:fa:14:de:7b:92:8d:38:ac:32:c0:
2a:1b:29:df:6b:97:34:21:03:d0:61:a6:30:be:58:
bf:65:ba:46:36:f8:9a:b9:7c:77:f7:ab:0e:6c:75:
3f:96:09:c2:e4:95:a8:e5:83:ba:fb:de:66:e9:ec:
42:96:69:ef:ef:82:38:07:b4:6c:65:1c:1d:df:0b:
8b:4f:6e:f3:7a:0a:60:d0:bd:7d:17:45:0a:21:6b:
b0:01:4b:46:19:31:96:87:66:a2:cb:75:ac:06:6e:
75:25:1b:17:99:6b:87:94:5c:90:14:d5:23:52:0a:
5e:0f:9c:5f:04:d4:ce:a6:65:a1:aa:2a:50:94:7f:
24:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CF:7E:3D:38:C7:AF:F6:D9:15:E6:BC:6F:E9:66:72:F4:8F:14:D3
X509v3 Authority Key Identifier:
keyid:D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ef:89:3f:e1:df:a9:8d:9f:3f:a0:79:8d:47:7e:31:5a:c0:
cc:72:2b:99:48:e0:a6:4a:11:1f:02:04:6e:8e:0a:94:e2:cd:
5b:f4:d8:9f:b2:1d:fe:11:d6:3f:2e:2a:0d:c2:39:37:05:cc:
82:9e:37:9e:c5:24:9c:01:e8:bc:0e:95:3f:48:ad:5c:ec:de:
d7:2d:34:ed:d5:9f:99:6d:f4:32:3d:9f:c3:4b:7d:c9:35:f1:
ae:0a:24:cd:47:30:2d:1a:94:56:e4:73:f0:e5:ad:e4:2a:1b:
0f:18:ce:31:a0:d4:59:a6:0f:e2:bf:02:ce:b3:6c:ea:95:2d:
bd:27:79:ad:77:c7:82:ff:30:e7:6d:0d:4b:88:ae:f6:ab:26:
91:73:9a:3c:9b:66:d3:96:c2:3a:f0:fa:e5:2d:69:29:7d:85:
68:04:e6:09:a9:1a:e8:5a:0e:0c:e5:92:7f:d4:c9:2f:64:30:
4f:90:5a:58:8a:0b:65:c8:56:75:2d:e9:cb:d4:18:96:6c:62:
a5:d9:7d:35:e5:e9:e4:d1:c5:8f:c1:9b:4a:0b:f8:2b:83:92:
3d:64:5f:c0:8c:65:0c:88:99:da:e9:83:f8:d7:38:aa:28:7e:
5d:f3:d0:0d:51:cd:a3:91:d2:07:68:31:21:8b:38:f5:01:c4:
79:45:34:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:59 2025 by rpki-client