Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft
File: YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft (raw, json)
Hash identifier: NGKeZPOQ79tifgTxJzPAF7qV74yGpZ2ie2kTBvgRvKc=
Subject key identifier: 89:E8:AD:96:9C:ED:2E:01:68:6F:B2:3E:7C:E8:CD:78:68:C9:9E:18
Authority key identifier: 60:5A:BB:25:3B:76:6D:CD:7F:16:D9:F0:1B:C1:19:69:18:48:EB:0E
Certificate issuer: /CN=605abb253b766dcd7f16d9f01bc119691848eb0e
Certificate serial: 0194BCE08E5C430197862DE6305432DD79FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFq7JTt2bc1_FtnwG8EZaRhI6w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft
Manifest number: 87
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: YFq7JTt2bc1_FtnwG8EZaRhI6w4.crl (hash: oNm5YkVMnLRG914Q0Edkto9zh8hxn+ZcSbn7JIjzLZA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8e:5c:43:01:97:86:2d:e6:30:54:32:dd:79:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605abb253b766dcd7f16d9f01bc119691848eb0e
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=89e8ad969ced2e01686fb23e7ce8cd7868c99e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:90:34:a5:16:27:ba:ef:31:e0:b1:43:8d:b6:
7b:c0:ac:55:c0:9c:e5:81:4f:a0:41:64:8c:5b:95:
21:d0:97:4d:d6:c0:05:e7:bd:e5:1a:d9:4c:5d:d5:
22:a5:74:f9:44:71:90:4b:70:bb:f9:67:60:b4:48:
05:36:76:2c:05:02:c7:ef:96:2c:ce:58:80:07:64:
53:ad:32:41:39:c9:d2:d2:cf:25:64:97:34:b7:05:
4d:5d:07:2b:92:8b:29:d0:da:23:5b:75:d8:60:85:
f8:af:29:2e:3e:51:04:35:49:6b:aa:04:82:3b:db:
08:e3:02:7a:63:3e:cd:91:3c:da:3e:c5:0d:89:6d:
b1:d7:18:e2:e5:d6:19:b8:00:cd:5e:3a:a4:32:c6:
05:a6:f9:c0:2a:c5:ec:1a:8c:74:f1:4d:7b:76:57:
bd:c7:bc:0b:37:e1:ca:2b:19:19:d1:9f:03:4a:15:
8f:aa:8e:ad:4b:19:15:fb:09:f5:89:57:75:bb:f3:
ea:ec:70:cd:01:16:4f:1f:e6:e9:f5:7e:ed:3b:e7:
32:52:58:58:89:67:e2:80:b5:c9:41:09:76:c8:89:
27:93:ce:3e:5b:0e:6e:1c:74:11:fd:09:ed:c9:05:
3b:11:dd:a7:cc:20:84:15:50:c3:48:7b:20:81:80:
d2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E8:AD:96:9C:ED:2E:01:68:6F:B2:3E:7C:E8:CD:78:68:C9:9E:18
X509v3 Authority Key Identifier:
keyid:60:5A:BB:25:3B:76:6D:CD:7F:16:D9:F0:1B:C1:19:69:18:48:EB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFq7JTt2bc1_FtnwG8EZaRhI6w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4b:ff:8e:e5:4d:97:6e:f0:3e:f2:6c:eb:6b:6c:18:9c:53:
9c:04:35:72:a9:e2:97:58:6a:7d:64:5f:68:44:50:9e:ba:95:
4b:c7:f7:29:53:50:9e:fb:9c:53:40:ca:58:25:14:53:43:f6:
8d:8e:3b:55:a5:7d:58:74:27:f4:a5:38:6c:8f:cd:9c:59:13:
2c:97:0c:22:91:61:e8:95:32:ea:79:bd:c8:5f:d5:25:92:e1:
4a:dc:05:da:46:36:3f:9e:57:8f:c0:d1:63:cc:81:4c:ec:90:
8f:80:10:3e:72:18:74:62:88:a1:3a:53:72:7d:d9:45:87:14:
8f:8c:30:80:d3:d6:ae:d7:f1:b1:86:a6:7d:60:2d:a2:5d:75:
5e:da:d7:5f:77:97:14:6b:64:0c:7e:ad:08:a0:46:27:39:da:
0b:7a:d9:3f:87:15:5a:76:fd:2b:62:65:28:02:20:c9:ca:59:
0f:ea:18:46:95:cd:48:01:d9:7d:ba:3d:d0:f3:36:34:5b:af:
93:27:f7:b5:4c:12:85:3c:f5:35:00:27:38:47:1c:24:5b:58:
ab:0f:a6:52:8b:e0:f6:be:f2:e1:3e:9c:d4:08:34:8e:ca:4c:
db:26:ec:68:a7:3b:c3:d1:03:27:ee:4f:2d:c6:98:24:10:18:
12:45:3d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:38 2025 by rpki-client