Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
File: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft (raw, json)
Hash identifier: 5lcSX0huzB6TgjT4hJ+OpgFvLkLgJCWo5ZxJs2a/6SY=
Subject key identifier: 2A:13:4F:12:57:98:F0:79:6A:D0:43:F1:96:5B:B2:A9:E0:07:86:63
Authority key identifier: 60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55
Certificate issuer: /CN=60c7647b728f7c59f613e89047542fa7855fa355
Certificate serial: 0194BCA98743AA3116543FEC648AF93BFE9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
Manifest number: 0A0C
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl (hash: RWcxcgD41fCNTKK0WpiT0hPP6HsLPLUv4za4aYlKQ7c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:87:43:aa:31:16:54:3f:ec:64:8a:f9:3b:fe:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c7647b728f7c59f613e89047542fa7855fa355
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=2a134f125798f0796ad043f1965bb2a9e0078663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d8:2a:c9:73:a8:02:9f:4b:fc:22:7c:46:52:
f3:14:72:5c:af:1c:30:b6:f7:c4:86:19:d8:1e:99:
4a:48:c8:b5:10:0d:ab:71:a0:bf:52:da:15:f5:42:
a7:0d:bb:98:0a:1e:13:9b:68:3c:ff:7b:53:75:ba:
15:18:5b:3e:55:87:f8:a4:e6:6f:66:a5:bc:13:56:
2d:3e:cb:45:cb:37:23:dd:eb:d6:4f:b9:b3:95:52:
ec:a9:47:b3:2a:09:45:57:ac:e1:0d:16:a9:3b:50:
d9:10:95:15:7a:69:27:d9:91:b3:8b:fd:17:d8:94:
d4:3c:03:9d:40:dc:7c:99:a2:66:ee:7e:38:98:19:
67:bf:13:98:b2:c4:34:da:b4:39:ab:17:e1:07:c2:
aa:4f:92:b8:3e:36:f0:62:06:61:1f:01:4b:4c:be:
c4:ae:e6:0a:ff:2a:ca:66:4b:59:ad:9d:73:ce:2b:
a7:a4:87:df:e7:71:1a:d7:da:3b:cd:6f:a8:97:89:
d0:78:d0:49:bd:c2:85:ce:18:a3:e8:9a:eb:15:b0:
e6:7c:7a:1a:3c:09:ad:88:34:da:82:27:0e:98:27:
72:1e:93:f4:d8:a6:1a:0b:f8:e7:eb:86:a8:c9:e6:
13:3d:c2:dd:89:29:a0:3f:f6:23:ca:14:bc:1b:90:
4d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:13:4F:12:57:98:F0:79:6A:D0:43:F1:96:5B:B2:A9:E0:07:86:63
X509v3 Authority Key Identifier:
keyid:60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:07:57:d8:b1:d7:ed:29:61:f1:22:2d:c6:d7:b5:55:f2:53:
5a:68:76:47:e1:b5:8f:eb:6e:af:b8:28:35:73:b2:d4:e0:37:
2d:e9:02:0f:9a:5f:19:74:d7:7a:18:46:3c:65:33:6d:46:5c:
92:3e:e6:b2:16:9d:86:23:cc:97:07:81:97:6e:77:97:8d:bb:
0d:8c:ae:db:e5:af:36:eb:28:7b:16:1a:ec:dd:89:54:c0:f5:
40:fa:6e:1b:da:70:3d:21:31:37:0a:78:4b:3c:93:32:91:e0:
f7:6f:88:ef:50:25:bb:15:02:c2:6d:01:27:51:77:a6:7e:97:
23:3e:c9:b6:ba:e8:f0:fa:e2:38:a1:52:24:b1:7d:c9:cb:fd:
3c:b0:d7:ed:2f:be:8a:e9:ca:a3:52:db:0a:3c:1d:ec:a0:d0:
3c:3a:d0:68:b6:99:71:6c:97:0f:00:6f:8e:f7:75:88:6a:c9:
39:a1:57:9a:e4:e2:0d:d7:59:be:21:0a:65:58:bf:0b:83:eb:
4b:d1:45:cd:7b:87:4e:47:ae:97:3c:45:92:43:49:c7:4f:94:
b7:f3:aa:2a:45:7e:f1:75:0d:1a:4f:fe:59:c6:36:3b:3a:b3:
a8:a1:58:13:ef:a6:af:c0:56:e9:fc:44:03:6e:8c:f9:9f:34:
88:c7:ea:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:55:57 2025 by rpki-client