Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c96426-483a-4cbf-9aa3-9473580bc850/1/YRfWFYBDFQsK0iSgZI3wGFcGAZw.mft
File: YRfWFYBDFQsK0iSgZI3wGFcGAZw.mft (raw, json)
Hash identifier: Vr7uvbUX5wpkln/e4NKseL7Vtn+YnsYHBiZLPskFx7k=
Subject key identifier: AB:0A:36:2D:07:BE:C4:33:6F:72:D8:23:A2:22:E8:1A:BF:2E:9D:55
Authority key identifier: 61:17:D6:15:80:43:15:0B:0A:D2:24:A0:64:8D:F0:18:57:06:01:9C
Certificate issuer: /CN=6117d6158043150b0ad224a0648df0185706019c
Certificate serial: 0194BBCE7DF622E83C6BA8FC6DEAC002A0FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRfWFYBDFQsK0iSgZI3wGFcGAZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c96426-483a-4cbf-9aa3-9473580bc850/1/YRfWFYBDFQsK0iSgZI3wGFcGAZw.mft
Manifest number: 0EB8
Signing time: Fri 31 Jan 2025 10:00:59 +0000
Manifest this update: Fri 31 Jan 2025 10:00:59 +0000
Manifest next update: Sat 01 Feb 2025 10:00:59 +0000
Files and hashes: 1: YRfWFYBDFQsK0iSgZI3wGFcGAZw.crl (hash: 6JrzTlb+x6kuAj1ow2csdhIDjhUChn2AANxWyOLEAN8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7d:f6:22:e8:3c:6b:a8:fc:6d:ea:c0:02:a0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6117d6158043150b0ad224a0648df0185706019c
Validity
Not Before: Jan 31 10:00:59 2025 GMT
Not After : Feb 1 10:00:59 2025 GMT
Subject: CN=ab0a362d07bec4336f72d823a222e81abf2e9d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:70:ea:98:62:e8:61:87:0c:be:df:65:79:
dd:7d:71:e1:d9:95:72:c5:8f:0c:1a:6e:66:c6:21:
cc:b2:95:8e:4f:8b:db:51:14:04:46:6a:ec:b4:05:
19:7d:e8:8e:75:13:dd:f8:cc:0e:c9:e8:af:d6:8a:
47:08:67:55:cc:43:8e:37:15:f9:b3:36:4d:a2:a8:
11:ff:88:40:0d:b6:e0:98:ec:63:9e:8e:cf:ca:ea:
4a:e2:20:6b:7e:cf:e2:36:60:25:df:da:18:a8:e6:
41:8d:bf:b2:6b:46:79:28:50:7c:23:f6:ff:0f:0e:
d5:f3:85:a0:c0:1a:a9:0b:dd:4d:b4:0d:21:5c:04:
94:2b:44:2a:65:0e:84:fb:2d:02:60:df:45:de:ea:
68:76:88:e4:50:b4:3c:16:8d:bf:17:5e:35:9e:2a:
ed:2d:39:96:b9:d0:32:99:c0:d0:20:df:aa:82:04:
67:13:be:78:f6:3b:44:ba:04:ba:08:63:4a:cc:c9:
80:9a:23:f1:17:3c:1c:d4:86:cf:b1:59:05:84:46:
bc:95:e6:05:2b:0d:a8:04:52:49:ee:45:72:6e:a9:
44:96:15:44:d8:90:e0:af:81:c2:03:fa:f3:e6:9f:
d1:f9:a4:97:8c:28:bd:9b:da:e6:ca:40:fe:a6:4b:
2d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0A:36:2D:07:BE:C4:33:6F:72:D8:23:A2:22:E8:1A:BF:2E:9D:55
X509v3 Authority Key Identifier:
keyid:61:17:D6:15:80:43:15:0B:0A:D2:24:A0:64:8D:F0:18:57:06:01:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRfWFYBDFQsK0iSgZI3wGFcGAZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c96426-483a-4cbf-9aa3-9473580bc850/1/YRfWFYBDFQsK0iSgZI3wGFcGAZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c96426-483a-4cbf-9aa3-9473580bc850/1/YRfWFYBDFQsK0iSgZI3wGFcGAZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:92:a9:3b:24:ab:85:dd:13:fa:71:6a:ef:9a:82:02:d8:ab:
ea:0f:05:8f:c2:c7:45:3d:07:8e:60:22:c4:ce:be:9e:04:36:
fc:15:f2:a6:37:fe:fb:7f:54:fa:89:d3:17:77:50:3e:bd:15:
63:0a:be:74:2d:ca:ba:4e:13:3f:c1:6d:85:c0:ce:28:1a:de:
0b:e1:88:5c:d1:34:51:a2:f8:44:33:2c:b5:a2:14:d5:e9:c2:
74:01:aa:2e:a1:a1:5f:40:46:74:04:94:31:25:44:7b:f5:2c:
6c:f1:5e:4c:10:28:9c:d5:27:fc:ac:e6:44:d0:27:ef:aa:da:
07:bc:25:dd:d4:c3:35:9f:90:97:a1:57:85:8b:a7:9a:cc:05:
71:7f:a7:ef:67:e5:66:c8:d6:e7:9a:a0:10:16:f2:68:6d:87:
d9:f9:08:20:35:76:6b:06:ad:a2:ef:bc:59:a6:95:b5:08:be:
5c:45:c9:0b:c3:fd:54:dc:2e:0e:fa:cb:34:65:b1:3f:8f:6f:
82:42:de:d2:0b:9a:94:8f:48:43:b7:d6:33:95:da:58:d3:e5:
dc:b7:07:61:5d:08:61:a8:23:42:53:d2:ed:09:e8:49:0a:e2:
11:a7:ca:57:78:e6:1f:27:3a:38:3b:82:3e:ed:b8:fd:a7:28:
81:56:e5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:59 2025 by rpki-client