Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a3b5b2-6638-4a4b-9b85-15cc5da07826/1/pY79EI1MWw9PmoiuU7t_7J1ZS5I.mft
File: pY79EI1MWw9PmoiuU7t_7J1ZS5I.mft (raw, json)
Hash identifier: byQ/HmvvsWxYR8zSAAg8E54aBNx34UsQBKX2xxuMr0o=
Subject key identifier: 18:DD:B9:0C:FE:BE:C6:1A:54:5B:5E:2C:F1:71:10:F8:6F:9C:8B:0E
Authority key identifier: A5:8E:FD:10:8D:4C:5B:0F:4F:9A:88:AE:53:BB:7F:EC:9D:59:4B:92
Certificate issuer: /CN=a58efd108d4c5b0f4f9a88ae53bb7fec9d594b92
Certificate serial: 0194BBCDC75E1E7E66EA580413F97EE0F07A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pY79EI1MWw9PmoiuU7t_7J1ZS5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a3b5b2-6638-4a4b-9b85-15cc5da07826/1/pY79EI1MWw9PmoiuU7t_7J1ZS5I.mft
Manifest number: 0F27
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: pY79EI1MWw9PmoiuU7t_7J1ZS5I.crl (hash: 4LvnIy0QIjigM+iICAof4zPzcerNBvqBB24rFBGFi9o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c7:5e:1e:7e:66:ea:58:04:13:f9:7e:e0:f0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a58efd108d4c5b0f4f9a88ae53bb7fec9d594b92
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=18ddb90cfebec61a545b5e2cf17110f86f9c8b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:69:1c:13:aa:69:d5:29:4d:12:0b:6e:d1:23:
7d:42:6b:39:f0:dd:46:55:e8:3e:eb:4d:18:c7:91:
38:9d:21:0e:9a:20:b1:ec:c2:ee:10:1c:ba:1b:ea:
5f:df:04:6e:a2:86:e7:05:15:1f:ab:d2:4d:56:2e:
5d:04:e5:6f:67:86:7c:cc:84:7f:4c:0e:01:34:d6:
4e:a1:4e:5a:0b:81:39:60:d1:88:64:39:14:aa:db:
f8:df:f5:23:dd:2f:aa:ac:02:59:9a:e1:0a:23:50:
81:5f:e9:7a:4a:1b:eb:89:2b:85:28:37:98:f4:52:
55:b1:62:51:03:a7:22:ed:8c:53:38:96:4e:1b:6b:
ed:80:09:d6:eb:ad:86:05:29:23:11:ff:f1:14:6c:
c2:f0:0d:a4:db:55:46:61:a6:5d:f7:84:02:1a:f4:
98:ff:96:9b:f0:5f:79:7b:70:5f:33:5a:f7:48:88:
fa:b4:4a:0c:3f:d7:e3:88:0f:b5:3b:db:b5:b8:31:
25:1e:8e:72:fe:68:b1:9f:67:78:f8:0b:c6:4b:bb:
1e:43:e5:70:9d:23:09:b5:6a:5c:21:69:31:7e:ee:
0f:03:8f:ce:6f:17:17:3f:cc:57:d8:3c:af:0c:aa:
ff:cd:3f:40:ed:de:d0:dd:65:25:bd:31:df:a7:93:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DD:B9:0C:FE:BE:C6:1A:54:5B:5E:2C:F1:71:10:F8:6F:9C:8B:0E
X509v3 Authority Key Identifier:
keyid:A5:8E:FD:10:8D:4C:5B:0F:4F:9A:88:AE:53:BB:7F:EC:9D:59:4B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pY79EI1MWw9PmoiuU7t_7J1ZS5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a3b5b2-6638-4a4b-9b85-15cc5da07826/1/pY79EI1MWw9PmoiuU7t_7J1ZS5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a3b5b2-6638-4a4b-9b85-15cc5da07826/1/pY79EI1MWw9PmoiuU7t_7J1ZS5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ea:a6:cd:ea:be:a2:6a:94:f9:06:1f:81:4d:5c:3e:1a:ef:
31:87:b0:c8:e0:da:f1:f7:ce:b7:de:0a:2c:48:d0:5e:4d:75:
f9:6e:51:e4:11:b8:59:d5:dd:54:5e:20:76:0c:30:26:53:c1:
02:19:09:f8:7d:ad:dd:80:11:c9:10:8f:b9:5d:07:7a:02:09:
72:26:05:6b:45:4b:88:49:84:bb:09:59:c5:e6:80:4b:21:8e:
cd:14:d2:36:80:40:74:c2:30:87:60:69:d7:7e:b6:a5:43:27:
f9:77:04:d7:25:ba:36:d1:67:b1:74:b2:a5:32:88:76:d3:89:
38:53:44:5a:e5:cd:1a:23:da:4c:d8:38:ef:62:f7:c5:76:f9:
2a:a8:b2:c5:c8:b2:c8:36:f9:d7:54:6d:55:d6:79:ed:41:e6:
da:4f:e0:9f:e5:ef:48:d9:34:44:43:dc:19:8e:b5:e3:13:3a:
19:95:9f:ad:8f:da:99:59:b9:f7:9c:77:6b:e1:6d:fd:4c:27:
fa:c1:3a:7e:8a:0b:c5:5e:ae:b8:9b:62:64:53:8a:b0:cf:c4:
8a:49:63:f3:08:a3:60:b9:47:1c:26:32:cb:3f:fd:05:ce:f6:
a6:71:40:86:5e:bf:3a:ec:d2:3c:45:e7:ae:78:17:e1:99:78:
0d:8e:4d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:28:50 2025 by rpki-client