Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft
File: Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft (raw, json)
Hash identifier: oRYOjXlUiHX7LvIOQF3d9zdDiwPPaER1hKnfX/O8N9Q=
Subject key identifier: EF:84:27:DA:99:C6:CD:EC:38:BF:83:DC:09:44:E0:A2:27:0D:FF:5D
Authority key identifier: 63:A8:CA:16:66:20:6D:2C:F1:2B:50:78:72:EA:D0:F5:A7:93:D0:E0
Certificate issuer: /CN=63a8ca1666206d2cf12b507872ead0f5a793d0e0
Certificate serial: 0194BC72A48F93CF8A2C171DE4A61886BA73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6jKFmYgbSzxK1B4curQ9aeT0OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft
Manifest number: 05B5
Signing time: Fri 31 Jan 2025 13:00:17 +0000
Manifest this update: Fri 31 Jan 2025 13:00:17 +0000
Manifest next update: Sat 01 Feb 2025 13:00:17 +0000
Files and hashes: 1: Y6jKFmYgbSzxK1B4curQ9aeT0OA.crl (hash: pma9igigrC7CKrRqb+5DJljUhWVJXN76KwDpcIfpZ7k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a4:8f:93:cf:8a:2c:17:1d:e4:a6:18:86:ba:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63a8ca1666206d2cf12b507872ead0f5a793d0e0
Validity
Not Before: Jan 31 13:00:17 2025 GMT
Not After : Feb 1 13:00:17 2025 GMT
Subject: CN=ef8427da99c6cdec38bf83dc0944e0a2270dff5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:33:83:3d:f7:72:a5:43:35:bc:55:90:ef:e4:
41:97:96:eb:9b:a9:6e:a2:60:fd:2d:8a:09:2f:01:
c8:46:74:24:78:9b:73:a9:cf:fa:72:af:5c:65:52:
95:50:31:13:a4:70:0b:1e:c3:8b:af:54:82:64:73:
cc:d9:fd:01:93:46:f6:fe:9f:7a:e5:92:96:71:af:
f9:ea:57:fc:63:1b:3e:da:91:c6:de:66:b1:f3:b5:
8a:4f:dc:36:1f:27:d9:6e:49:91:f7:30:db:00:2f:
03:43:31:fb:86:84:c9:dd:16:8e:02:7f:21:54:04:
65:f8:fe:59:bc:8e:2a:5e:a1:0d:65:85:8e:11:d4:
21:42:27:c4:82:c8:5c:6d:bb:27:dc:e4:fa:e0:c9:
5b:90:5c:0c:ba:60:6f:62:df:15:a7:bb:5f:ab:cb:
ca:3d:a5:b3:62:70:80:a8:06:f9:54:59:76:73:cf:
0a:dc:78:28:a0:59:d1:4f:f2:16:11:06:b2:60:33:
89:47:97:f7:bf:ad:7b:61:91:1e:0f:a8:35:47:41:
ed:f9:79:0e:df:09:66:84:11:a3:04:25:4e:8e:3f:
d8:7d:ee:c2:5f:67:e9:ea:3f:3f:04:f2:e8:5f:6c:
d2:f4:15:a3:49:34:02:d2:3b:61:31:fe:a9:58:69:
95:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:84:27:DA:99:C6:CD:EC:38:BF:83:DC:09:44:E0:A2:27:0D:FF:5D
X509v3 Authority Key Identifier:
keyid:63:A8:CA:16:66:20:6D:2C:F1:2B:50:78:72:EA:D0:F5:A7:93:D0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6jKFmYgbSzxK1B4curQ9aeT0OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:dd:18:57:59:bd:ca:6b:24:84:b6:6d:2a:4d:30:3b:57:ee:
a9:18:36:99:e1:30:bd:9a:80:fe:f6:d8:c6:a7:f2:0f:68:5f:
aa:d0:9e:51:60:52:2d:35:40:fe:31:d3:09:07:43:02:af:54:
d8:2d:8d:59:b3:ec:91:16:22:32:64:d3:fd:60:b4:2c:03:6a:
01:43:0c:a3:95:49:ee:3b:2f:10:18:8a:18:2e:7d:8d:94:f7:
52:63:8f:16:4c:11:c9:22:57:9d:31:9b:8e:85:b8:1c:3b:a7:
34:73:4c:42:76:bd:ae:d2:b1:ae:7c:e8:bf:e5:60:c3:4f:23:
d4:68:c7:ef:76:03:6f:9b:9d:08:22:b5:d5:3a:1c:68:81:c0:
ff:d9:ef:45:66:a4:63:5a:eb:3c:9b:a4:81:08:b3:e7:94:5e:
f1:2d:2d:e8:6f:8b:64:d1:57:8e:e4:b7:33:05:0f:70:90:f0:
74:3e:9f:29:e4:8b:a8:fc:35:69:76:30:e7:ae:9c:d4:bd:11:
e0:73:9b:a7:c7:3c:87:da:4c:43:0c:ec:38:a6:0b:c1:62:b1:
eb:6a:3a:fe:7f:3d:d2:15:ad:90:69:c4:0c:3b:9d:a2:6a:5d:
42:67:a4:9e:ea:4d:b3:9d:84:53:63:cb:b2:93:61:33:36:a1:
b4:8b:4d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:55 2025 by rpki-client