
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
File: YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft (raw, json)
Hash identifier: PQVrcSSTnnnXyBYe56LDF1jWaZfUKhX91fT9rrbUf4I=
Subject key identifier: 85:5D:DD:FF:ED:AA:8E:BD:44:1C:1D:EB:08:16:F5:42:7A:0C:4B:ED
Authority key identifier: 63:06:23:02:B4:38:59:23:76:C4:26:4F:49:DC:5E:67:3E:DB:2C:FB
Certificate issuer: /CN=63062302b438592376c4264f49dc5e673edb2cfb
Certificate serial: 0194BD8579B4EDA34D66D699EF3A6632DEDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
Manifest number: 0815
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl (hash: m+9RJ3iKGl+ERmlqwG1UYOdZXnkkg+ls/F4yvnlBYWk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:79:b4:ed:a3:4d:66:d6:99:ef:3a:66:32:de:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63062302b438592376c4264f49dc5e673edb2cfb
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=855dddffedaa8ebd441c1deb0816f5427a0c4bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:6b:ab:a3:a4:59:9f:dc:d6:19:0f:e4:b8:
43:8f:de:d5:4f:63:91:63:90:5d:a1:dc:d3:6d:49:
4b:c2:ed:26:fd:51:ce:7e:5b:68:0f:c1:18:73:bd:
1b:24:cf:ed:f4:73:25:f3:3c:c8:e8:c8:f6:da:f8:
45:b3:f1:58:f2:57:cd:9e:84:7b:83:96:50:23:5e:
75:b3:1d:8f:ce:f0:cb:bc:00:77:cd:0f:13:a3:31:
cd:59:77:d3:8e:61:ff:77:51:9a:4e:5f:ea:09:33:
b5:7a:0d:3d:79:99:7f:85:d1:25:23:28:aa:ec:4e:
0e:4c:47:02:68:75:e2:69:1b:8a:80:df:a7:69:7b:
90:98:9f:c4:2e:af:93:90:31:ef:5e:92:a7:4f:17:
cf:f7:69:8c:4c:5c:70:c4:04:0f:03:3a:7d:6c:09:
50:92:7e:8e:26:9a:99:c8:ec:4a:ab:36:27:57:fd:
7d:f7:1d:0c:01:8e:41:b7:03:99:a7:71:c6:1f:92:
b6:a9:23:e6:52:6f:f3:9c:97:48:c7:d6:df:cc:ea:
12:43:86:73:3c:ac:20:fe:65:94:32:d5:5c:6a:4a:
99:1e:33:26:88:ea:44:73:21:67:c1:0a:f3:97:48:
8f:71:7f:d5:b2:08:bd:36:3c:72:4c:db:13:ff:54:
f4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5D:DD:FF:ED:AA:8E:BD:44:1C:1D:EB:08:16:F5:42:7A:0C:4B:ED
X509v3 Authority Key Identifier:
keyid:63:06:23:02:B4:38:59:23:76:C4:26:4F:49:DC:5E:67:3E:DB:2C:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1d:11:2e:00:e7:ae:81:d5:b6:0a:fc:1d:26:62:3f:dc:de:
bc:f9:2e:9c:68:5b:e3:fd:57:2c:18:bc:e7:73:ac:a9:7b:bf:
76:27:f5:5d:1e:02:01:5e:ac:4e:9b:b6:3f:29:c4:72:ce:83:
81:40:06:d8:58:8d:0b:96:24:eb:23:67:12:e5:db:b0:eb:f1:
03:39:84:93:d4:d2:00:29:de:fc:9d:40:6d:27:38:0f:3e:5b:
e2:1f:5b:9c:12:94:b2:73:10:3b:ab:df:2e:7a:2e:f3:4c:72:
31:6c:a9:f5:cc:aa:1d:87:a1:80:c7:25:58:68:ad:d0:4e:41:
ad:a6:3e:96:f8:29:b1:3a:77:4d:a3:b8:a9:cf:70:a2:6a:16:
9e:2a:30:6d:f4:1b:d6:e4:dd:da:46:ae:77:e0:32:a5:c2:ad:
d5:49:a8:38:87:ab:33:2d:47:1a:3b:e5:1a:9a:a0:3d:57:b9:
75:c8:b5:da:d3:53:92:07:3f:84:da:7c:fb:a9:9c:fd:b1:8e:
25:3e:e1:d4:63:ed:f0:db:6e:a4:b2:2a:03:e1:2c:fa:51:6c:
d6:ec:c0:5e:b9:27:50:92:6f:0d:6d:5a:6d:45:82:fe:b4:3f:
19:21:74:57:68:cc:db:61:b7:64:05:19:ed:ad:2a:2e:0f:59:
93:18:b0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:48:03 2025 by rpki-client