Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
File: JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft (raw, json)
Hash identifier: a3bNIfOj+LdrKhw9yhaaE3xIcujxOzS/kD+Vks0bkCc=
Subject key identifier: DD:F0:F1:71:0F:60:42:C4:A9:5D:70:CD:6E:94:EE:2E:38:85:2E:D4
Authority key identifier: 27:1B:98:A6:0A:92:68:20:A4:8C:B4:3A:4A:F3:08:C8:8F:F2:72:1A
Certificate issuer: /CN=271b98a60a926820a48cb43a4af308c88ff2721a
Certificate serial: 0194BD17C9E41B6652B5B4555D9CD15DC7B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
Manifest number: 0CEF
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl (hash: +w2rAaYnreXOfel3YOUeAx4lOrXm7LfLdBjkFGVOOd0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c9:e4:1b:66:52:b5:b4:55:5d:9c:d1:5d:c7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271b98a60a926820a48cb43a4af308c88ff2721a
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=ddf0f1710f6042c4a95d70cd6e94ee2e38852ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5a:96:37:b3:d6:4e:15:66:95:ae:5a:8b:33:
77:eb:d8:b0:d1:91:04:9b:a8:9c:90:0d:b5:77:e9:
96:d5:6d:75:e2:fe:d2:f2:cd:5e:2d:0b:07:80:52:
0f:ab:ec:40:a8:26:69:c4:91:51:88:75:c5:7d:6c:
43:7b:8f:24:7c:23:96:c0:5f:7f:c7:3b:49:e8:22:
cf:ed:37:b9:39:54:00:75:76:1c:63:88:bf:c1:3d:
42:cc:b5:70:fe:08:4b:66:87:64:02:01:f5:ff:48:
fb:d7:f2:57:b3:85:74:ac:04:01:7d:a4:99:3f:ff:
8f:97:27:e8:45:be:b8:e5:dd:56:f0:8a:57:31:ba:
7f:c5:c0:2a:2f:ae:4a:76:27:fa:8d:53:0b:23:d5:
eb:df:24:f9:18:1b:1a:73:55:da:dc:4c:4d:d1:75:
ec:09:4e:21:c4:1a:5f:35:78:a5:8d:b3:26:46:f6:
8a:02:7a:47:97:09:c6:ad:b7:2e:6b:14:a6:3d:ac:
33:c8:d9:dc:05:db:07:cf:90:c9:5d:ce:82:2f:d6:
66:79:05:a7:9d:4d:b3:f8:f4:e2:f2:3a:15:cd:ca:
7b:db:0d:50:e7:81:f2:58:bc:4e:88:be:47:bc:f6:
48:e9:e4:51:6e:fa:a1:e8:22:ba:f3:6e:92:ef:ee:
1d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F0:F1:71:0F:60:42:C4:A9:5D:70:CD:6E:94:EE:2E:38:85:2E:D4
X509v3 Authority Key Identifier:
keyid:27:1B:98:A6:0A:92:68:20:A4:8C:B4:3A:4A:F3:08:C8:8F:F2:72:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d1:2a:ea:e0:0c:80:e9:06:80:73:4d:46:e2:8b:61:3c:23:
3a:ac:f8:bf:30:6b:30:51:a9:1e:3b:15:a9:93:52:4f:c8:f5:
d6:04:64:ea:15:46:18:9a:a8:53:97:d0:35:cb:44:65:d9:60:
fd:1d:89:d8:f9:28:f5:92:2b:f2:06:a8:a8:bc:7e:f8:7d:5f:
e6:4d:b4:fb:83:18:1c:77:97:27:c2:07:9d:a4:cb:19:74:6e:
f6:64:0b:f8:cc:72:8f:dd:e7:25:96:c7:8c:14:04:00:0b:b1:
36:37:af:eb:b8:b9:96:1c:ef:a1:ce:44:fd:ac:81:9e:8f:c7:
cc:df:34:b3:9e:94:cd:b5:73:2f:88:fb:58:20:cc:ed:cf:8c:
61:72:34:34:06:87:22:a7:aa:f0:65:42:9f:0f:80:48:98:d3:
da:92:df:24:bf:ca:7d:27:42:77:4a:d1:10:93:f6:75:3a:8c:
22:ba:3d:ce:09:a5:29:ef:ce:11:85:f2:73:f0:ac:a4:2a:be:
2a:bd:06:fa:8e:b7:59:4c:b2:b2:d0:a5:ac:1f:e4:24:f2:ad:
28:4e:5b:ba:41:cc:78:42:c6:69:dd:43:2e:5a:8d:59:38:e0:
b9:b2:50:6d:8a:bb:c6:38:f2:3d:17:84:cb:2b:68:f4:c2:97:
67:96:88:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:00 2025 by rpki-client