Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b55005-005d-4a64-be1a-dd2b061bd4f2/1/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.mft
File: yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.mft (raw, json)
Hash identifier: 4UMuxw5yZSgSjsIZjzCjakM682oQJAcwn/93k943Gm8=
Subject key identifier: 2B:4A:72:DF:97:CD:30:8E:ED:DF:59:44:9A:0D:5B:69:AA:F6:C1:9E
Authority key identifier: C8:DA:89:FB:15:2D:43:C6:3E:3D:A2:FD:6A:0B:0D:FB:22:A0:65:81
Certificate issuer: /CN=c8da89fb152d43c63e3da2fd6a0b0dfb22a06581
Certificate serial: 0194BCAA1E56250D2EC36DAFD091F3E6D91E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b55005-005d-4a64-be1a-dd2b061bd4f2/1/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.mft
Manifest number: 0BF8
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.crl (hash: 0Xq8r+m4tnbG6QAkSd2b1knPsM/ymytUCxiJrpELwtA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1e:56:25:0d:2e:c3:6d:af:d0:91:f3:e6:d9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8da89fb152d43c63e3da2fd6a0b0dfb22a06581
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=2b4a72df97cd308eeddf59449a0d5b69aaf6c19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e7:b2:86:05:10:51:eb:16:98:d3:a0:43:d8:
35:12:f5:90:11:1a:45:c4:85:d2:90:f2:55:26:a7:
aa:72:fc:89:d5:31:af:4f:66:a3:15:97:6e:ad:64:
f9:56:8a:78:d8:4c:95:5f:bf:6f:c1:4c:02:07:a0:
09:18:c5:99:9f:88:c4:0f:9e:4c:4d:79:25:2d:8d:
0e:88:11:94:0e:ee:8c:12:37:4d:47:31:05:75:38:
43:b9:33:d6:56:76:da:3e:12:cb:a5:a3:d6:02:f1:
17:05:68:dc:27:af:4f:fa:99:c1:57:b4:f3:77:e8:
03:28:67:b7:c2:6b:74:bb:29:de:16:06:14:a9:4d:
d1:f1:25:0b:63:8c:8d:75:e4:a0:ac:c3:92:b0:0d:
b4:d9:1d:fb:5a:51:c7:46:79:e7:37:8d:6b:c6:32:
36:94:80:a1:28:63:10:4b:ef:73:38:2d:03:bb:1a:
28:df:da:ce:1f:6e:1e:5b:5c:f8:f9:d9:c2:25:0c:
5a:67:d9:c2:0b:09:14:08:59:75:58:fc:e9:a8:d0:
5e:01:f1:d5:74:d5:58:7f:25:e2:93:ab:62:27:0b:
22:30:e9:73:c3:8f:3a:48:5c:2b:05:78:9c:6a:fb:
a5:bd:92:df:0a:c1:3c:98:ab:04:4f:4f:4c:98:e4:
0a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4A:72:DF:97:CD:30:8E:ED:DF:59:44:9A:0D:5B:69:AA:F6:C1:9E
X509v3 Authority Key Identifier:
keyid:C8:DA:89:FB:15:2D:43:C6:3E:3D:A2:FD:6A:0B:0D:FB:22:A0:65:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b55005-005d-4a64-be1a-dd2b061bd4f2/1/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b55005-005d-4a64-be1a-dd2b061bd4f2/1/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:65:a7:48:8e:77:27:27:d0:28:e6:e8:b9:90:bc:8a:c6:21:
b4:63:9e:cf:39:15:e7:9d:38:68:bb:f7:67:c8:1c:45:da:0e:
17:cd:84:e1:04:07:1d:da:34:8a:ad:a2:1c:db:a7:a8:53:b1:
57:da:c0:64:8e:3a:8b:13:32:b1:0f:51:d6:2b:48:bd:29:89:
3d:8a:08:55:7f:d2:00:be:51:c5:75:07:97:b7:28:82:ab:d7:
0a:8e:74:b5:35:2a:56:fd:32:25:2e:bd:ae:fc:33:25:1e:eb:
0a:51:f8:c1:00:7e:79:04:5b:0e:fe:f6:6b:bf:68:a9:50:35:
52:bd:0f:80:e0:28:26:c5:e6:a5:7a:7f:a4:e9:c9:05:9e:dd:
61:b1:51:bb:12:07:db:53:58:eb:fa:76:aa:7d:0c:f6:80:8e:
38:de:38:de:a2:3c:b0:f3:0b:02:db:00:5b:2b:66:5b:8f:fb:
b6:04:9c:b0:44:e1:dc:ac:09:92:1b:a8:3b:42:b1:e5:78:c7:
48:9b:29:45:be:a4:15:0c:7f:6d:6c:0d:cf:40:fd:7b:c8:1c:
f8:a2:b9:44:14:81:90:58:24:da:63:7d:db:e4:6c:24:b0:70:
d7:1d:ad:4b:e4:e7:5b:d7:3d:b2:34:2a:29:d5:63:46:db:70:
b3:1c:c8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:09:08 2025 by rpki-client