Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
File: ya3PjO-lllmLJLm2q2UHDdkcp5w.mft (raw, json)
Hash identifier: f+V/ctYZ4hyCN0nh7i90/8mV54zTmoPsVa5ldM0BsUs=
Subject key identifier: 67:56:AE:8F:CE:6E:CE:82:DA:85:2B:21:C2:88:B9:DD:3D:8D:63:9E
Authority key identifier: C9:AD:CF:8C:EF:A5:96:59:8B:24:B9:B6:AB:65:07:0D:D9:1C:A7:9C
Certificate issuer: /CN=c9adcf8cefa596598b24b9b6ab65070dd91ca79c
Certificate serial: 0194BBCEDEC9BFB72A342069CDCEA72B3E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
Manifest number: 04D1
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: ya3PjO-lllmLJLm2q2UHDdkcp5w.crl (hash: yMp0fLxFqiOjSl/sSRF51eIhhL+E2CmiNCld1jUttwA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:de:c9:bf:b7:2a:34:20:69:cd:ce:a7:2b:3e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9adcf8cefa596598b24b9b6ab65070dd91ca79c
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=6756ae8fce6ece82da852b21c288b9dd3d8d639e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:b1:c4:5a:d5:95:27:8c:17:34:f2:e8:49:
41:df:4c:93:98:d0:84:53:b0:74:97:47:af:e2:50:
52:cc:c8:32:b9:62:d0:e7:d9:72:f9:7a:1a:d3:66:
d7:fb:25:05:c4:2d:45:d8:35:2d:f5:06:aa:e0:65:
78:9b:4f:68:09:0f:21:cb:c2:54:df:8c:df:cf:69:
4c:37:4f:40:07:83:d8:f7:b7:78:b2:96:27:5f:a2:
79:8e:a2:fa:4a:63:b6:58:3c:2c:5f:9e:d2:23:09:
f5:8e:23:7b:97:0e:dc:8f:52:ad:15:9d:de:c1:f9:
55:d6:db:23:1a:16:dd:b7:8f:c4:d5:0f:5c:62:8a:
88:e2:bd:1e:a3:b6:d3:1e:61:84:1d:bd:f2:84:41:
fd:4e:a0:8f:45:62:a6:3b:76:eb:33:73:27:6b:a8:
ba:70:17:1f:1e:05:65:37:28:03:5c:10:19:f8:c1:
a7:15:a4:31:58:71:73:93:fc:39:14:7d:1f:04:c3:
ba:56:03:1b:66:82:a9:6b:60:d3:93:18:20:44:84:
3c:e2:ca:f9:72:22:32:f6:a9:10:7e:68:ab:c3:12:
51:fa:23:a3:d5:71:c6:66:bc:fc:d2:fe:2d:84:42:
bc:d9:19:3e:5f:ac:36:d7:6c:57:dd:20:0a:7f:fb:
8c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:56:AE:8F:CE:6E:CE:82:DA:85:2B:21:C2:88:B9:DD:3D:8D:63:9E
X509v3 Authority Key Identifier:
keyid:C9:AD:CF:8C:EF:A5:96:59:8B:24:B9:B6:AB:65:07:0D:D9:1C:A7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c6:57:50:31:c8:42:07:34:14:b9:f5:06:dd:26:47:92:59:
04:81:96:d1:35:1e:38:8c:47:43:07:0d:91:f0:ec:7a:50:20:
c7:80:40:19:65:3e:78:5c:73:93:b0:aa:78:2b:93:72:6b:f3:
c5:8c:8a:b8:35:24:39:40:da:06:f8:40:75:d4:a9:a3:2f:58:
8c:d8:fb:08:16:5d:18:3e:af:71:5c:e0:68:e0:30:09:e9:c4:
cf:f4:ff:eb:67:7b:ad:5c:5b:25:a6:ff:33:45:48:9c:19:19:
7a:87:90:08:a7:97:04:0f:b3:4d:94:a9:a2:8d:2b:d3:03:c9:
3f:4b:46:d9:72:52:2f:85:7b:bd:3a:4c:94:49:c4:f1:2b:af:
5c:81:67:8d:22:e7:3b:4e:61:9d:12:c5:a9:3a:dc:53:af:3a:
e4:38:db:ee:1c:17:69:45:8a:1a:86:c6:df:11:4a:ad:c3:7f:
d6:fa:a3:db:f0:b9:a7:f2:a5:61:34:ce:c0:24:cf:d0:dd:35:
93:e7:60:00:7f:7a:41:37:cf:40:dc:4d:ff:51:2a:f0:c5:af:
dc:7c:e3:37:3f:97:63:a2:f3:9f:02:7b:a2:6a:73:be:84:49:
f8:1c:69:b6:c2:89:b1:ac:2f:f4:67:7b:52:ab:7a:ba:34:63:
d7:f7:58:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:22 2025 by rpki-client