Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
File: 0Yx5_S1sxF7htYD5OgUFxZffbYk.mft (raw, json)
Hash identifier: Fj69G5tkBR/HFz9roSm3zDhjsxm4s8OaZGLODo2y6Q0=
Subject key identifier: 02:4D:B8:C5:2D:A4:EF:5F:48:60:73:AB:D3:BD:16:20:A5:AD:68:B9
Authority key identifier: D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
Certificate issuer: /CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Certificate serial: 0194BC3C0B345F15EBAF1A9412E5C2D01C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
Manifest number: 033C
Signing time: Fri 31 Jan 2025 12:00:39 +0000
Manifest this update: Fri 31 Jan 2025 12:00:39 +0000
Manifest next update: Sat 01 Feb 2025 12:00:39 +0000
Files and hashes: 1: 0Yx5_S1sxF7htYD5OgUFxZffbYk.crl (hash: txT/b1oj8vKNWKh2D43DsuFlE8GXNi4k6TimAx2nD0E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0b:34:5f:15:eb:af:1a:94:12:e5:c2:d0:1c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Validity
Not Before: Jan 31 12:00:39 2025 GMT
Not After : Feb 1 12:00:39 2025 GMT
Subject: CN=024db8c52da4ef5f486073abd3bd1620a5ad68b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0e:04:a4:19:d8:d0:32:b0:16:e9:f5:8b:3f:
83:58:ca:de:79:12:8b:24:8a:c8:ae:ad:26:05:52:
9d:82:9d:f2:82:80:18:55:c9:c6:d0:ac:99:51:23:
bc:3b:bb:a6:d6:5d:6f:d0:71:96:6b:a2:7b:f9:2f:
41:7f:32:65:d4:79:02:c8:67:34:b6:ec:31:55:7d:
f0:8a:ae:59:65:d9:38:fa:7f:7c:f1:93:71:be:e5:
8a:ca:94:77:e4:c7:b2:8a:85:96:82:dd:e5:cd:a9:
c3:88:7d:5b:76:02:3e:b3:24:13:29:88:f3:77:aa:
c3:b2:d2:53:64:0a:0b:0e:7b:48:ba:86:56:ac:6a:
6b:ca:eb:ce:f9:7a:35:3c:c5:3f:60:c2:9f:07:81:
b4:2a:68:d5:24:1e:e3:b8:da:47:61:88:6c:3c:80:
7a:3f:18:a5:a9:16:29:4c:70:d9:10:d6:94:e4:8a:
d5:0d:26:1c:2a:f1:ae:13:02:a3:c0:0e:6b:14:92:
28:5d:80:06:20:ab:1d:2f:33:58:f3:9b:21:ff:95:
a1:c2:6f:f0:da:6b:d5:88:13:6d:65:24:fd:48:a7:
c2:14:b4:69:89:af:c0:b1:0a:54:88:89:c4:5f:b3:
41:6b:e8:a5:c8:69:e5:d3:6e:b4:1e:71:9a:91:ec:
a8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4D:B8:C5:2D:A4:EF:5F:48:60:73:AB:D3:BD:16:20:A5:AD:68:B9
X509v3 Authority Key Identifier:
keyid:D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:68:e5:dd:4b:00:1a:bc:15:80:a5:da:3a:dc:e6:4b:86:5b:
6c:1c:5b:09:34:d9:c6:95:6d:b2:52:a3:14:62:7f:83:a0:94:
b9:ba:05:5b:35:1a:e7:d2:f0:e6:4c:4c:94:c2:d7:67:6d:86:
46:10:88:96:c1:dc:22:56:46:27:3e:f0:4f:b4:0a:a6:8a:c4:
de:ef:ee:35:c4:24:9e:45:3c:3d:fc:67:81:00:f6:68:8b:f9:
35:e8:4d:02:0a:aa:69:f6:31:97:16:7b:5d:86:25:c2:14:14:
33:65:04:a6:80:33:a7:cc:74:3e:df:96:fb:6c:5a:66:fc:eb:
7c:4f:11:8f:bb:15:df:fd:6a:3b:7f:9e:58:f8:3a:dc:c7:18:
58:cc:e2:80:5d:69:f9:0b:29:15:a1:de:ad:6b:e9:f8:35:37:
03:1f:2b:e9:a8:8f:2b:b8:14:f0:72:3e:c6:f4:f1:db:db:ea:
3c:79:11:ba:a5:39:15:31:72:81:c5:c3:08:46:20:9e:2b:a4:
a7:01:52:4f:69:f2:6f:be:87:07:17:07:1c:85:1c:e1:99:0d:
91:56:a7:7a:c0:19:92:dd:91:c5:38:2b:32:4f:2f:c9:f8:9f:
d4:02:d0:9e:2f:7f:9b:c6:de:16:89:f1:79:4e:57:8a:97:16:
68:47:04:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:49:43 2025 by rpki-client