Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
File: yYlmC_FH9ij7fPiycYc3_qhimNA.mft (raw, json)
Hash identifier: i76Odl4BgCReTr8I4bQtrLzoctolc3gIc7Boy9SfZuc=
Subject key identifier: 3A:CA:AC:39:70:81:EC:DE:FC:C5:DB:A3:08:9C:71:DD:92:0C:6C:E6
Authority key identifier: C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
Certificate issuer: /CN=c989660bf147f628fb7cf8b2718737fea86298d0
Certificate serial: 0194BBCEA56128FC0D6EA5595867B8EFDC44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
Manifest number: 0731
Signing time: Fri 31 Jan 2025 10:01:09 +0000
Manifest this update: Fri 31 Jan 2025 10:01:09 +0000
Manifest next update: Sat 01 Feb 2025 10:01:09 +0000
Files and hashes: 1: yYlmC_FH9ij7fPiycYc3_qhimNA.crl (hash: +aNcuoiWSH5Zhw5an5T5RIH6S1Qn+ZaudWZBS5fW2Z0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a5:61:28:fc:0d:6e:a5:59:58:67:b8:ef:dc:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c989660bf147f628fb7cf8b2718737fea86298d0
Validity
Not Before: Jan 31 10:01:09 2025 GMT
Not After : Feb 1 10:01:09 2025 GMT
Subject: CN=3acaac397081ecdefcc5dba3089c71dd920c6ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:11:ce:46:e9:35:98:0f:c4:6e:bb:be:9f:60:
c5:4a:15:0f:27:a1:ac:04:9a:4b:45:0b:11:10:06:
d2:0b:bd:59:9c:8b:4d:5c:2e:6c:9d:62:3f:4a:cd:
de:85:f5:fd:95:20:f6:81:a7:ef:7a:eb:a9:5c:87:
17:50:61:0c:d2:fe:c4:13:78:f4:19:1c:3a:ee:99:
3e:03:22:a5:07:e5:80:bb:88:19:08:05:ce:13:ad:
0c:67:e7:4c:f0:0f:e8:8f:ab:67:71:b1:8c:d7:ea:
f7:00:88:57:30:e4:12:10:53:d4:3d:05:a6:b9:86:
38:3b:cf:95:99:7b:9f:ed:d4:c9:48:57:af:f1:c3:
79:3d:2c:27:ff:58:56:31:ba:17:46:2c:93:01:8b:
f1:7b:37:43:b6:05:a9:5f:be:96:8c:4b:23:1a:b4:
2e:a9:8e:29:f2:d2:fc:c5:2b:0e:25:56:d4:72:2b:
7d:76:31:04:8b:cc:04:97:98:f1:81:57:45:9b:df:
81:e8:02:e2:05:7c:0f:da:03:da:8c:a4:fd:d3:2e:
f6:37:c2:2a:0c:d6:18:e2:f7:b1:61:3a:17:9b:c7:
aa:a2:fb:8a:60:85:62:07:ef:4a:19:a9:9b:e9:37:
b6:c4:47:79:6b:2e:c7:42:39:8e:6b:54:e0:0f:9c:
9d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CA:AC:39:70:81:EC:DE:FC:C5:DB:A3:08:9C:71:DD:92:0C:6C:E6
X509v3 Authority Key Identifier:
keyid:C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:73:66:91:f6:9c:4d:cb:f4:f0:40:a4:72:9f:38:69:6d:49:
2a:f4:44:a7:91:ca:8e:d0:79:6c:79:ef:31:ac:6c:fa:38:9e:
37:f6:9e:c2:df:b4:81:78:d7:3e:d9:9c:b4:9a:29:e9:2a:e6:
cf:8e:9d:9a:2d:4a:2f:22:8d:dc:a3:1e:7b:b9:6a:f1:8d:88:
fb:09:6c:6d:42:5d:cd:42:81:3f:a1:e9:38:ab:7c:7e:fc:30:
bd:0a:c9:85:3c:36:ef:1e:e3:4f:fc:d5:ae:8f:d6:3f:f5:42:
bb:cc:17:7d:d9:96:73:9d:4a:78:04:17:50:76:86:82:a2:61:
ae:e8:48:8f:51:0a:2d:92:89:1d:c0:23:ec:b8:98:cf:89:84:
5f:2b:77:90:35:4c:95:c6:99:2b:1f:35:d9:b2:6d:3c:0e:ea:
a1:e2:51:55:69:d7:de:93:d8:d4:d4:e0:9c:86:35:3b:d9:d3:
8c:b3:b8:8c:60:05:70:77:79:59:8d:b4:0c:99:45:91:29:4f:
72:30:25:ca:6b:4a:dd:29:83:49:9b:51:34:60:a4:5e:d2:2b:
41:85:7d:88:12:3f:75:7c:54:6a:9a:99:87:fd:33:21:26:3d:
72:2c:8e:62:b0:a8:d7:27:e3:00:95:f2:cd:8d:28:23:49:fa:
fc:ef:0a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:59:31 2025 by rpki-client