Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a28553-899c-4068-9673-ded2113b9060/1/YPMdggwyQA3sDGBJYXiZTVd1Ksw.mft
File: YPMdggwyQA3sDGBJYXiZTVd1Ksw.mft (raw, json)
Hash identifier: ee9AXyVeu1EkAVA2txWWBG/VikCXag5wOUEY4XAHtrs=
Subject key identifier: C4:58:E2:E5:1C:81:F1:C3:67:DE:0D:4A:92:DA:71:A3:95:42:77:9B
Authority key identifier: 60:F3:1D:82:0C:32:40:0D:EC:0C:60:49:61:78:99:4D:57:75:2A:CC
Certificate issuer: /CN=60f31d820c32400dec0c60496178994d57752acc
Certificate serial: 0194BC3C55AD43CCB095085B9E5D095E4861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPMdggwyQA3sDGBJYXiZTVd1Ksw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a28553-899c-4068-9673-ded2113b9060/1/YPMdggwyQA3sDGBJYXiZTVd1Ksw.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: YPMdggwyQA3sDGBJYXiZTVd1Ksw.crl (hash: hBVTVrgK0W+V+6I5Dnwme+c+ltoiNMr8QwApf9Il+uw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:55:ad:43:cc:b0:95:08:5b:9e:5d:09:5e:48:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f31d820c32400dec0c60496178994d57752acc
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=c458e2e51c81f1c367de0d4a92da71a39542779b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:66:7a:c5:a5:94:f7:8d:a6:be:dd:2a:b7:
16:00:a4:37:3e:5f:e2:1f:a1:e8:b8:48:98:75:ed:
e4:5e:9c:96:54:15:af:ff:4c:52:da:fd:d5:b0:2d:
38:d1:2f:0c:35:ee:3c:57:99:81:6b:f0:30:cb:86:
20:36:10:69:ea:7c:e3:fb:ac:85:fe:08:2e:2d:16:
d8:45:28:6c:91:b0:56:2f:f7:44:44:38:d2:ff:6f:
af:b9:88:0f:5f:29:12:29:0a:3c:ee:39:bf:b0:5e:
70:22:6f:55:a7:12:3a:c7:f7:eb:7e:4e:32:7c:33:
fb:e4:a1:85:06:64:da:51:a6:32:0a:17:03:21:82:
78:5f:44:7e:db:45:0f:34:a7:58:d8:64:39:f1:86:
cf:64:31:70:5c:ba:3b:2a:f2:31:5b:aa:eb:dd:6a:
35:ab:5d:90:6c:6c:d8:1b:a9:04:fd:db:d1:99:b5:
40:4f:80:53:80:2f:64:b8:5a:4d:ad:d4:a0:ae:03:
ff:ad:a9:a1:ab:ad:e8:52:27:41:fe:4b:e5:eb:47:
f7:36:25:64:64:76:9e:a0:89:15:68:68:0e:5e:0e:
9b:4c:e9:bf:13:38:17:2a:99:97:ed:bd:8f:bc:c1:
26:b7:fc:fa:1d:ce:8a:87:c5:90:b1:81:d9:60:6f:
b2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:58:E2:E5:1C:81:F1:C3:67:DE:0D:4A:92:DA:71:A3:95:42:77:9B
X509v3 Authority Key Identifier:
keyid:60:F3:1D:82:0C:32:40:0D:EC:0C:60:49:61:78:99:4D:57:75:2A:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPMdggwyQA3sDGBJYXiZTVd1Ksw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a28553-899c-4068-9673-ded2113b9060/1/YPMdggwyQA3sDGBJYXiZTVd1Ksw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a28553-899c-4068-9673-ded2113b9060/1/YPMdggwyQA3sDGBJYXiZTVd1Ksw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c7:a1:6d:06:a8:aa:f0:ce:84:eb:35:55:6a:d9:be:cd:c4:
24:0c:a7:a1:f4:ce:6c:d2:14:70:22:cd:da:02:26:3f:05:11:
af:c3:24:47:55:ec:5b:41:3c:3b:28:a6:ac:8f:19:5b:a1:a1:
c6:c1:80:87:d8:72:d9:cf:2c:aa:7e:98:4f:8e:09:99:0d:f5:
7c:9f:11:85:cb:77:10:c0:5c:39:41:51:25:8d:f5:11:1b:d2:
95:8a:77:be:86:c8:f8:7b:84:f7:09:4f:b0:ae:1b:77:45:1c:
cc:4c:12:7e:1f:92:77:36:52:45:03:9e:df:db:cb:e6:c7:33:
7b:28:7c:e9:1e:66:90:9f:d0:50:92:f1:74:79:53:61:7c:be:
2e:a9:06:5b:a9:2f:e8:56:c5:78:6a:a2:f6:c5:41:a5:3c:e0:
a7:c1:94:c2:10:48:27:de:d9:cd:f0:c0:6b:7e:88:ce:c3:69:
c1:46:2e:d4:ec:9c:e9:9c:c1:fc:3f:c4:ec:6e:ce:43:b1:57:
a2:88:b5:7f:3e:1d:b8:8b:cb:89:b5:93:7e:c4:8b:17:de:69:
28:77:9d:e7:11:78:05:fa:15:8d:d6:ec:ec:a6:8e:51:81:6c:
d4:7d:96:11:47:9e:52:bb:b5:55:30:30:65:06:c5:43:3f:eb:
08:81:5f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:16:36 2025 by rpki-client