Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5fbb69-9b7e-43be-8904-19de2c183c05/1/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.mft
File: ykV-EXPE6FG5LTyO6ZZxUZSKmuk.mft (raw, json)
Hash identifier: ShvkekUgx3vwb2XZxxfiqOnm8ooz8ETImA7XAkedJzA=
Subject key identifier: 75:0B:E9:DE:38:34:2F:3A:E1:00:CC:68:13:2A:10:91:AA:00:BF:9C
Authority key identifier: CA:45:7E:11:73:C4:E8:51:B9:2D:3C:8E:E9:96:71:51:94:8A:9A:E9
Certificate issuer: /CN=ca457e1173c4e851b92d3c8ee9967151948a9ae9
Certificate serial: 0194BCAA33DCD8001D1A190E624CFCD4C17A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5fbb69-9b7e-43be-8904-19de2c183c05/1/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 14:00:58 +0000
Manifest this update: Fri 31 Jan 2025 14:00:58 +0000
Manifest next update: Sat 01 Feb 2025 14:00:58 +0000
Files and hashes: 1: ykV-EXPE6FG5LTyO6ZZxUZSKmuk.crl (hash: /fPZBstd0V7kBE/KdpDlB9jxggeAw9VwPmgbq6ptZ+8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:33:dc:d8:00:1d:1a:19:0e:62:4c:fc:d4:c1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca457e1173c4e851b92d3c8ee9967151948a9ae9
Validity
Not Before: Jan 31 14:00:58 2025 GMT
Not After : Feb 1 14:00:58 2025 GMT
Subject: CN=750be9de38342f3ae100cc68132a1091aa00bf9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b0:21:f0:ff:93:74:5b:49:60:eb:d6:a0:6c:
c8:83:21:00:e6:3b:cb:86:0a:56:8d:a8:ec:f6:b5:
b6:5c:29:d5:dd:5a:6b:54:c3:9c:91:bc:09:dc:45:
c1:78:d5:7d:01:7f:da:f0:c9:cc:58:8f:b2:c9:05:
33:2a:99:17:b4:a7:b2:2d:e8:a2:17:41:f9:8d:29:
98:51:c1:14:66:1b:6d:1b:40:0f:c8:39:9b:66:6a:
df:e4:c8:e0:44:e7:cb:6c:db:41:96:09:f5:88:a1:
2f:02:df:7e:3b:0c:db:5e:fe:b4:99:2e:16:d6:b8:
f9:77:bf:72:d3:a1:bb:2b:12:a0:a9:a5:ec:b7:77:
64:88:f1:8f:78:ba:cf:d7:00:66:6d:0b:3f:c7:3f:
84:af:d0:cd:16:2b:45:7e:e2:00:9e:4b:5f:3e:5e:
5d:cc:e6:5a:0c:fd:cc:11:bc:63:51:6e:74:9d:63:
01:ff:36:60:bf:a8:05:ad:4d:a0:98:74:ce:3e:78:
48:1d:31:08:6a:51:fe:89:02:88:1c:d7:e0:9c:7e:
e6:06:f0:bc:ea:77:21:91:c9:cc:a7:04:57:7d:7b:
99:04:ea:15:ab:fc:a7:48:a4:07:61:cf:f7:5f:50:
0b:25:be:38:7b:7d:73:6c:60:24:18:27:83:0a:b1:
2d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0B:E9:DE:38:34:2F:3A:E1:00:CC:68:13:2A:10:91:AA:00:BF:9C
X509v3 Authority Key Identifier:
keyid:CA:45:7E:11:73:C4:E8:51:B9:2D:3C:8E:E9:96:71:51:94:8A:9A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5fbb69-9b7e-43be-8904-19de2c183c05/1/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5fbb69-9b7e-43be-8904-19de2c183c05/1/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:e5:97:fe:07:79:6f:09:de:6c:7b:b1:d7:63:bd:3e:d6:b8:
ca:bd:a1:b4:f6:d3:7b:51:d7:0a:25:3a:b9:50:f2:e8:33:a7:
ad:33:b7:80:80:e8:4c:4b:e1:cc:f0:cc:ff:f0:4f:6e:ca:9e:
94:2b:81:42:d2:e5:b2:32:d6:fd:a0:b3:db:43:6f:5f:40:94:
eb:50:76:45:ea:3f:92:f3:56:e0:b4:70:96:0f:85:ba:ab:12:
75:db:dd:58:61:dc:73:9e:14:ce:76:50:34:a1:01:b3:e5:e4:
81:ca:7b:98:d9:33:f2:5b:8c:1b:69:87:61:e3:5e:66:da:fc:
ed:fc:07:b7:8f:53:2a:0c:7c:c8:93:18:f2:d9:87:69:16:44:
d2:85:f7:37:ec:b2:c9:fe:24:ee:58:dc:00:83:b2:c3:5f:fb:
40:16:9b:8e:67:d7:dd:c0:27:0c:d8:07:83:7d:8c:3a:a2:b1:
d3:b3:f1:7e:f0:d7:57:51:52:2e:40:e1:79:ea:79:6f:a5:e3:
28:8d:f7:8b:d1:f5:3b:93:5b:1f:77:3d:91:3f:0b:9c:d2:f6:
ca:22:5f:bb:a6:a7:98:36:37:bb:70:41:59:82:60:ff:da:30:
fd:d0:b9:c8:36:07:fe:6c:6f:2d:f0:e2:92:15:bb:85:0b:f2:
34:64:e4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:35 2025 by rpki-client