Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8bef8b-9765-4131-9caf-77351d0850c9/1/yO91rieylt0KS84TZH2LWJv06cM.mft
File: yO91rieylt0KS84TZH2LWJv06cM.mft (raw, json)
Hash identifier: UPf3buuQ0EFoZe7Z+SV5R/Dtshew0Ul+fLvtZS3gWTo=
Subject key identifier: 14:52:96:E9:9A:BE:9F:8E:BD:14:67:F4:AA:59:4C:A4:5B:8B:2C:29
Authority key identifier: C8:EF:75:AE:27:B2:96:DD:0A:4B:CE:13:64:7D:8B:58:9B:F4:E9:C3
Certificate issuer: /CN=c8ef75ae27b296dd0a4bce13647d8b589bf4e9c3
Certificate serial: 0194BBCE983C430D94E00E4FE8604B2FD4FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yO91rieylt0KS84TZH2LWJv06cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/8bef8b-9765-4131-9caf-77351d0850c9/1/yO91rieylt0KS84TZH2LWJv06cM.mft
Manifest number: 0F97
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: yO91rieylt0KS84TZH2LWJv06cM.crl (hash: 4NszmpxgejiQF6LHHNfgb0zFqJvtIgb5v3phAeASXNo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:98:3c:43:0d:94:e0:0e:4f:e8:60:4b:2f:d4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ef75ae27b296dd0a4bce13647d8b589bf4e9c3
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=145296e99abe9f8ebd1467f4aa594ca45b8b2c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:27:e5:27:bf:a7:eb:83:46:d5:7c:78:2e:1f:
19:a0:b6:41:31:01:98:b6:1f:14:84:ba:9d:c8:dd:
e5:1b:02:02:bf:62:00:83:66:0b:a1:05:42:70:fb:
58:f1:9b:fa:07:9c:b8:b6:93:30:85:d5:0b:35:69:
30:c9:95:b2:c5:3b:43:dc:3a:4b:a6:c4:3f:fc:a9:
33:45:f4:25:16:9d:95:15:c8:65:5f:68:9d:13:9d:
62:d9:94:4d:93:ca:0b:74:a8:1f:00:f7:9c:65:52:
a5:d8:c8:57:b0:84:63:a7:4f:da:a8:ce:7b:3d:a7:
31:3a:5e:a7:c0:74:24:1c:b0:a7:b4:71:39:57:c2:
62:8b:1e:fa:f2:50:84:cd:4d:bf:be:51:b4:8c:9c:
00:b0:a6:1b:87:6b:43:e1:73:e6:e9:1e:93:b4:8d:
3a:6c:29:4f:af:2c:87:95:dc:bc:e8:6e:1e:55:f7:
f5:87:61:52:39:e3:38:26:a8:c1:5e:2a:ef:e4:73:
d3:4a:82:7d:ea:30:e0:e4:fb:ed:b3:75:61:b8:75:
cc:29:64:ff:c8:5c:e6:f6:c2:91:26:87:00:3f:91:
e4:33:b1:88:0b:75:a6:8c:f4:af:34:dc:ae:31:ac:
30:4e:7d:2c:d0:9d:87:92:a4:39:ff:01:1e:4a:4c:
f9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:52:96:E9:9A:BE:9F:8E:BD:14:67:F4:AA:59:4C:A4:5B:8B:2C:29
X509v3 Authority Key Identifier:
keyid:C8:EF:75:AE:27:B2:96:DD:0A:4B:CE:13:64:7D:8B:58:9B:F4:E9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yO91rieylt0KS84TZH2LWJv06cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8bef8b-9765-4131-9caf-77351d0850c9/1/yO91rieylt0KS84TZH2LWJv06cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8bef8b-9765-4131-9caf-77351d0850c9/1/yO91rieylt0KS84TZH2LWJv06cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:59:bd:e6:33:9a:38:7f:e5:3d:a3:b0:85:72:89:11:e8:c2:
87:2d:a9:df:7a:c8:0a:8b:68:d6:08:76:8e:d2:fb:83:f7:5b:
ae:b2:54:f8:a3:80:4c:e0:0a:cf:b3:9a:5e:b4:70:fc:60:91:
31:06:1e:15:a8:00:49:b3:0d:84:bf:a7:85:7c:69:6d:61:a4:
b0:f9:41:d1:9b:e3:b3:aa:a8:eb:82:08:13:34:14:90:c4:c9:
85:9c:77:07:d5:e2:99:32:20:3d:53:a9:b9:12:4a:63:68:ab:
d0:b2:94:a9:4d:2c:0a:4a:1b:e3:bb:87:f3:59:bc:f9:e8:cd:
e1:08:b9:4d:b5:f7:99:d9:af:20:6d:1c:68:5b:2c:95:88:56:
ee:af:82:65:9a:74:c4:13:45:a3:c3:37:7c:62:e3:ae:50:5b:
07:39:92:95:d8:19:bc:dd:a4:d5:68:12:cd:48:50:07:af:55:
be:55:78:fe:f6:37:8e:66:f3:d3:b8:ba:91:52:1d:84:79:b2:
85:b6:92:2a:bc:c4:f5:87:92:79:be:70:9b:b8:df:51:3d:12:
a1:aa:8b:f5:88:3f:51:f9:3a:ce:12:6f:8e:b6:7e:30:0e:8f:
fc:ba:bc:49:64:4d:e1:e8:e2:dd:de:ac:20:a5:f9:ae:1c:5a:
9c:d5:d4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:02 2025 by rpki-client