Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/497dd1-755e-442a-b31d-1c13250a6a3c/1/y_nNJDztaTe2vqVxAoFP-bpCZiE.mft
File: y_nNJDztaTe2vqVxAoFP-bpCZiE.mft (raw, json)
Hash identifier: 0TtiQNkpqK1RZeJUfDshuAkQbCEFouXT9HpTk7Or9Go=
Subject key identifier: 09:A4:79:9B:54:03:A2:04:50:63:CA:0E:41:E2:83:2F:12:AC:83:1F
Authority key identifier: CB:F9:CD:24:3C:ED:69:37:B6:BE:A5:71:02:81:4F:F9:BA:42:66:21
Certificate issuer: /CN=cbf9cd243ced6937b6bea57102814ff9ba426621
Certificate serial: 0194BC3C055A92D531D3927D8471E848125D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_nNJDztaTe2vqVxAoFP-bpCZiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/497dd1-755e-442a-b31d-1c13250a6a3c/1/y_nNJDztaTe2vqVxAoFP-bpCZiE.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: y_nNJDztaTe2vqVxAoFP-bpCZiE.crl (hash: Q1GMHS0gvF7FvXTdzZxtlup9p79bgSnGE2/c6eVcJdA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:05:5a:92:d5:31:d3:92:7d:84:71:e8:48:12:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf9cd243ced6937b6bea57102814ff9ba426621
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=09a4799b5403a2045063ca0e41e2832f12ac831f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:54:f6:24:b2:62:74:b1:e0:b4:78:f8:87:15:
5d:02:ea:94:24:76:63:6d:cd:f4:c3:10:9c:f1:6b:
74:98:11:04:0a:6e:4f:bc:41:a8:bc:b6:b7:69:a9:
f3:69:08:3f:68:7b:c6:63:93:45:04:db:09:23:df:
29:0a:fe:2b:4a:14:65:80:e1:5c:8d:2f:fc:cc:8e:
99:f9:84:63:30:2e:e4:49:3c:6c:97:3f:84:3f:b3:
c3:8b:bf:f3:b0:c2:66:57:2a:02:ee:13:87:d7:28:
81:b7:4f:06:6b:66:29:2d:f4:4a:22:cd:48:f6:1a:
0f:b5:3c:2f:50:bb:da:2b:d5:29:2b:fc:f9:18:40:
2e:c1:9e:3a:d4:fe:8a:57:cc:8c:89:d0:b7:6d:8b:
4c:3f:29:c9:51:cc:49:fb:56:ef:e4:ba:3e:f7:b4:
a1:d1:72:8f:56:9d:e6:e0:6c:7c:15:c6:f2:0e:78:
e1:b0:e0:bc:22:2d:af:fd:21:d9:e2:96:9c:c5:d3:
b7:72:68:d3:e5:80:6d:2d:28:24:65:c8:20:4a:8a:
2f:4c:ee:bb:4c:79:2b:05:6b:1f:44:b0:b8:c6:a0:
23:64:58:36:34:5a:81:28:14:61:ac:f2:17:a8:0f:
dd:2e:73:50:09:7c:a7:86:0b:61:fc:0d:d2:1c:48:
64:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A4:79:9B:54:03:A2:04:50:63:CA:0E:41:E2:83:2F:12:AC:83:1F
X509v3 Authority Key Identifier:
keyid:CB:F9:CD:24:3C:ED:69:37:B6:BE:A5:71:02:81:4F:F9:BA:42:66:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_nNJDztaTe2vqVxAoFP-bpCZiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/497dd1-755e-442a-b31d-1c13250a6a3c/1/y_nNJDztaTe2vqVxAoFP-bpCZiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/497dd1-755e-442a-b31d-1c13250a6a3c/1/y_nNJDztaTe2vqVxAoFP-bpCZiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:bf:1c:90:cc:dc:46:fb:56:e2:53:0d:60:62:7c:1c:93:e9:
a1:12:a9:1d:f7:90:0e:fc:d1:f0:d6:1b:45:cf:db:9b:8d:6b:
fc:6b:7a:fd:d8:a7:80:b7:c2:59:74:3d:8a:62:a9:59:54:0e:
2d:50:f0:22:96:b3:67:85:1a:fe:ff:05:44:b2:6c:47:47:84:
d3:6d:8c:c6:47:6d:8f:5e:df:dd:16:50:90:46:dc:aa:db:56:
8c:27:c8:9e:2a:84:95:0f:63:85:0d:8a:c7:a3:26:c0:ea:3d:
56:12:6c:4b:e0:58:bc:99:d2:fe:a1:8f:7c:e8:68:c9:a5:61:
96:80:40:c5:9d:1f:d7:4e:d3:09:ff:09:58:ed:3f:0e:93:8d:
ec:8e:35:82:df:c2:d1:87:b4:ea:eb:bd:25:b3:3b:46:e9:4b:
b6:27:8d:7f:37:fa:65:e4:7c:fa:5d:19:26:57:34:e2:b1:9b:
e6:8b:4b:82:0d:1d:eb:3d:50:98:14:0f:fe:c9:dc:57:c9:4d:
df:cc:d2:eb:75:fa:53:5c:6d:31:b7:50:64:e7:4b:f3:33:b8:
66:f2:1a:4c:5c:66:5c:7c:4c:97:6c:2a:23:7b:8e:8a:40:d8:
d1:fb:21:9e:9e:e3:c8:76:2f:de:85:5f:1b:57:cc:6b:51:10:
c0:f1:f5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:57:19 2025 by rpki-client