Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/05b974-fb18-40af-afa6-b520beda6626/1/YGKyH7ZlW4l5I-Kdb8tkSrEKxTA.mft
File: YGKyH7ZlW4l5I-Kdb8tkSrEKxTA.mft (raw, json)
Hash identifier: nXBSoCYtx1SrSlFVkohzCeSASW+yabewx1wIVWAZGIM=
Subject key identifier: 66:20:AA:AF:16:AD:2A:11:5B:83:72:75:C0:13:76:8E:94:0E:3E:5B
Authority key identifier: 60:62:B2:1F:B6:65:5B:89:79:23:E2:9D:6F:CB:64:4A:B1:0A:C5:30
Certificate issuer: /CN=6062b21fb6655b897923e29d6fcb644ab10ac530
Certificate serial: 0194BCA9B924F007D3CB1315DCFE21D5780E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGKyH7ZlW4l5I-Kdb8tkSrEKxTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b974-fb18-40af-afa6-b520beda6626/1/YGKyH7ZlW4l5I-Kdb8tkSrEKxTA.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: YGKyH7ZlW4l5I-Kdb8tkSrEKxTA.crl (hash: 9pBBz+dgo4TSLsvki2ufs7TdpNIg6HIqKNPhd8T5UTQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b9:24:f0:07:d3:cb:13:15:dc:fe:21:d5:78:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6062b21fb6655b897923e29d6fcb644ab10ac530
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=6620aaaf16ad2a115b837275c013768e940e3e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:75:7b:11:84:54:7f:91:af:5d:ed:4a:df:
c9:78:14:10:c5:58:9c:17:07:5a:e3:54:52:95:7a:
fb:60:26:96:c6:6e:6f:4b:89:e1:8c:b0:f4:b5:9f:
92:02:38:1b:86:a9:21:26:16:df:e9:ec:e4:a2:85:
59:b7:d3:67:32:35:3a:ac:7e:29:73:3f:38:28:8a:
0e:c0:61:ca:dd:16:19:93:a2:eb:78:5b:19:a1:d9:
47:76:2a:16:b1:e4:f3:2d:3f:fa:58:2b:a8:53:51:
61:af:5f:ee:97:db:82:03:e1:d5:e5:08:82:37:ef:
01:84:92:39:7c:c1:42:4d:55:65:cc:7f:61:99:81:
c9:8a:4c:56:a1:16:66:6c:06:7f:6d:db:c4:69:9d:
ab:24:56:1b:ca:ec:d8:02:35:33:33:8b:17:fd:1b:
3f:72:11:e7:3e:5e:57:3a:6f:b3:59:18:bc:a9:97:
23:c8:9b:ff:c3:d1:72:eb:4b:8c:23:0d:f2:24:66:
0a:e5:85:3f:de:70:78:0e:d1:3e:01:fb:f7:dc:12:
6b:e9:cd:24:65:a3:e4:fd:8a:f1:5c:28:94:1d:ad:
ff:13:3a:33:3b:e8:54:e0:5e:83:17:13:c6:70:1d:
46:85:10:ca:93:4e:db:6e:b9:f4:75:d1:d6:0c:c4:
48:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:20:AA:AF:16:AD:2A:11:5B:83:72:75:C0:13:76:8E:94:0E:3E:5B
X509v3 Authority Key Identifier:
keyid:60:62:B2:1F:B6:65:5B:89:79:23:E2:9D:6F:CB:64:4A:B1:0A:C5:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGKyH7ZlW4l5I-Kdb8tkSrEKxTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b974-fb18-40af-afa6-b520beda6626/1/YGKyH7ZlW4l5I-Kdb8tkSrEKxTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b974-fb18-40af-afa6-b520beda6626/1/YGKyH7ZlW4l5I-Kdb8tkSrEKxTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:24:df:c3:fa:e7:46:f0:72:19:b6:ca:46:30:4a:b4:ee:fa:
e0:de:06:e2:d9:b0:06:84:a3:8f:88:86:91:35:eb:95:c0:42:
23:2d:0a:4a:da:f8:fe:4e:0f:f8:fa:43:21:ab:dd:d0:03:c5:
6f:fa:69:c1:94:f6:06:1f:b7:6e:56:04:1c:92:8d:de:a4:31:
7d:6f:25:17:24:27:a4:90:f5:87:b2:91:cb:9d:3f:d8:b2:e1:
03:f9:f4:0e:12:a4:43:d8:41:03:91:01:7c:83:b3:8b:ba:ca:
b3:72:86:0f:f5:49:c9:28:7f:f7:cd:a2:51:35:96:69:e5:9d:
ab:60:b2:8f:a1:e0:3b:46:23:46:3a:d0:e6:1f:e7:ad:ad:70:
bb:86:88:8f:ab:44:ca:e9:fb:71:c4:43:0f:4d:bf:e0:8e:94:
1b:df:35:10:89:d3:1b:5b:7f:3b:d8:00:fb:6f:10:f9:de:f7:
11:69:32:99:01:bd:80:d9:e3:ca:63:89:3d:b9:41:31:67:80:
c9:03:b1:79:9c:6a:09:13:3d:e1:29:4f:b4:5b:e5:0d:82:f5:
42:85:91:7e:78:65:6a:7e:51:48:68:db:22:3b:bb:f0:de:1e:
39:e1:cf:b7:c7:7a:66:0b:27:30:30:95:81:3b:24:47:83:4d:
d5:d6:a2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:48 2025 by rpki-client