Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
File: ypO97sfEJpjfaskM3cbAGzp_LEk.mft (raw, json)
Hash identifier: OlNONLfS5pgVe9EWMOZqgTzCS+iI19kWI23O7DCFU9E=
Subject key identifier: B9:38:31:89:80:B5:4A:4B:7D:C8:3B:09:B7:0A:A7:CB:26:E8:96:64
Authority key identifier: CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
Certificate issuer: /CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49
Certificate serial: 0194BBCEA44F300209264DE76AE5FB1634AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:09 +0000
Manifest this update: Fri 31 Jan 2025 10:01:09 +0000
Manifest next update: Sat 01 Feb 2025 10:01:09 +0000
Files and hashes: 1: ypO97sfEJpjfaskM3cbAGzp_LEk.crl (hash: Li7q95pjHdUQPRGLP1zyGZdGnZ8EcLkddNY6WR0gGnc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a4:4f:30:02:09:26:4d:e7:6a:e5:fb:16:34:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49
Validity
Not Before: Jan 31 10:01:09 2025 GMT
Not After : Feb 1 10:01:09 2025 GMT
Subject: CN=b938318980b54a4b7dc83b09b70aa7cb26e89664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:11:50:40:60:f1:e3:df:87:c4:d8:e1:f3:c3:
e2:9b:1f:39:ad:73:ca:f4:cd:fa:af:d0:a8:fc:44:
40:5c:ea:54:0a:6e:44:e8:6e:ba:8c:78:d6:b5:d7:
b2:24:17:3d:57:be:d8:f8:80:5a:c8:25:e0:04:38:
f1:00:c8:dd:13:f0:fa:f6:12:1e:67:d9:64:7d:31:
af:06:23:02:88:6f:dc:c6:b9:4e:b5:40:a5:de:05:
d2:a4:a4:32:56:cb:33:34:b2:48:48:b6:17:77:57:
ca:08:cb:57:ec:71:c1:d7:08:fa:dd:d3:d6:fa:39:
42:97:9e:8d:ea:6f:4b:e3:90:d8:7a:06:51:64:7b:
34:9f:ce:4b:f1:bc:56:0c:58:58:6b:cc:c0:cb:1f:
bf:f6:6b:a2:d0:4c:63:8e:6d:db:f0:ad:46:f4:7e:
d2:02:2a:6c:7f:11:4c:c6:e2:ce:f2:b7:ff:a7:57:
b0:b0:10:ff:43:ae:c0:09:ba:38:4d:88:d7:19:a8:
fb:88:06:18:be:7a:8f:39:2e:1c:2b:29:e7:75:63:
e4:8d:ab:60:dd:f6:eb:f5:dc:47:ff:39:b1:09:cc:
e7:dc:5a:6b:ac:74:68:e2:b9:c8:66:d0:e3:c6:3a:
eb:ee:b1:08:a8:39:f3:85:08:4c:b6:91:9e:4d:2d:
0a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:38:31:89:80:B5:4A:4B:7D:C8:3B:09:B7:0A:A7:CB:26:E8:96:64
X509v3 Authority Key Identifier:
keyid:CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3e:f5:84:1d:8f:24:f2:0a:b7:59:4b:ba:b6:df:ac:ab:92:
fb:48:1d:bf:a1:61:33:23:b0:05:00:f9:71:d5:f4:ee:a5:87:
56:78:6b:c7:fe:cf:df:0b:63:75:04:49:48:f7:9c:24:8d:f9:
32:13:0c:aa:40:f4:8d:99:34:b6:7d:d5:a5:4a:ac:ec:e7:7e:
03:12:56:64:d8:93:2e:47:c5:f6:8b:31:98:7d:95:13:8a:58:
82:9f:6a:e3:e6:8c:7b:7f:3a:be:b5:3a:8d:0a:37:85:91:12:
01:32:a6:c9:bf:54:f2:f9:b1:da:1f:0e:3e:b0:93:71:f0:c7:
c0:a6:bc:6f:8c:40:0a:6f:90:f5:e9:1c:b4:16:79:3b:f9:e6:
b4:78:6d:38:98:d6:cb:51:af:c4:70:eb:54:04:9a:eb:bc:dd:
a0:bb:78:3c:a4:cf:9d:d7:31:6e:a0:6f:a1:a8:51:e6:b4:0e:
03:9e:18:3a:39:93:82:c0:54:49:ea:bf:b6:51:47:96:b8:66:
be:aa:09:15:b8:ed:c4:00:d9:43:99:73:1c:97:2a:8c:0c:07:
93:c4:aa:8e:80:98:6c:4b:6d:a3:ae:94:e7:46:1d:f8:41:a3:
ba:ef:69:fa:cc:a2:2c:3b:ed:62:e8:23:97:c1:c6:f8:f2:ad:
b8:fa:9a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:10 2025 by rpki-client