Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
File: yAp-jsR8rdhlNy3lA_h5DvYscUE.mft (raw, json)
Hash identifier: x8uhc/+ct10RFW3btk4VHuGLGU+PTqLL6sKVrluRgyQ=
Subject key identifier: 0B:F9:EA:63:29:42:1E:DE:84:20:FB:C6:38:DC:24:39:B5:8D:CD:E0
Authority key identifier: C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
Certificate issuer: /CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Certificate serial: 0194BC7295FC5E619CA5480606D34B10534F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
Manifest number: 0B1E
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: yAp-jsR8rdhlNy3lA_h5DvYscUE.crl (hash: fDVUou4WLP7hip3EfteWaJ0H93sQKJ4B1C/3HVctnxk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:95:fc:5e:61:9c:a5:48:06:06:d3:4b:10:53:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=0bf9ea6329421ede8420fbc638dc2439b58dcde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0f:8d:f3:ae:8a:88:48:82:8b:7b:1a:d6:f0:
9a:d0:fe:a9:40:fc:40:09:85:ef:f8:cf:06:ea:ab:
2a:ac:2e:f9:7b:8a:d1:76:31:05:90:1a:09:21:d2:
c6:f8:ff:a7:f7:c3:dd:0b:a0:f7:7f:42:78:05:5a:
27:de:83:dc:29:09:9d:3d:e1:70:01:56:cb:b5:e6:
aa:b6:64:ce:2b:fb:83:1f:02:37:e2:97:4e:b4:78:
2c:59:72:02:43:6b:fe:79:d6:8e:6b:c9:90:bf:52:
e3:6c:7c:58:76:11:2f:fc:1d:9d:25:6c:f3:c2:17:
41:05:5c:0a:e1:aa:57:2c:8e:5a:90:0c:d3:41:9e:
35:97:59:c5:fa:7a:0d:f7:9c:b9:83:ad:a3:a6:00:
38:63:13:4c:a8:0a:9b:cf:e3:37:48:86:32:c0:ed:
a2:3c:c8:45:ad:bb:81:0c:f0:d5:37:c0:36:66:e1:
53:a7:e3:0a:eb:eb:94:aa:16:0d:b8:2c:74:26:4f:
96:ae:64:3f:46:96:7e:80:7e:59:21:00:b8:d9:c1:
8d:47:68:b8:32:95:47:17:9e:8a:1b:78:5b:4d:d2:
0a:83:ce:ba:25:ac:ee:a5:e8:ad:85:51:2b:c5:d0:
90:11:54:b5:55:a4:25:2f:3a:10:3e:43:fa:18:af:
85:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F9:EA:63:29:42:1E:DE:84:20:FB:C6:38:DC:24:39:B5:8D:CD:E0
X509v3 Authority Key Identifier:
keyid:C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:79:e7:4c:6b:18:2c:2b:99:ef:77:d5:a0:58:07:5a:0f:46:
00:a5:6d:ac:24:f6:cf:b0:6e:16:1a:a7:36:0f:82:99:4a:df:
5a:91:d6:dd:4f:c5:e3:44:da:e0:b0:3a:40:cd:24:1c:01:a7:
54:75:6f:1f:cd:d2:2b:29:20:1c:05:f5:a3:71:5e:a9:67:ab:
40:4c:84:34:01:0a:6f:f7:11:83:eb:6e:62:bc:e8:55:7b:9a:
d5:85:d9:83:99:d3:41:df:0c:d3:1b:b0:ab:9f:31:2a:1f:88:
0b:81:29:71:72:2f:48:1c:b4:54:7b:18:3a:fb:b4:76:9e:25:
78:ff:5d:62:e6:00:0b:79:f2:5d:f7:b9:3e:fd:89:98:c1:d2:
5a:3c:27:e2:53:71:a9:0b:bc:9a:f1:1f:a4:a8:b9:e6:80:c5:
09:14:06:ef:b3:90:34:c1:8e:fb:7b:40:4a:f3:3c:84:25:bb:
0c:a4:29:b4:0c:87:94:01:f6:47:13:c5:51:0e:e0:e4:bd:ba:
cf:e1:f5:a7:05:2a:37:55:73:8f:83:60:fe:e5:10:ea:fc:7c:
4a:e2:7e:ff:aa:53:90:17:73:de:50:5f:fc:cb:c9:1e:c1:b8:
81:61:ec:f0:ca:5a:db:51:04:81:c1:aa:61:cf:12:ed:b3:22:
95:c4:e3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:34 2025 by rpki-client