Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b041b8-6b24-44f3-a748-72c0d509334d/1/yAH8mVpSGvH1Atnq8S1mIaZMr00.mft
File: yAH8mVpSGvH1Atnq8S1mIaZMr00.mft (raw, json)
Hash identifier: CI35CNZMBAx5aeZ47a9KeyhFglIFe4NcVPpWnUPXPec=
Subject key identifier: 78:0E:CE:78:50:54:53:3C:35:2B:38:E2:31:A2:28:1D:F5:55:E7:4A
Authority key identifier: C8:01:FC:99:5A:52:1A:F1:F5:02:D9:EA:F1:2D:66:21:A6:4C:AF:4D
Certificate issuer: /CN=c801fc995a521af1f502d9eaf12d6621a64caf4d
Certificate serial: 0194BBCEFD9DAA8D62C864B1CCB028868E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAH8mVpSGvH1Atnq8S1mIaZMr00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b041b8-6b24-44f3-a748-72c0d509334d/1/yAH8mVpSGvH1Atnq8S1mIaZMr00.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: yAH8mVpSGvH1Atnq8S1mIaZMr00.crl (hash: P4G3DoGcRIB14vrAl63gALgeDmxJIvp7c4zyHQo/UTY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fd:9d:aa:8d:62:c8:64:b1:cc:b0:28:86:8e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c801fc995a521af1f502d9eaf12d6621a64caf4d
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=780ece785054533c352b38e231a2281df555e74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ee:72:c1:65:6f:a0:5c:8b:6a:4d:7f:cf:5f:
47:95:e0:00:8d:95:21:71:17:22:a1:e4:ed:c7:41:
a4:e4:48:dd:85:43:be:60:ea:9d:a7:66:93:27:93:
39:57:f9:ff:55:52:bc:e3:a9:ec:e8:87:85:7d:6c:
41:d9:a7:97:0a:fb:8a:37:09:ca:a1:4e:85:13:81:
20:ad:53:64:6b:4d:97:c0:85:b0:17:5b:8c:a3:65:
85:55:e0:b5:28:32:ff:5e:86:d9:92:11:90:cf:cd:
da:03:04:a3:ce:ef:ca:17:39:5e:e2:5b:6b:b8:e8:
20:7d:82:3d:49:27:ad:16:95:62:8d:40:10:e6:b7:
7f:71:ac:ad:e4:b3:11:b2:aa:e2:a5:2b:c9:4c:80:
b9:17:3f:07:a3:7e:05:a3:ff:5a:ec:0b:c2:fa:f5:
8f:53:b3:a9:5a:35:f7:51:a7:41:a2:3c:f4:75:fd:
18:a1:15:0b:51:dc:e3:cc:0f:bc:cf:30:08:32:60:
d3:ca:d7:00:90:69:ca:3e:e6:ec:fd:69:06:cd:73:
b1:24:b0:65:a4:03:a1:13:7b:46:cf:27:2b:ee:dd:
dc:c6:0b:ca:8c:eb:47:bd:90:7a:e3:4b:24:b6:2c:
12:d9:fe:37:12:e0:78:32:e1:42:8a:64:ca:c8:de:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0E:CE:78:50:54:53:3C:35:2B:38:E2:31:A2:28:1D:F5:55:E7:4A
X509v3 Authority Key Identifier:
keyid:C8:01:FC:99:5A:52:1A:F1:F5:02:D9:EA:F1:2D:66:21:A6:4C:AF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAH8mVpSGvH1Atnq8S1mIaZMr00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b041b8-6b24-44f3-a748-72c0d509334d/1/yAH8mVpSGvH1Atnq8S1mIaZMr00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b041b8-6b24-44f3-a748-72c0d509334d/1/yAH8mVpSGvH1Atnq8S1mIaZMr00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:78:ee:71:cf:dc:c7:b4:e4:35:b2:fb:43:64:c1:e4:72:d1:
cc:b7:5e:f9:72:35:fb:45:a7:c7:b7:19:c7:b4:a3:56:05:17:
60:29:c1:61:7b:37:b8:ef:f2:bf:c8:2d:0d:81:37:de:1e:e4:
72:c5:34:49:5d:a2:db:b1:e9:0e:eb:b3:c5:74:b0:5b:37:e8:
66:a6:e7:33:3a:2b:be:02:64:13:26:5f:c7:b7:8f:41:5e:d1:
21:10:7c:6f:0b:71:6e:10:da:dd:16:b6:fa:2d:15:77:9a:f6:
62:9b:5c:8e:a1:8e:c2:08:c4:7d:b5:3c:d1:27:ed:1d:50:15:
de:c9:27:45:26:60:48:16:ad:a3:4f:77:7c:92:18:bd:a5:77:
fb:5d:60:d9:70:37:fb:08:ad:3d:fc:b1:5b:25:a0:3d:62:65:
e8:52:3a:45:84:1f:6d:48:26:ad:86:7e:0e:b9:03:af:35:1c:
2c:51:80:9b:e1:d2:33:62:72:e5:bb:fd:73:c3:d1:a1:9a:ad:
ed:da:48:c4:70:ef:7c:ee:45:c4:59:50:89:23:c9:62:28:29:
20:fb:02:09:9a:1d:fe:58:92:a2:05:b9:bb:93:13:ef:a8:86:
f2:3a:34:54:4a:e5:69:9b:0a:26:d3:92:13:07:ab:54:70:ff:
93:94:19:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:31:22 2025 by rpki-client