Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1f431e-37c8-4080-9bb3-416204a02737/1/yQDj7qi7474R-IxoK9E4wmUH99w.mft
File: yQDj7qi7474R-IxoK9E4wmUH99w.mft (raw, json)
Hash identifier: iv9rbdZpnYEP1801UJjbzekDcQw4JnEq8yK5y0EVNdc=
Subject key identifier: E3:3E:65:58:D8:C9:D8:C3:40:EA:32:30:65:A3:04:83:21:37:FA:F5
Authority key identifier: C9:00:E3:EE:A8:BB:E3:BE:11:F8:8C:68:2B:D1:38:C2:65:07:F7:DC
Certificate issuer: /CN=c900e3eea8bbe3be11f88c682bd138c26507f7dc
Certificate serial: 0194BBCE5774574F21C88801230F6F47A013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQDj7qi7474R-IxoK9E4wmUH99w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1f431e-37c8-4080-9bb3-416204a02737/1/yQDj7qi7474R-IxoK9E4wmUH99w.mft
Manifest number: 0B0F
Signing time: Fri 31 Jan 2025 10:00:49 +0000
Manifest this update: Fri 31 Jan 2025 10:00:49 +0000
Manifest next update: Sat 01 Feb 2025 10:00:49 +0000
Files and hashes: 1: yQDj7qi7474R-IxoK9E4wmUH99w.crl (hash: N7Rc6wD4rBicJ+XKzGc73NPUzTkSNWHrPAz3E3edVl4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:57:74:57:4f:21:c8:88:01:23:0f:6f:47:a0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c900e3eea8bbe3be11f88c682bd138c26507f7dc
Validity
Not Before: Jan 31 10:00:49 2025 GMT
Not After : Feb 1 10:00:49 2025 GMT
Subject: CN=e33e6558d8c9d8c340ea323065a304832137faf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:13:b6:90:9b:d5:f5:cf:86:39:1c:51:10:
bb:2e:4c:49:0a:20:d8:48:2b:05:cf:49:27:40:29:
3e:31:89:39:a9:fc:16:cb:e2:02:43:a8:21:3c:73:
f1:8d:b9:d9:d0:5a:d4:ea:9d:61:65:76:50:ed:a3:
26:46:46:eb:11:ca:14:5b:33:22:fe:57:3b:67:9b:
3e:3c:eb:83:e0:ed:fa:7b:8d:9d:56:86:6c:db:ea:
d6:a8:22:26:50:c8:f0:53:ec:fb:06:52:5a:4d:a5:
81:3e:f3:0e:01:3b:6e:b0:7d:e4:7b:0a:15:4b:6e:
a3:fb:4e:fb:2f:c0:5e:c4:08:72:6b:ce:77:9d:b1:
5f:c7:d7:ed:ef:44:e4:bf:c2:ea:d5:4a:20:cb:21:
fc:a8:da:b8:6e:04:7b:b9:19:d9:fe:2d:34:09:a0:
d1:1f:ff:f9:45:ad:d7:20:e1:fe:0c:7f:1b:c7:9c:
a9:de:2f:c3:da:a0:6d:15:f3:97:0d:8a:43:2a:ac:
43:cf:94:23:c4:14:61:37:ee:49:a2:c9:87:56:81:
76:32:e1:f9:7a:04:41:c8:45:2d:ed:f6:3e:65:c1:
e3:75:4f:bf:1d:13:5f:26:67:ad:c1:ce:3d:4f:b3:
48:ef:c7:e6:6c:2b:d8:fc:07:11:99:18:2c:69:60:
c5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3E:65:58:D8:C9:D8:C3:40:EA:32:30:65:A3:04:83:21:37:FA:F5
X509v3 Authority Key Identifier:
keyid:C9:00:E3:EE:A8:BB:E3:BE:11:F8:8C:68:2B:D1:38:C2:65:07:F7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQDj7qi7474R-IxoK9E4wmUH99w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1f431e-37c8-4080-9bb3-416204a02737/1/yQDj7qi7474R-IxoK9E4wmUH99w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1f431e-37c8-4080-9bb3-416204a02737/1/yQDj7qi7474R-IxoK9E4wmUH99w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:03:b3:cf:ac:8c:95:2f:af:78:92:aa:0e:20:a0:0a:75:ab:
f5:a3:94:5d:d5:b4:03:3f:1b:2c:c7:7e:70:a0:82:34:02:4d:
8a:6d:c5:b1:ae:61:3f:83:78:8a:6f:b7:69:14:41:b2:0f:73:
61:c6:28:b3:ba:80:83:be:13:5b:e0:f3:54:0a:c4:05:60:9f:
28:9f:7e:dc:43:38:53:da:ef:c2:88:ac:e6:be:b8:e5:dc:d5:
fb:25:bc:11:e1:4b:fa:54:9f:2c:16:67:d9:89:31:99:a3:d9:
47:a3:f1:71:83:ab:8c:da:e4:7b:f2:6d:90:aa:2c:cd:e6:e2:
a6:45:ef:1b:ee:37:0f:2c:a3:cc:e5:b5:e4:b9:62:2f:f6:24:
1a:74:f2:7a:85:a0:53:15:a9:60:ae:b9:7f:1e:6d:2f:2b:96:
55:1c:54:9e:20:43:74:b0:19:2b:78:1e:ff:73:17:e2:37:4f:
81:1a:24:c1:f9:f6:4d:a2:fd:ed:95:a3:b5:93:2b:9d:dd:f2:
64:b1:8f:88:ca:f4:f8:ae:32:bb:1c:20:7f:b7:0f:5a:a8:f9:
d3:66:52:c1:a0:7d:aa:cf:24:67:83:2d:d0:a1:81:ec:e3:2b:
e3:1b:99:75:fc:d9:ae:e8:e8:8b:63:2f:e6:fc:af:9a:80:73:
7d:1f:c2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:27 2025 by rpki-client