Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
File: ycJCxtHAS-As3EJ_zwTtWJshwrw.mft (raw, json)
Hash identifier: irf3L5JEqfxUzQVy/1HJ4MUrckMN4QbWXArtp47oUGA=
Subject key identifier: 40:BF:03:60:B8:0D:E0:C6:90:AC:6A:D1:C9:58:51:3A:04:64:B5:CE
Authority key identifier: C9:C2:42:C6:D1:C0:4B:E0:2C:DC:42:7F:CF:04:ED:58:9B:21:C2:BC
Certificate issuer: /CN=c9c242c6d1c04be02cdc427fcf04ed589b21c2bc
Certificate serial: 0194BD17DE35F31B204047C54B8647E7D9D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
Manifest number: 039F
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: ycJCxtHAS-As3EJ_zwTtWJshwrw.crl (hash: 7QeJBingZc8YC3rGNwYesFnPb32jIpyB8grG0qFjLK8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:de:35:f3:1b:20:40:47:c5:4b:86:47:e7:d9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c242c6d1c04be02cdc427fcf04ed589b21c2bc
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=40bf0360b80de0c690ac6ad1c958513a0464b5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:26:31:79:1f:f3:e6:e5:cc:1a:c0:d4:3d:78:
fb:70:2d:2a:f8:30:44:df:25:c1:fe:11:4c:c5:0c:
d7:62:5f:ad:bb:a1:8a:0a:1a:69:d4:93:be:b6:af:
8e:87:81:d0:88:ae:18:72:4f:1e:82:a3:d0:00:fd:
65:fb:cf:bd:ab:75:2c:04:df:8d:34:a5:8e:60:b3:
00:51:ad:71:d8:85:d6:67:0c:b3:05:b9:a3:e2:7c:
b5:81:e3:20:de:12:60:a1:70:d0:a2:9c:cf:f8:e2:
d5:e8:f2:72:a0:4d:0c:6b:b4:35:fd:ec:55:6b:11:
98:1e:fa:dd:bc:38:6c:0c:5c:12:93:75:43:3b:4a:
7b:a7:ba:d4:30:9f:19:f6:a9:f3:fc:80:28:9c:64:
32:59:eb:41:0e:c0:31:3f:09:8d:c6:62:e6:6a:29:
9b:9f:89:13:c3:e8:d2:ae:bf:91:85:ac:27:31:02:
10:a1:56:d0:e5:4c:e4:2f:82:5d:c3:27:63:cf:7a:
11:fb:15:aa:27:1e:e1:da:8b:f1:ad:fa:99:b3:a9:
ce:6a:75:33:e6:7e:87:ab:21:09:93:ed:a4:89:d2:
93:d1:6b:2c:57:97:0c:e1:98:8a:92:3c:d1:df:26:
47:ad:25:04:fd:14:95:91:84:63:3f:32:6a:b7:52:
09:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BF:03:60:B8:0D:E0:C6:90:AC:6A:D1:C9:58:51:3A:04:64:B5:CE
X509v3 Authority Key Identifier:
keyid:C9:C2:42:C6:D1:C0:4B:E0:2C:DC:42:7F:CF:04:ED:58:9B:21:C2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:50:f6:c4:d9:78:3b:ca:d6:f4:89:1d:b9:57:a1:cb:b7:5a:
65:53:71:65:00:c1:41:9f:78:3b:b6:57:c7:7e:60:3f:ac:05:
7f:ad:fb:3f:f2:9b:53:f9:74:fd:83:5f:e8:6c:66:01:12:1e:
cc:cc:3d:10:75:8b:d5:3d:7d:5f:65:d1:d6:60:44:99:ae:f0:
6e:d8:a4:b1:9a:ff:9c:cf:56:ab:60:36:d3:3e:21:81:60:92:
11:b4:5e:fc:2d:ef:52:46:c8:4f:30:4e:1e:e7:b8:7a:e5:75:
75:14:d6:54:ab:e7:13:11:b9:1b:c6:03:07:cd:4d:2f:7e:27:
64:3c:1d:ad:cd:42:e2:3a:6c:05:77:64:fd:65:90:a8:3f:92:
37:cd:10:14:08:39:45:69:62:cc:21:74:5b:16:e7:d9:a1:70:
b3:2f:71:24:08:bd:0c:17:92:59:64:0f:f0:1a:bb:77:69:74:
75:5b:ed:be:d4:d4:cc:89:80:79:f8:2c:b0:0f:71:d1:f1:74:
8e:9d:77:d7:5c:ab:1f:66:78:12:7c:17:ae:6d:05:a5:62:9c:
0b:bd:66:99:5b:73:73:2e:64:15:1c:82:6d:ce:74:e5:fe:8b:
32:23:32:03:80:20:b0:a6:c4:3e:2d:da:2a:7b:f6:d3:e7:db:
8c:05:7c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:12 2025 by rpki-client