Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
File: YKJkfN14VQ6ywqe6QpLadGnwr7E.mft (raw, json)
Hash identifier: yO4/ySVhc49BBWGYWPs9T8o6gsvDQnEmTe3DsGYBc6Q=
Subject key identifier: 29:C7:9D:DC:49:23:98:86:59:68:8E:26:06:19:CC:FC:57:53:B3:72
Authority key identifier: 60:A2:64:7C:DD:78:55:0E:B2:C2:A7:BA:42:92:DA:74:69:F0:AF:B1
Certificate issuer: /CN=60a2647cdd78550eb2c2a7ba4292da7469f0afb1
Certificate serial: 0194BBCE6EA21E109B247EAF517A4BAC8D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
Manifest number: 0C00
Signing time: Fri 31 Jan 2025 10:00:55 +0000
Manifest this update: Fri 31 Jan 2025 10:00:55 +0000
Manifest next update: Sat 01 Feb 2025 10:00:55 +0000
Files and hashes: 1: YKJkfN14VQ6ywqe6QpLadGnwr7E.crl (hash: HIWfCLChIxARLupkdpWDZSrtnM0o3Wr9tmxFNLU0how=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6e:a2:1e:10:9b:24:7e:af:51:7a:4b:ac:8d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a2647cdd78550eb2c2a7ba4292da7469f0afb1
Validity
Not Before: Jan 31 10:00:55 2025 GMT
Not After : Feb 1 10:00:55 2025 GMT
Subject: CN=29c79ddc4923988659688e260619ccfc5753b372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:46:f2:d9:bf:51:c5:3a:9b:34:5d:d6:c8:41:
51:c4:53:d2:27:7b:cb:7d:bb:32:99:87:db:df:d3:
46:13:98:cb:ce:e8:4d:65:f9:50:7a:05:6b:ae:a3:
b7:0d:e0:69:9d:ad:cb:85:aa:9f:d3:6b:d9:72:ac:
a4:b8:ce:c1:87:e5:6d:66:bc:a0:c2:f2:07:2d:6a:
f8:4b:a9:86:bc:d1:5e:bb:48:f6:25:69:44:25:db:
3f:4b:04:45:0d:09:6a:af:6a:90:78:ac:6e:93:94:
37:4b:ed:e0:3f:59:92:2e:4e:fa:76:08:78:66:c9:
c4:34:52:fa:a4:30:12:9c:bf:75:8d:22:9f:38:11:
23:e4:33:e8:ce:06:39:37:35:f4:bd:2a:c4:2d:aa:
4f:2e:9d:d0:a6:9b:f2:ec:1f:4c:6c:c0:0d:40:b3:
aa:26:9b:49:d0:c4:15:e4:2a:9d:76:18:05:68:06:
62:00:10:3e:03:dc:7f:4a:51:6a:fc:30:0c:62:34:
d7:0b:7c:4c:98:b2:53:fa:6d:5d:ef:a1:4b:e4:40:
9e:df:1a:33:a7:e6:a7:a0:c7:1d:43:79:ed:f4:9a:
30:72:b5:e7:79:21:7b:22:51:ff:0d:fa:28:6d:ca:
b2:c8:e1:19:4f:bf:70:29:b0:75:12:14:e2:72:2a:
c7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C7:9D:DC:49:23:98:86:59:68:8E:26:06:19:CC:FC:57:53:B3:72
X509v3 Authority Key Identifier:
keyid:60:A2:64:7C:DD:78:55:0E:B2:C2:A7:BA:42:92:DA:74:69:F0:AF:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:4f:25:c8:13:7d:1a:41:53:43:19:5e:be:9c:81:31:fd:3b:
92:48:68:7c:71:bc:51:0e:43:bb:a8:8d:dc:7d:b0:53:2a:02:
77:d8:59:90:66:0d:d3:13:35:ca:38:f3:a5:e0:9b:7b:be:67:
e0:8e:32:b3:f2:89:6f:8d:cd:7d:c0:76:7b:b6:60:97:c0:85:
88:f9:a2:80:cd:33:18:52:24:b6:11:62:14:c4:24:15:46:e0:
2e:95:ba:8f:a3:f6:64:d5:67:76:dd:cc:e5:71:7d:95:1a:11:
41:21:98:9d:e4:a9:d9:d7:0e:85:b1:4d:bd:98:33:2d:8c:da:
ce:9a:0c:39:e0:55:dd:78:9d:a4:a5:02:ce:bc:61:15:c5:72:
65:2a:c3:30:c1:9e:8e:7e:fe:44:31:dc:22:c9:6f:4d:0b:06:
7d:db:c0:80:06:4a:8c:cd:af:62:4b:81:69:ad:86:6a:0b:dd:
1c:f8:5f:29:b7:0a:1b:c7:93:6a:3e:2c:19:70:01:fd:0e:e4:
57:f8:f2:3a:b7:b5:64:d7:34:35:ac:55:cc:3e:d4:38:eb:23:
97:b8:44:d6:61:07:19:a5:e3:43:6d:c4:05:fc:31:75:2d:ee:
a0:f9:f5:7e:a9:30:98:fb:4f:42:3b:75:30:1a:96:8d:34:df:
5f:92:e9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:57:17 2025 by rpki-client