Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.mft
File: Y31k1HJWO36HP1t5-RydP__D2_k.mft (raw, json)
Hash identifier: /jTgczRrZKGQnTTippvPTsQcRdK0xRNgmwOQ9lG+egQ=
Subject key identifier: A5:8F:29:44:56:C4:78:86:E5:DC:F0:E3:AF:AF:30:47:ED:29:66:73
Authority key identifier: 63:7D:64:D4:72:56:3B:7E:87:3F:5B:79:F9:1C:9D:3F:FF:C3:DB:F9
Certificate issuer: /CN=637d64d472563b7e873f5b79f91c9d3fffc3dbf9
Certificate serial: 0194BC3CB17D5EEFFBFD1650FB295C5D3C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y31k1HJWO36HP1t5-RydP__D2_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.mft
Manifest number: 0CE5
Signing time: Fri 31 Jan 2025 12:01:21 +0000
Manifest this update: Fri 31 Jan 2025 12:01:21 +0000
Manifest next update: Sat 01 Feb 2025 12:01:21 +0000
Files and hashes: 1: Y31k1HJWO36HP1t5-RydP__D2_k.crl (hash: +gUWVPpOW2sNO93a5zlRVYPq3koC9tH6VL0Gs/4zpwQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:b1:7d:5e:ef:fb:fd:16:50:fb:29:5c:5d:3c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637d64d472563b7e873f5b79f91c9d3fffc3dbf9
Validity
Not Before: Jan 31 12:01:21 2025 GMT
Not After : Feb 1 12:01:21 2025 GMT
Subject: CN=a58f294456c47886e5dcf0e3afaf3047ed296673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b7:38:b3:52:4f:60:e9:4e:a3:f8:8c:99:18:
fe:c9:61:23:68:0a:ca:34:a1:88:8b:4e:ae:cf:2d:
90:2b:c8:09:27:91:01:47:9d:ee:a4:1d:6a:b1:b5:
3e:55:7f:83:2a:96:73:85:3f:fb:92:bf:bc:1b:e6:
43:2b:a8:b4:01:3a:4c:44:e4:1f:fd:9a:5f:0b:a2:
a1:bb:f2:0a:7f:e9:54:e3:a1:c2:b6:61:5a:03:e6:
70:f0:00:b3:15:2c:cb:5c:cd:f2:75:db:8a:b4:3a:
0b:83:f6:ad:a9:d6:9e:e7:5b:45:cd:7e:30:58:cf:
d6:e2:20:4b:aa:0e:4c:6f:4d:b6:7e:81:b8:98:e3:
3c:5f:7a:ca:27:cf:d8:0d:da:e9:a8:65:ea:d2:71:
ca:68:bd:b0:90:64:3e:b4:76:9f:7e:63:4c:30:05:
79:12:33:78:e2:c6:f8:54:63:4d:f4:e1:f9:3d:f8:
c6:13:fe:b8:ca:3a:61:82:71:7e:2b:1f:0a:c1:6a:
6b:88:f7:01:5a:84:64:7f:66:46:02:0c:2b:66:0b:
97:d9:a0:49:7e:f2:bc:48:15:a9:0d:03:77:87:04:
b4:24:41:53:f5:ef:e9:6c:ab:2c:23:ab:e9:55:33:
11:05:f4:c2:e8:d0:78:85:a2:76:64:2a:f6:ff:ab:
27:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8F:29:44:56:C4:78:86:E5:DC:F0:E3:AF:AF:30:47:ED:29:66:73
X509v3 Authority Key Identifier:
keyid:63:7D:64:D4:72:56:3B:7E:87:3F:5B:79:F9:1C:9D:3F:FF:C3:DB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y31k1HJWO36HP1t5-RydP__D2_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:be:dc:ab:23:95:b1:e6:1e:22:cd:65:84:10:99:f3:ae:3c:
58:d7:7b:3b:53:32:bd:ba:1c:3d:78:c1:3a:c6:51:f5:ea:2b:
3a:8a:dc:2c:bd:36:96:0c:e0:9e:ab:74:13:b8:ad:6b:ea:02:
f2:b4:de:9d:7f:3b:2a:9a:16:9a:98:f8:57:03:e2:4e:58:24:
0c:76:a3:96:b3:49:29:60:3f:60:aa:b2:c2:3f:4b:e8:95:db:
6d:b8:5c:83:7a:33:33:3c:70:47:94:70:bf:29:1a:49:b1:39:
b9:8e:4f:d8:15:48:97:af:69:0f:be:a9:ca:f5:a0:cd:c1:25:
01:20:ab:8c:38:25:8a:1f:26:b3:01:1e:86:5e:9f:e9:3b:a6:
2a:ec:ba:e3:12:1f:a0:a9:65:1c:12:5c:f0:21:63:01:9d:d2:
5d:0d:32:29:84:f3:0d:9c:d1:12:9f:a9:51:4c:f1:d7:67:9e:
fd:3d:e7:a7:4f:42:be:c1:32:87:59:dc:88:77:8b:72:f8:8c:
d6:8b:76:97:51:f1:af:68:cf:ba:7e:57:98:8a:9a:bf:28:f3:
5e:5e:4d:76:ca:1b:c9:11:7a:2a:5b:57:c4:cd:ba:f1:c6:e3:
85:28:0d:14:88:97:ea:6b:9b:41:dc:13:78:4f:7c:85:18:d3:
e5:7a:e3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:33 2025 by rpki-client