Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.mft
File: yyDpqru2GRVGEQI1z3bEg4S0UdA.mft (raw, json)
Hash identifier: AS8F0UJ2bh+fSoFWEiBSEUS98CYkqKP+OSmzQQb5nfs=
Subject key identifier: 25:AA:A1:2C:AF:91:6D:E3:7C:03:DD:1D:21:AB:47:2A:1E:27:34:2E
Authority key identifier: CB:20:E9:AA:BB:B6:19:15:46:11:02:35:CF:76:C4:83:84:B4:51:D0
Certificate issuer: /CN=cb20e9aabbb6191546110235cf76c48384b451d0
Certificate serial: 0194BD4EABE8DFEF5D9F546145E7BA251DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyDpqru2GRVGEQI1z3bEg4S0UdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.mft
Manifest number: 0377
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: yyDpqru2GRVGEQI1z3bEg4S0UdA.crl (hash: ZVrRIJ8QXvQUPaGrLJngT34wJ3YHolLtO7N0V3dImko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ab:e8:df:ef:5d:9f:54:61:45:e7:ba:25:1d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb20e9aabbb6191546110235cf76c48384b451d0
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=25aaa12caf916de37c03dd1d21ab472a1e27342e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:6b:61:78:66:72:50:9d:48:3f:4c:0c:f9:
5c:58:0c:d2:ff:62:b4:5e:50:41:4d:a4:47:65:33:
48:c3:bf:f9:c3:4b:74:96:84:3b:71:1f:45:eb:4e:
92:d7:05:5a:e0:a5:7d:2b:b9:e9:3b:5f:5b:de:77:
6f:60:b0:26:d5:16:d5:53:d5:d9:fd:2e:8e:fb:f1:
48:55:25:ec:67:05:aa:e2:22:24:93:80:e5:f8:72:
06:41:8b:20:37:26:af:67:07:1a:f7:8c:6f:c7:8e:
e0:ba:7b:b0:24:a8:60:be:8f:e2:f6:22:81:c0:67:
52:c7:bb:9f:48:0f:28:e7:79:ce:1d:2b:05:36:4c:
7b:eb:ef:ef:7d:21:cb:2c:38:7e:93:f9:5c:84:17:
44:2b:6d:fd:4f:67:2f:d5:f1:7b:03:36:30:ed:2d:
62:cf:86:1e:b6:6a:d9:53:8a:45:e9:8f:9b:57:de:
88:b3:13:cd:e2:a1:aa:9a:33:7c:46:85:b7:49:e0:
c9:5a:8d:e8:1e:25:5a:61:47:56:2c:d2:09:7a:dd:
aa:f0:28:f8:aa:57:18:95:37:31:93:ab:3b:3a:bc:
41:af:bf:8d:e5:82:1c:10:fd:09:59:24:dd:eb:22:
a2:30:c5:f2:c4:84:bd:33:cb:2f:ea:f9:9a:b7:65:
65:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AA:A1:2C:AF:91:6D:E3:7C:03:DD:1D:21:AB:47:2A:1E:27:34:2E
X509v3 Authority Key Identifier:
keyid:CB:20:E9:AA:BB:B6:19:15:46:11:02:35:CF:76:C4:83:84:B4:51:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyDpqru2GRVGEQI1z3bEg4S0UdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2a:1a:a6:e9:2c:61:5b:b8:70:7b:f1:fd:f4:06:83:e9:f9:
9c:be:a2:19:6c:6a:dd:bf:cd:22:b3:d0:0a:2e:30:8f:79:58:
77:39:4d:d1:10:27:5e:54:0e:ca:60:d9:a4:0d:f2:fe:97:5b:
ea:94:d9:8d:46:cf:c6:7c:3e:31:c3:ba:a1:75:5d:4a:8d:24:
13:fe:09:f6:ce:58:2a:7f:6e:01:8e:da:a2:27:de:72:85:33:
91:d9:27:7f:e7:70:d3:ce:62:3d:c4:30:98:03:6c:7c:8a:e1:
cc:a5:29:fc:7c:1f:c5:29:da:70:99:f6:7a:20:0a:e8:b4:a2:
3c:8d:bd:17:ca:b1:e1:57:1f:17:2a:f9:59:57:94:86:9b:d3:
6c:38:4c:bd:80:38:f6:3a:c3:14:3e:c8:df:28:9d:b1:9b:31:
8d:bc:0f:25:26:94:3b:be:4f:6a:4a:c0:dd:f4:3e:4a:ad:05:
3f:45:a3:c6:97:0c:c3:73:9e:de:09:0c:f7:48:c9:c8:b7:0c:
e3:2e:1d:b7:b6:18:09:a5:bf:9f:9a:24:07:0f:7b:62:51:9d:
69:67:02:21:5b:2d:8f:83:21:7b:10:0d:43:00:f3:35:37:28:
45:2c:ec:3b:6a:65:a1:26:89:8b:d1:38:78:4b:56:5f:e3:58:
94:51:b6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:36 2025 by rpki-client