Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
File: r_yn9tponMVFu7uVA5i6xAeXmqM.mft (raw, json)
Hash identifier: gsnfcUKNTOoS914bR4WDwqHyeHM6P9Fv+OQNjd82B0I=
Subject key identifier: CF:5A:E8:55:98:E3:0E:08:52:FD:0B:01:3C:AC:2F:98:50:0A:40:0A
Authority key identifier: AF:FC:A7:F6:DA:68:9C:C5:45:BB:BB:95:03:98:BA:C4:07:97:9A:A3
Certificate issuer: /CN=affca7f6da689cc545bbbb950398bac407979aa3
Certificate serial: 0194BC72BAAEB03000B0E97498E130BDD0B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
Manifest number: 0194
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: r_yn9tponMVFu7uVA5i6xAeXmqM.crl (hash: tjKhqLMWir6fXR0URGXCKPEkWhYgUdrH2wWuRahusxw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ba:ae:b0:30:00:b0:e9:74:98:e1:30:bd:d0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affca7f6da689cc545bbbb950398bac407979aa3
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=cf5ae85598e30e0852fd0b013cac2f98500a400a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:76:83:f6:9d:58:74:a3:dd:ef:fa:b2:d9:09:
d9:9d:11:be:dc:29:06:16:d7:8f:73:3d:2b:4f:f6:
6b:ac:a5:db:16:b7:c2:a1:49:f5:c8:d0:f3:c4:6a:
e7:7f:25:5a:7d:a7:e6:2b:8e:2a:6b:bb:9a:ec:e8:
78:9a:68:79:81:a8:63:0a:f4:03:9c:34:e2:68:22:
4b:af:a2:14:87:1a:a6:c2:23:2b:39:ab:e9:53:0f:
1b:c1:9a:47:06:14:b9:89:92:df:17:56:7d:ee:58:
b1:a2:6f:1a:26:d7:02:7a:4a:32:98:25:0c:03:f8:
f5:03:23:48:f0:cf:3b:fd:de:42:03:75:bf:82:82:
f3:9a:18:7d:08:8e:88:58:40:69:99:b1:cc:eb:25:
08:de:04:d0:3b:5b:e2:79:bd:d6:9d:c1:80:b1:66:
7c:c6:88:d6:d8:6a:4b:6e:cf:13:79:ce:87:d3:ec:
df:3e:51:c9:09:14:a0:54:70:9c:55:bf:5a:48:35:
66:66:bc:fb:b0:65:7f:00:98:73:b9:69:5d:37:29:
e7:8f:d7:a5:44:ae:9a:b5:86:54:64:09:98:d9:c3:
51:c4:41:eb:8b:68:3a:93:c7:85:62:f8:3d:cf:e5:
2e:32:30:31:74:1f:3d:d0:7a:9f:21:49:75:f5:88:
ed:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5A:E8:55:98:E3:0E:08:52:FD:0B:01:3C:AC:2F:98:50:0A:40:0A
X509v3 Authority Key Identifier:
keyid:AF:FC:A7:F6:DA:68:9C:C5:45:BB:BB:95:03:98:BA:C4:07:97:9A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0b:7a:8d:03:fd:60:03:03:eb:f6:f2:d0:c0:8b:ec:d0:e6:
a5:a1:b2:fc:2a:83:b7:1d:4b:f9:70:ee:d1:fb:6e:4d:a6:e7:
1b:b6:ca:85:8a:47:d6:89:9b:69:76:50:a2:0a:0d:6b:17:a9:
2a:a8:9c:e8:a5:84:85:f7:4f:1a:3d:ae:ca:e5:d4:50:e9:a9:
93:29:33:7f:83:6e:ef:6b:43:b5:08:9c:ce:3a:87:a7:f3:5d:
5b:e3:39:af:c0:0f:12:f1:e9:50:c2:60:ef:8a:73:e2:d8:d8:
25:fa:00:55:7f:29:1e:e0:e7:86:46:e4:4d:bd:d7:48:b0:02:
86:95:08:11:ff:70:71:72:f7:0e:d5:1b:7b:30:6d:af:6c:67:
ab:f6:de:a4:21:ad:ee:39:f5:6d:9c:1b:67:7d:67:7f:26:f7:
a8:5a:1b:af:11:4d:25:10:ef:2e:bb:3f:0d:30:94:b6:39:53:
d6:2b:9f:9a:64:87:77:da:9c:f3:66:7b:19:48:4a:eb:1b:23:
70:e9:2b:36:32:9f:5f:c4:bf:1b:5a:04:6d:9c:96:f0:8b:f0:
f5:31:e2:51:92:e7:67:75:bb:34:dc:c6:2a:b7:ae:d7:fa:8d:
81:20:14:74:f8:05:2d:53:8c:23:41:85:7e:7e:47:18:3a:3c:
72:32:82:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:32:01 2025 by rpki-client