Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
File: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft (raw, json)
Hash identifier: zwnKODg4ZsmCO+0xtyFJTD0Aop8ypbtgSGZIcu31zkc=
Subject key identifier: 4F:5D:41:2B:1C:B1:F5:ED:40:5A:B7:80:C9:9E:70:89:95:8F:A1:46
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Certificate issuer: /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial: 0194BCA98CCF3555602F09D7C1C18B1A015B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl (hash: nG/glVUPh8btOfx8EsmXEc5xb67YySyN4H/b9gRrceg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8c:cf:35:55:60:2f:09:d7:c1:c1:8b:1a:01:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=4f5d412b1cb1f5ed405ab780c99e7089958fa146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:d5:42:4e:ed:97:2f:87:a1:28:49:36:bd:
4d:31:79:03:8c:d8:b7:26:8b:3d:a9:85:36:bc:b0:
d9:18:29:46:a1:6a:ef:b8:0b:bc:10:a7:f6:0e:9f:
9c:c3:0f:88:93:9a:9c:0f:39:83:33:ff:66:ce:5a:
65:8d:89:3c:0b:c4:28:df:a9:1c:76:15:84:9b:17:
08:ef:7a:d7:df:9c:83:e1:f7:73:e2:43:4e:d4:18:
d4:a4:01:d5:e8:d7:13:b4:0d:6f:87:13:48:fb:39:
c7:a5:c1:03:10:ae:f7:49:d1:29:b5:36:39:59:87:
d9:15:0a:78:f3:fd:e8:97:fd:fc:30:ea:c7:85:88:
8f:d5:42:ec:02:18:61:ef:b6:af:9d:42:2f:84:57:
d5:b6:b3:bb:58:93:b7:c0:50:3c:07:8d:2d:f8:b6:
31:64:7b:fc:04:42:fe:99:15:08:71:88:a9:c1:60:
6e:4e:d3:73:64:78:d4:23:12:be:b7:1f:b1:5d:41:
33:4b:2d:91:bd:e9:59:74:dc:9b:58:43:cd:98:0f:
fb:40:ba:77:3c:80:4b:b2:68:70:89:6c:58:1c:a6:
f1:49:da:c6:7d:be:46:28:df:a8:cd:77:a3:9b:63:
79:6d:30:b9:40:4b:79:95:a1:f2:a1:b3:5c:0a:73:
82:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5D:41:2B:1C:B1:F5:ED:40:5A:B7:80:C9:9E:70:89:95:8F:A1:46
X509v3 Authority Key Identifier:
keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:03:19:e0:e8:77:30:79:b9:49:14:01:91:92:a0:96:29:c3:
6f:d8:15:94:8a:fd:df:fd:6a:ce:3c:ac:38:00:de:65:2e:f9:
07:22:d0:5c:7d:33:5c:e7:40:47:b8:bf:8f:8a:45:8a:18:7f:
cf:ca:3d:3c:8e:9f:06:ec:64:d7:cd:95:d1:2a:38:f8:ca:96:
42:e4:49:c5:8d:22:3a:57:5f:8a:b9:ea:3f:63:4d:f0:2f:fd:
9e:96:12:64:d4:48:2e:28:58:2a:0e:b3:45:64:4d:a6:e6:6e:
a4:cf:15:69:8e:1e:81:cb:c0:92:65:ae:d2:39:9c:a4:48:49:
7e:21:4c:7f:e8:7e:af:3e:99:c5:f0:57:e8:67:e8:d4:df:31:
b3:bb:54:c8:6e:b7:86:ff:f0:8a:c5:c7:fd:9f:ee:24:a2:7b:
7a:30:1d:be:28:43:22:1b:9a:94:50:49:95:5f:fb:9f:c4:dc:
aa:bc:be:d8:ef:bc:9a:f6:8c:e4:09:33:57:0e:ae:ff:d6:b8:
ab:e3:63:da:2c:2b:9c:e3:98:e0:ea:ba:ad:94:70:ad:ef:db:
5d:c6:84:e6:a8:cd:37:4e:dc:ce:43:ee:9b:f8:8b:98:f2:13:
53:c8:f8:2d:6d:c9:d2:df:51:bd:8c:7a:29:68:e0:9b:83:4b:
2e:0e:71:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:09 2025 by rpki-client