Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/30f8a1-99d2-441a-9e17-5a9ff3a9c51e/1/YoNhOQ7U4GYi62soNtdn918Ic2g.mft
File: YoNhOQ7U4GYi62soNtdn918Ic2g.mft (raw, json)
Hash identifier: RcyHvz1j56ODwNFrDQ6hrYykUc9f5jOJwGjppqsqE4o=
Subject key identifier: D0:9F:BD:A4:7C:78:09:27:24:00:6B:39:4A:70:7E:7E:A1:27:A4:67
Authority key identifier: 62:83:61:39:0E:D4:E0:66:22:EB:6B:28:36:D7:67:F7:5F:08:73:68
Certificate issuer: /CN=628361390ed4e06622eb6b2836d767f75f087368
Certificate serial: 0194BBCE9BF4B235C5A959F1AD6FEC0B238F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoNhOQ7U4GYi62soNtdn918Ic2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/30f8a1-99d2-441a-9e17-5a9ff3a9c51e/1/YoNhOQ7U4GYi62soNtdn918Ic2g.mft
Manifest number: 08C9
Signing time: Fri 31 Jan 2025 10:01:07 +0000
Manifest this update: Fri 31 Jan 2025 10:01:07 +0000
Manifest next update: Sat 01 Feb 2025 10:01:07 +0000
Files and hashes: 1: YoNhOQ7U4GYi62soNtdn918Ic2g.crl (hash: ZKW9DPxbvy5GNLLERha+XqRHu715g81VyGg/zrruPwI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9b:f4:b2:35:c5:a9:59:f1:ad:6f:ec:0b:23:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628361390ed4e06622eb6b2836d767f75f087368
Validity
Not Before: Jan 31 10:01:07 2025 GMT
Not After : Feb 1 10:01:07 2025 GMT
Subject: CN=d09fbda47c78092724006b394a707e7ea127a467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:83:be:3c:c6:fc:8c:2e:5c:98:c9:99:89:
ab:a7:8d:0a:a2:35:da:2a:6a:e9:f6:3b:11:9c:98:
de:5d:54:9f:0e:8b:34:33:96:5a:df:14:d3:42:91:
8c:1c:e7:c3:fb:09:24:9c:c3:49:99:e7:b6:04:23:
64:f4:63:dc:9d:3c:11:8d:85:e1:84:6e:7b:93:0a:
7d:d2:09:8a:a0:c1:b0:57:ac:04:51:1b:9b:b7:9f:
b9:13:d6:7c:d6:29:72:f0:99:2b:5d:b0:22:46:f0:
e2:a5:b8:be:a9:0b:8c:37:2f:8d:74:9b:29:30:16:
a9:28:07:9b:49:78:35:00:53:16:38:85:29:67:0c:
83:40:35:a3:e2:8f:f3:57:8e:04:eb:51:82:d8:d7:
9c:88:20:85:37:76:e9:96:ee:67:56:e5:db:6f:8a:
6d:a7:a9:ae:43:12:fd:e4:a6:b9:3a:c6:0b:95:1e:
a4:2b:e0:2e:bf:5f:60:ba:ef:a4:87:17:18:93:d9:
11:e0:de:0c:c0:28:ea:44:06:ab:7d:c1:ce:f8:b0:
fd:9d:71:e6:57:73:4e:81:9d:f7:4a:f0:53:2b:b6:
64:94:3e:ea:f3:eb:fc:7e:c2:0e:fb:68:ad:2f:bf:
5d:2e:61:56:df:2e:25:c0:02:63:51:de:7e:47:24:
60:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9F:BD:A4:7C:78:09:27:24:00:6B:39:4A:70:7E:7E:A1:27:A4:67
X509v3 Authority Key Identifier:
keyid:62:83:61:39:0E:D4:E0:66:22:EB:6B:28:36:D7:67:F7:5F:08:73:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoNhOQ7U4GYi62soNtdn918Ic2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30f8a1-99d2-441a-9e17-5a9ff3a9c51e/1/YoNhOQ7U4GYi62soNtdn918Ic2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30f8a1-99d2-441a-9e17-5a9ff3a9c51e/1/YoNhOQ7U4GYi62soNtdn918Ic2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6e:be:a2:92:a0:71:df:36:f4:02:da:49:24:70:4e:b4:53:
f2:f8:f5:99:dd:05:bb:81:3d:c0:89:81:ac:fe:90:82:19:6d:
aa:ab:b6:e9:fb:59:fd:6a:e7:4a:38:ea:fc:9b:22:6b:c0:40:
72:e3:13:d3:c7:20:21:b7:e5:1a:b5:c2:e9:93:b8:71:05:e2:
02:9a:fd:0c:1e:1f:e5:6c:7d:0b:d3:79:7d:ad:5e:ca:fc:4a:
32:4d:e9:36:12:93:5b:f2:fb:b8:53:05:32:6b:99:40:92:92:
d6:8e:01:7d:ba:b9:81:af:f7:60:6f:4f:cc:ff:ec:95:d9:99:
9a:e8:a3:1e:e7:4f:59:4b:54:dc:dd:2a:5f:d8:21:b1:ea:72:
7b:8e:00:31:b9:59:15:5f:54:ed:d7:94:02:1c:8e:9a:22:e4:
72:d2:4b:07:c0:25:ae:14:c0:ae:6d:24:d9:53:57:4e:f7:0e:
67:b2:d9:e7:7a:36:b7:c4:11:34:6c:74:15:d0:1e:73:e0:fc:
b1:49:99:97:a1:97:9e:6f:28:e7:c7:44:2a:62:a4:2f:73:72:
34:68:27:d5:90:01:0f:70:5e:e1:f9:33:12:09:5a:47:57:f8:
d6:a9:85:f0:ff:ab:eb:e3:e1:3f:59:12:4a:da:fe:59:ea:93:
44:16:91:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:17 2025 by rpki-client