Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.mft
File: Yonrndlo7aSnlWTC4GpoOEIpegQ.mft (raw, json)
Hash identifier: gLOPY4bB0YbTiAVpPW/6EEuqMcnbf2QW1HzWxn52WZk=
Subject key identifier: C9:10:C4:83:76:75:22:95:8B:FA:12:0D:B8:9F:45:81:AA:C5:09:E1
Authority key identifier: 62:89:EB:9D:D9:68:ED:A4:A7:95:64:C2:E0:6A:68:38:42:29:7A:04
Certificate issuer: /CN=6289eb9dd968eda4a79564c2e06a683842297a04
Certificate serial: 0194BC04B3C621817D1623F145BF80E87636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yonrndlo7aSnlWTC4GpoOEIpegQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.mft
Manifest number: 0149
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: Yonrndlo7aSnlWTC4GpoOEIpegQ.crl (hash: beatBksVIjim/inYa8TLqe8CGWZQILCaqfhQuhI9pGA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b3:c6:21:81:7d:16:23:f1:45:bf:80:e8:76:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6289eb9dd968eda4a79564c2e06a683842297a04
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=c910c483767522958bfa120db89f4581aac509e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:46:60:21:f6:bb:d0:a3:c9:20:9c:50:6f:
08:03:b2:50:42:22:75:ae:bf:81:d0:e7:be:8c:20:
9a:f7:b5:64:f2:8a:23:b6:42:9c:ae:8d:46:32:2e:
be:d6:e1:b2:a7:d3:51:34:41:2e:cd:0f:3c:05:85:
d0:2e:cc:65:88:37:26:59:97:8e:be:98:cf:32:25:
51:6d:f5:14:e8:22:eb:04:66:55:f4:f4:7e:e2:3c:
19:e2:84:5a:3c:88:79:66:8a:ea:40:29:fc:fe:5d:
03:4a:73:2a:14:2d:23:1f:94:e9:c1:bf:aa:2d:ee:
36:ee:3b:14:42:a8:83:1c:5e:81:23:02:72:a5:72:
d4:f4:2c:26:78:e5:cb:ad:4d:c5:8d:7d:9e:93:02:
da:ca:f0:b4:a8:ca:45:e0:12:5f:20:eb:4c:04:5a:
cc:b7:db:4f:89:99:0e:31:7f:cb:5c:74:ae:85:10:
37:24:74:7a:ca:d7:06:e7:f0:c0:4a:b4:c4:b4:26:
61:40:e9:01:1a:07:5c:72:c8:d6:44:e2:ff:0a:ad:
7e:57:64:ac:f2:df:c4:ca:28:6a:10:83:94:b4:f7:
35:bd:b9:f0:37:1f:9b:21:4f:25:57:d4:3d:b6:6d:
65:cc:d5:ac:47:06:01:95:f3:3c:75:c7:11:5f:3c:
0e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:10:C4:83:76:75:22:95:8B:FA:12:0D:B8:9F:45:81:AA:C5:09:E1
X509v3 Authority Key Identifier:
keyid:62:89:EB:9D:D9:68:ED:A4:A7:95:64:C2:E0:6A:68:38:42:29:7A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yonrndlo7aSnlWTC4GpoOEIpegQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7f:aa:10:24:ca:61:8c:28:be:c8:95:53:9b:f1:04:7c:4d:
77:31:7d:dc:b1:e1:01:ed:f7:3c:c0:c6:63:ec:fc:50:d6:aa:
a2:d0:0b:cf:85:63:d2:18:e3:5f:5b:09:c0:b0:16:c6:e3:be:
9a:77:7c:36:e9:c5:db:f7:60:75:19:f5:46:ab:7e:31:6c:08:
f2:b4:6f:ca:92:f6:8e:2b:9f:a8:58:89:54:ca:a3:85:9d:d0:
7a:d3:79:6f:2e:1f:1b:53:ee:3b:f3:d1:9d:2b:1b:31:62:7b:
10:f3:fa:6c:06:46:23:3e:ca:67:11:24:c1:bf:9f:c5:62:c1:
1d:92:70:0a:6c:65:a1:a2:84:8f:cd:e6:4f:0c:93:23:a4:a2:
9e:5b:8a:6a:31:03:d6:c6:ce:ba:40:37:16:3a:39:fd:64:10:
a0:b7:56:8d:91:c6:9e:c4:a2:5b:c7:75:f0:57:8b:d7:61:03:
78:98:cc:94:8c:26:76:89:3f:22:71:24:4c:ee:0d:93:af:d2:
b1:f3:64:fa:a7:8f:f4:80:ee:0d:84:6a:e8:eb:20:99:2c:4b:
33:91:26:b9:05:e3:8e:47:e7:e2:bf:1a:95:b2:57:e0:a0:b3:
f4:47:82:84:d2:25:52:69:9c:8d:f3:08:2d:db:87:26:df:65:
d4:e6:07:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:31 2025 by rpki-client