Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
File: y8Zg8DJNjLG2E3ednoMON9UuqrM.mft (raw, json)
Hash identifier: UIAuzeqjGM3NoTMJDSmMMMLNcVtydUPzsgZOazDG/l0=
Subject key identifier: 2C:BC:83:FF:FD:84:2C:A7:BE:69:8B:79:ED:E6:1B:7A:FA:DD:0A:ED
Authority key identifier: CB:C6:60:F0:32:4D:8C:B1:B6:13:77:9D:9E:83:0E:37:D5:2E:AA:B3
Certificate issuer: /CN=cbc660f0324d8cb1b613779d9e830e37d52eaab3
Certificate serial: 0194BBCE75DEE96026F1241CDE273D3B87A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
Manifest number: 028C
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: y8Zg8DJNjLG2E3ednoMON9UuqrM.crl (hash: aBK4uMsTJy8CObUjaQzIwhNTEIg3hU4lfSpGdgDBut0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:75:de:e9:60:26:f1:24:1c:de:27:3d:3b:87:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc660f0324d8cb1b613779d9e830e37d52eaab3
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=2cbc83fffd842ca7be698b79ede61b7afadd0aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:dd:87:3e:9d:ef:f8:4e:76:a3:41:d3:34:
f1:d7:02:ad:3a:ca:ad:78:65:b9:78:28:a7:ed:e9:
34:c7:dc:ad:e2:20:5c:51:27:60:b4:f0:cb:60:84:
a4:cc:7b:e1:47:28:92:63:7e:f1:6c:46:66:2d:a0:
fa:bc:dd:30:a3:a7:7f:87:0f:40:8d:42:df:82:91:
49:78:ad:b1:b0:6f:58:88:a2:f5:ea:e9:57:81:ca:
80:70:7b:6d:d4:92:ce:c5:fd:b8:9d:fd:1f:a9:2a:
a0:db:89:28:3a:77:55:8d:9b:bf:58:33:8f:05:a0:
74:d1:ec:6e:1a:4f:ef:63:8b:81:6e:93:3d:89:b8:
82:31:0e:44:65:22:fa:42:f2:2d:16:93:72:70:03:
51:dd:11:3e:e6:31:9f:53:0c:5a:c6:74:17:0b:50:
f2:67:af:e8:e4:79:49:9d:0d:ac:0d:c1:a4:a5:8d:
03:bc:65:62:21:a4:17:b9:0f:17:c5:6f:e8:a9:8f:
d3:c0:38:b9:cf:cd:58:4e:10:ac:a9:b0:6a:9b:06:
4e:8d:86:4b:88:ca:f8:4c:ca:ac:48:ec:cd:88:45:
38:8d:8a:7f:ce:b4:fb:72:e7:9a:58:f6:87:f2:33:
35:18:b3:2e:03:35:70:25:a6:60:76:82:fd:f3:a9:
d0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BC:83:FF:FD:84:2C:A7:BE:69:8B:79:ED:E6:1B:7A:FA:DD:0A:ED
X509v3 Authority Key Identifier:
keyid:CB:C6:60:F0:32:4D:8C:B1:B6:13:77:9D:9E:83:0E:37:D5:2E:AA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:17:61:d0:71:d8:9f:f2:36:ac:34:36:76:ee:6c:3f:4c:af:
6a:be:5e:57:67:a9:f6:60:5b:fc:a5:94:d3:74:2f:bc:e4:0f:
32:e6:2d:55:fd:1e:9c:4a:99:cb:85:9f:0a:3e:bb:64:2e:93:
89:97:39:46:70:09:d2:5e:ba:18:fa:95:c6:c6:f5:0b:3a:49:
db:94:64:47:7d:ec:89:52:6c:be:93:36:e5:bb:82:d2:23:b5:
14:02:b3:24:1d:61:19:19:2f:f7:af:7f:3a:e2:e9:96:79:24:
26:ac:4a:6c:17:2c:36:4d:5d:84:9e:32:6f:fb:54:15:f9:32:
08:1f:76:77:ae:b0:5c:b6:46:69:b2:85:c3:64:07:4b:ae:29:
c0:e8:75:c9:bf:cb:0e:1f:57:8a:41:ec:4e:03:28:c8:a0:e1:
9e:91:62:5c:84:7a:f4:88:25:c8:38:89:03:d5:df:85:0a:f5:
b6:b8:dd:10:58:58:d9:55:22:0e:2a:fc:01:54:a2:21:dd:c0:
a5:55:01:ff:25:fb:f0:c2:85:d4:98:30:21:f3:56:2f:77:35:
45:41:0c:79:b2:9e:cf:4e:99:1a:3c:31:d9:76:35:27:2a:28:
05:af:a8:f8:dc:2f:c0:45:e4:11:1b:17:93:64:33:86:09:74:
c6:50:0f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:36 2025 by rpki-client