Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
File: RYemiKiamJlJQWqBnMSoDepFTJ0.mft (raw, json)
Hash identifier: DwPkMolhc2lSkv2m0x6um4xYI7cdhx0iO38+7/BWPNM=
Subject key identifier: 37:F1:30:DF:5C:7F:85:64:CC:80:AD:12:43:90:8C:99:C2:97:0C:83
Authority key identifier: 45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
Certificate issuer: /CN=4587a688a89a989949416a819cc4a80dea454c9d
Certificate serial: 0194BC3BD93FFC8E90693DF97D33BE100CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
Manifest number: E4
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: RYemiKiamJlJQWqBnMSoDepFTJ0.crl (hash: PfJ3RgU2i3re5uNUQPc+ssWMqERm/Qf+U82LnT8kRyI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d9:3f:fc:8e:90:69:3d:f9:7d:33:be:10:0c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4587a688a89a989949416a819cc4a80dea454c9d
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=37f130df5c7f8564cc80ad1243908c99c2970c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:11:5c:2f:33:da:b7:24:fa:1a:d7:21:97:a1:
7d:9a:39:b8:49:ca:37:f5:0b:27:67:6f:ee:30:4a:
38:f0:d9:5e:10:38:b1:d7:70:2e:40:1d:cd:cf:a8:
62:97:25:96:f6:74:52:b2:17:f4:07:9d:61:79:24:
dd:e8:a7:37:8e:c8:2e:ed:13:f3:8f:18:78:1e:52:
bf:a4:34:42:8a:96:95:2e:17:e7:6f:30:fe:19:ad:
2d:ad:b2:36:05:b4:f4:0a:62:1e:0a:a5:89:85:3d:
8d:ba:72:7e:d9:db:16:82:8d:bd:dd:0e:81:2f:db:
d0:d5:d9:3a:87:a0:7f:57:ce:bb:31:7b:8c:5d:89:
7b:58:6a:f1:ea:4b:ba:87:01:b3:8e:db:8b:c9:2a:
7b:a7:04:66:31:e0:46:86:4e:34:43:0d:f3:04:00:
a2:5a:cf:94:f1:f0:4a:b0:60:aa:57:26:6d:cd:f4:
4b:d3:5b:34:39:c5:41:59:09:c0:c8:a9:3f:fa:f5:
7b:cb:c1:e4:65:48:e5:1c:72:22:fa:1a:df:f2:4b:
42:bf:ae:36:08:4c:da:bc:bc:ac:1e:6a:43:4b:ba:
b4:9d:fc:f1:2b:79:80:bd:a5:dd:83:6d:5d:15:58:
32:87:61:99:01:99:9c:58:4b:46:52:23:54:d4:f3:
33:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F1:30:DF:5C:7F:85:64:CC:80:AD:12:43:90:8C:99:C2:97:0C:83
X509v3 Authority Key Identifier:
keyid:45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:8d:df:c1:86:1e:58:4a:13:5d:9b:57:16:09:39:9a:f3:7f:
e5:4f:7f:4d:44:04:cb:88:d3:b0:a2:f1:ae:4b:0d:6a:11:f8:
91:33:91:07:68:7f:e2:2d:bb:7f:f4:ff:9d:e0:46:21:83:89:
1c:8e:fe:7c:63:dc:07:97:a7:b6:da:5a:e9:12:68:29:cd:2f:
df:d0:ca:15:0f:69:6c:47:48:9b:68:96:f0:02:0d:9c:21:60:
01:2f:e2:d8:51:d0:42:6f:99:08:e1:b7:0c:f8:9d:ab:5c:cd:
47:60:4a:60:d6:a3:a1:08:b1:04:fa:d2:f2:5f:52:a1:84:59:
21:09:64:f2:6d:39:30:18:46:6e:1c:05:46:87:65:26:3c:11:
a8:46:c6:e5:5f:bc:67:31:7c:10:c6:7d:3d:2f:2a:00:b0:04:
2b:79:cd:0c:de:fb:32:03:47:00:b3:8c:38:73:b8:06:14:2b:
97:a7:25:fa:8a:a6:42:36:69:75:94:03:1e:56:46:76:b2:09:
0e:85:27:e1:a0:45:ef:08:04:7e:2e:5a:d2:b8:a2:fd:3a:44:
46:ed:d3:88:53:76:46:fb:20:fb:0a:d0:c3:1b:5c:cb:18:02:
a4:ca:ea:3a:14:bd:e7:51:ec:4b:0a:4f:91:18:0b:02:6d:03:
8e:4d:90:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:47:39 2025 by rpki-client