Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
File: yXZVaQIejbR5y9ZKWgsrr74qjqw.mft (raw, json)
Hash identifier: +myERWJIs1B5X0d9dkH5ejeoZXNEZk0E5rpch/JGFDc=
Subject key identifier: F9:01:B9:74:EA:38:46:EC:82:4B:AB:DC:8C:0A:8D:36:ED:E4:3F:55
Authority key identifier: C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
Certificate issuer: /CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Certificate serial: 0194BBCDCAAFCDC1ED2211F1F09DCFC72734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
Manifest number: 04A3
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: yXZVaQIejbR5y9ZKWgsrr74qjqw.crl (hash: tNEtSoFQMeeX3RQGRLTXb6Fvr/aZ+VpD119DjXzUtfg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ca:af:cd:c1:ed:22:11:f1:f0:9d:cf:c7:27:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=f901b974ea3846ec824babdc8c0a8d36ede43f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:e3:e0:8b:24:9d:84:cd:f4:bf:38:3c:1b:
ae:5e:f2:89:70:64:bc:b3:4f:b0:ea:8c:6e:4d:d9:
ba:98:f6:3b:7c:4d:81:2e:94:95:80:8e:7c:7b:91:
71:06:e3:d1:01:3e:70:9a:c6:78:f9:c8:04:e8:48:
bb:49:76:5b:fa:15:50:da:f0:b3:d0:49:85:e5:7e:
2a:6b:3c:f5:a5:0f:90:a3:fe:82:9a:93:92:39:81:
fb:02:15:0e:54:1d:22:41:39:b6:32:1d:b3:a0:91:
9e:d4:9d:e5:6b:21:91:0a:14:08:3a:a8:11:65:67:
5e:0a:19:e6:cd:f5:e2:63:11:8f:6c:a8:c0:ba:ff:
59:d8:17:d4:c8:2f:b1:c8:61:ac:2c:ec:37:9e:39:
9f:99:3c:e9:91:58:ae:4f:4a:f4:5d:56:4b:26:b3:
ca:9f:25:ff:0c:d2:2f:c8:7f:31:cd:3b:14:85:15:
54:ca:e8:03:dd:e8:80:79:56:fd:31:0c:17:3b:1a:
57:b4:02:00:35:e3:8b:e4:bb:3e:d4:9f:ca:c5:d9:
52:5c:a8:6b:ae:53:45:4a:4e:1f:d6:3b:c1:a6:5e:
2f:3e:5e:70:13:12:2a:19:30:5d:ff:dc:05:68:e4:
32:94:8a:4c:5d:5d:20:9e:64:12:3e:ca:d1:28:23:
b3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:01:B9:74:EA:38:46:EC:82:4B:AB:DC:8C:0A:8D:36:ED:E4:3F:55
X509v3 Authority Key Identifier:
keyid:C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4b:f5:e1:ff:76:0b:64:49:a5:df:ae:a3:50:8e:1d:56:ac:
93:31:46:08:eb:ba:52:f4:6a:53:0f:f5:e7:78:5f:99:ac:79:
15:59:e2:68:56:52:61:e4:2b:c3:5d:e7:44:0e:6a:da:64:71:
ce:68:63:2f:a5:a0:2d:5a:71:d5:f2:62:56:8a:e4:af:be:ad:
d1:7a:4d:f7:c9:e9:ff:e7:62:c3:07:ec:db:22:54:82:2a:c2:
a6:d4:65:7b:7a:81:3c:83:4c:d9:47:dc:a4:e5:b9:8a:43:ef:
64:e9:3c:01:54:98:33:23:29:e5:e7:27:cb:22:1a:2c:70:05:
79:0b:91:46:4d:2c:46:cb:e7:8b:c5:e3:d3:df:0e:ac:20:2a:
ab:49:9f:13:55:af:c4:9c:52:4b:d9:dd:22:39:00:27:8b:6b:
6b:56:aa:58:c3:69:cc:c1:5a:f9:9e:52:84:2e:6f:13:31:89:
e5:db:40:b0:2f:40:ec:c6:12:ff:82:6c:a7:6e:5c:6f:7a:4e:
19:28:d6:b7:08:2a:2b:df:3a:19:05:2f:38:5d:30:dc:a9:e4:
20:8f:06:cf:e2:c7:2f:27:77:54:c6:6e:8f:7f:0c:c3:8d:21:
45:95:6f:e1:61:98:96:6e:8b:13:27:63:06:7b:f9:c0:9b:78:
6b:6a:b5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:42:13 2025 by rpki-client