Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
File: Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft (raw, json)
Hash identifier: bpqZrEQz9rTzmZDH7eNorVnmMORgSNpluzGBzgzCQfw=
Subject key identifier: A5:08:73:E3:26:65:F5:63:34:F7:69:3F:80:18:D0:F7:0A:46:98:86
Authority key identifier: 63:6B:02:7B:FA:B9:1A:A4:71:9A:80:EF:E0:21:24:61:37:42:8B:DA
Certificate issuer: /CN=636b027bfab91aa4719a80efe021246137428bda
Certificate serial: 0194BD17D6FDDF279A97B033C87E3138A22D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
Manifest number: 11CA
Signing time: Fri 31 Jan 2025 16:00:43 +0000
Manifest this update: Fri 31 Jan 2025 16:00:43 +0000
Manifest next update: Sat 01 Feb 2025 16:00:43 +0000
Files and hashes: 1: Y2sCe_q5GqRxmoDv4CEkYTdCi9o.crl (hash: ASoBLSuHgDSht0emJaSO3cCYljsior38a2mzs1/ifEE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d6:fd:df:27:9a:97:b0:33:c8:7e:31:38:a2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=636b027bfab91aa4719a80efe021246137428bda
Validity
Not Before: Jan 31 16:00:43 2025 GMT
Not After : Feb 1 16:00:43 2025 GMT
Subject: CN=a50873e32665f56334f7693f8018d0f70a469886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1b:d2:5d:f8:ee:af:56:4f:31:4f:32:5e:5a:
64:e4:0f:43:8d:ec:28:3f:18:d4:d9:12:7d:72:c7:
64:13:bc:ba:59:de:79:68:ea:6b:a2:9a:de:89:28:
29:8c:9d:32:e5:35:f6:cc:60:f8:8f:54:ac:f4:d8:
cd:76:7e:70:11:17:21:80:e3:5a:cb:ad:1d:ef:4f:
12:f8:1e:1a:ca:e2:b8:9e:34:82:05:fd:84:00:10:
39:ba:c5:b2:60:1c:b9:28:bf:83:8e:b0:95:e2:5f:
a3:a7:6a:a3:b6:c7:33:f6:93:b3:e7:5c:39:ac:aa:
51:b5:0b:1e:d3:cf:89:b6:e6:03:ce:69:fe:eb:ff:
d9:5e:8b:d6:d8:f7:4d:8b:10:67:d9:d2:39:85:e9:
bc:bb:6c:18:a9:4c:df:75:12:0a:bb:2a:bb:91:24:
43:af:03:a6:5d:19:33:79:03:60:1a:7d:0b:fe:3c:
09:26:b2:d7:96:64:29:cf:64:03:27:1f:71:19:58:
5b:fd:90:7a:a2:79:60:08:5d:f9:ed:1e:89:f9:64:
24:39:24:34:e0:b8:b2:fd:27:73:4c:b9:5c:b2:0a:
6b:41:fe:7f:61:bb:38:21:bb:57:23:6b:bf:53:80:
78:97:85:db:88:15:25:df:75:b2:74:ef:97:35:3c:
08:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:08:73:E3:26:65:F5:63:34:F7:69:3F:80:18:D0:F7:0A:46:98:86
X509v3 Authority Key Identifier:
keyid:63:6B:02:7B:FA:B9:1A:A4:71:9A:80:EF:E0:21:24:61:37:42:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3e:87:97:90:08:59:52:45:5f:dd:39:81:7f:2e:2f:4a:6b:
17:e7:2d:3f:b1:e0:96:e0:a9:71:df:69:fb:e8:83:39:69:7f:
da:64:ba:8a:99:a0:26:1c:75:9c:d9:c9:52:35:a7:86:aa:43:
9e:a1:d8:6e:3d:0c:16:89:6e:55:1c:71:d3:39:e3:8a:18:3b:
1d:3c:f3:d9:fc:8c:c7:0c:4d:b0:a3:78:33:54:c9:86:4d:39:
9e:f2:65:23:33:de:02:55:36:b5:f0:8d:21:8c:91:0c:a8:ce:
23:c3:c8:f3:dc:c5:94:63:d1:4c:f1:83:aa:ac:00:c2:b7:30:
27:a0:e5:44:89:46:82:ab:31:47:e5:9b:05:1a:4c:cf:a1:79:
76:e2:b2:f1:da:e2:6f:72:a3:e5:00:b0:c4:4d:53:27:d5:6f:
27:27:4d:1e:48:65:26:f3:29:a9:75:04:a4:72:41:14:0e:0f:
81:1c:e1:d1:09:a9:2f:cf:07:82:62:df:b2:52:ad:fa:58:51:
3f:06:88:bc:c1:76:3c:95:93:ad:d3:ba:36:6f:35:b3:53:97:
f4:cd:e6:a7:d5:f8:1e:ca:89:eb:31:cf:d2:6c:72:35:df:e7:
4c:c1:b7:25:b2:c9:ec:92:16:62:cb:74:ac:cf:60:c4:29:1e:
cf:5f:6d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:14:56 2025 by rpki-client