Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
File: CYYD8NRKkgRDOKLK3xiegQHDv18.mft (raw, json)
Hash identifier: qiW+5ts+zrkcGvMTijJiltlBlOIlFaf1+z+yB1+oGLI=
Subject key identifier: 68:ED:1A:CE:C0:5C:8B:96:B1:A9:24:A4:C5:7C:A7:DF:A4:66:1B:67
Authority key identifier: 09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
Certificate issuer: /CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Certificate serial: 0194BBCE2C9B480FA6982AD3BF35558D254A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
Manifest number: 0AF5
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: CYYD8NRKkgRDOKLK3xiegQHDv18.crl (hash: eE75QRkukV/LK4tZXizEA4XB/zSVs5PG2bnRTqGMXEc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2c:9b:48:0f:a6:98:2a:d3:bf:35:55:8d:25:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=68ed1acec05c8b96b1a924a4c57ca7dfa4661b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d9:2e:01:38:df:7e:2a:90:45:15:38:76:9e:
90:cb:99:74:13:88:22:ae:1d:e0:64:5e:f7:6a:4c:
95:3e:a6:2a:14:e8:04:a4:b1:ac:a2:92:8d:7e:19:
90:fe:db:07:c3:88:64:de:2b:09:f2:c5:eb:cf:d3:
b4:1a:b3:e6:fe:54:df:99:fc:e8:a1:c5:b8:00:56:
cf:64:ef:82:c5:aa:5c:51:3a:69:fc:7b:b3:12:ff:
27:4e:5b:b3:77:0b:13:65:82:70:b5:32:6f:54:19:
e1:37:17:2d:89:18:33:4b:27:28:40:7f:1e:33:cd:
2b:fa:d0:71:c9:35:cc:e5:87:84:1e:cf:de:cc:cb:
d9:28:95:0b:1c:21:65:20:4f:c2:01:6c:bc:3c:2c:
be:c9:a2:6e:12:40:64:2a:94:3c:58:04:dc:9f:8b:
95:02:0f:0f:28:11:83:ba:b5:95:a9:13:0a:7b:95:
57:a9:d2:22:6f:2c:ff:02:1d:7c:13:6f:80:8e:4e:
82:8b:b9:0e:09:d2:e9:41:91:c2:b6:63:13:61:6a:
3e:02:de:2c:0a:5a:d9:a6:00:17:54:2c:01:90:8d:
5d:96:01:21:43:79:1d:7c:c9:69:79:b5:08:cf:a9:
60:56:c3:6f:db:34:42:bd:3d:f1:10:c5:a2:d6:a3:
3f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:ED:1A:CE:C0:5C:8B:96:B1:A9:24:A4:C5:7C:A7:DF:A4:66:1B:67
X509v3 Authority Key Identifier:
keyid:09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:34:76:4c:27:94:14:92:d6:e2:c4:db:7f:b1:98:1e:ad:6f:
89:ba:88:c2:70:9d:8d:19:f8:50:55:f7:a7:87:73:58:ea:0d:
55:66:e0:f4:0d:45:81:32:35:fa:e9:52:43:23:65:a0:f7:8a:
26:e1:dc:ad:8d:6a:bf:4a:8d:ad:6d:c6:85:a1:cf:0f:a3:61:
f5:45:f1:66:b8:26:4f:7f:d7:4b:5a:cc:a9:c7:4d:1f:1f:3c:
62:41:27:c3:6f:32:88:d6:07:8f:3e:10:27:08:bb:d4:dd:b2:
e0:4b:a7:54:3b:6f:e3:66:65:b3:c4:ea:de:1a:92:04:a2:d0:
a5:1c:79:9a:7f:f8:cc:5c:57:ad:37:cf:11:e0:c8:3f:d4:1b:
f4:2b:54:29:b5:6e:f1:33:d7:2b:ba:50:6e:12:ad:fc:15:c8:
cd:5d:80:c0:17:7b:48:23:c1:71:a0:28:42:a6:cf:95:0a:d4:
aa:02:45:b1:45:6e:73:8e:38:9a:88:db:33:8c:15:91:e5:57:
2f:9f:e0:f7:a1:f2:c2:59:6f:2e:31:e9:d9:0d:a6:e8:33:d2:
5e:64:ed:3e:29:8b:9f:6c:c0:c4:72:b4:6b:71:b6:3a:b6:30:
b9:52:98:a1:4a:a7:dd:da:d2:fc:35:f6:de:e3:05:a8:89:d2:
fc:92:cb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:33 2025 by rpki-client