Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/98e825-b58c-456e-af28-7b35a06ab54b/1/YQy4N7bSF3jkw9u5aWefDxxQtIo.mft
File: YQy4N7bSF3jkw9u5aWefDxxQtIo.mft (raw, json)
Hash identifier: lyNHeHAUA8puYZhH+7p3o1hEtADhUyZEwtCgADSZ94c=
Subject key identifier: E7:F7:4F:F7:AD:DA:E1:2F:CA:50:AB:A3:40:AA:E6:19:77:8D:A7:EE
Authority key identifier: 61:0C:B8:37:B6:D2:17:78:E4:C3:DB:B9:69:67:9F:0F:1C:50:B4:8A
Certificate issuer: /CN=610cb837b6d21778e4c3dbb969679f0f1c50b48a
Certificate serial: 0194BBCEDFD8ECF318671BF8A2ACECB4377B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQy4N7bSF3jkw9u5aWefDxxQtIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/98e825-b58c-456e-af28-7b35a06ab54b/1/YQy4N7bSF3jkw9u5aWefDxxQtIo.mft
Manifest number: 0C42
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: YQy4N7bSF3jkw9u5aWefDxxQtIo.crl (hash: Np9C8CEgli9x9dLhmlFL13sP+3kheoqO673NGSBwe8Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:df:d8:ec:f3:18:67:1b:f8:a2:ac:ec:b4:37:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=610cb837b6d21778e4c3dbb969679f0f1c50b48a
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=e7f74ff7addae12fca50aba340aae619778da7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0e:8c:54:d4:69:1e:28:a0:18:bb:85:d9:bf:
ea:d2:5f:af:14:48:86:f7:a4:da:59:2c:27:bc:bf:
16:db:6c:76:87:ba:57:6b:fa:b8:78:fd:72:4e:83:
13:81:ce:0a:09:14:65:fe:6f:ef:e5:a9:8e:a2:16:
69:62:58:f3:8a:16:15:c9:4d:be:38:a7:b4:a7:62:
7f:97:b5:b0:f8:cd:17:e6:f3:18:9e:ba:a1:29:d0:
f9:fc:ee:e4:b1:fe:f4:fe:bd:90:03:54:44:f7:c3:
b8:8a:6f:83:50:19:4c:7a:b2:d8:79:7a:93:eb:09:
26:ac:a9:46:3e:ee:8d:3d:69:61:f2:f1:bf:fa:2e:
30:65:2d:6d:bd:82:e9:27:01:a5:76:ed:d1:d9:6a:
7d:45:69:1c:8d:99:3f:ea:84:8d:f9:55:58:3e:93:
a0:1b:8b:35:4b:4d:b3:ed:7b:bb:85:d2:c6:58:3a:
59:ac:86:00:6d:43:6b:bf:bd:7d:76:49:b3:83:fc:
b4:e7:11:e4:5b:a4:1a:01:aa:24:1b:bf:50:84:83:
c8:57:dd:52:6d:ef:83:7d:8f:90:ce:47:80:bd:15:
be:d6:76:b6:05:74:66:f7:b3:08:9f:b5:4e:ac:53:
f5:72:30:e0:4e:bd:c0:05:93:de:46:24:76:1c:e0:
7a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F7:4F:F7:AD:DA:E1:2F:CA:50:AB:A3:40:AA:E6:19:77:8D:A7:EE
X509v3 Authority Key Identifier:
keyid:61:0C:B8:37:B6:D2:17:78:E4:C3:DB:B9:69:67:9F:0F:1C:50:B4:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQy4N7bSF3jkw9u5aWefDxxQtIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/98e825-b58c-456e-af28-7b35a06ab54b/1/YQy4N7bSF3jkw9u5aWefDxxQtIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/98e825-b58c-456e-af28-7b35a06ab54b/1/YQy4N7bSF3jkw9u5aWefDxxQtIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e1:8d:0c:33:54:67:2b:ff:49:fb:ed:77:a8:7a:79:47:65:
61:3e:78:7d:e7:27:a3:f3:c5:08:94:12:0f:25:b5:55:81:7c:
4c:05:5d:5b:de:10:98:e4:9c:f0:c1:dc:1a:b9:ea:98:1e:92:
81:1c:f1:7f:d0:dc:92:eb:13:d4:52:6a:cf:65:ce:30:64:e8:
15:0f:0a:12:54:16:5d:58:e6:32:19:50:b5:c1:f5:a8:b2:6a:
27:03:30:c7:ef:07:c3:47:32:93:77:1f:a9:2a:9e:e9:b4:9d:
71:ae:fd:ef:28:8b:62:ae:b7:db:12:8a:77:c6:c4:62:0e:f5:
8c:ec:52:41:35:a2:c4:55:1f:d7:5c:75:13:08:1d:4a:e6:a5:
cc:80:76:e4:50:3f:fa:43:f5:3e:7f:0c:d1:19:25:9d:b7:7b:
ea:a3:cc:4e:51:c6:03:b7:70:f5:1c:53:cc:d4:fc:d5:05:d5:
bf:6c:72:10:3b:ff:0b:25:bd:4d:9e:c8:8f:9f:dc:69:bf:6c:
36:f3:7e:cf:ec:94:87:7f:55:b6:e8:fe:6e:18:2c:e1:6a:9b:
5e:0d:98:c9:af:ea:55:3f:c9:04:b0:9a:03:48:5e:02:ce:a4:
4d:9c:ff:b3:0f:79:af:d5:dc:35:db:7e:59:a3:54:2a:1f:9e:
a3:81:ab:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:20:29 2025 by rpki-client