Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
File: SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft (raw, json)
Hash identifier: Mw1PZ1nBc3UBYz8aivOVoiEmIZlgQkiXuYhUs8+DCeM=
Subject key identifier: 85:45:01:84:C1:93:5F:EC:93:67:D2:CE:A4:0C:47:09:F9:C7:06:80
Authority key identifier: 49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8
Certificate issuer: /CN=4983e96ff270f4eca9701258081bb5cf818966c8
Certificate serial: 0194BD4E45D00D4A708B9E9D2D3BD630F1E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
Manifest number: 07
Signing time: Fri 31 Jan 2025 17:00:10 +0000
Manifest this update: Fri 31 Jan 2025 17:00:10 +0000
Manifest next update: Sat 01 Feb 2025 17:00:10 +0000
Files and hashes: 1: SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl (hash: mZ3SM/TXEY1w+SzjAa9FbhSYGC3cWC2Rey/3RIj5IM8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:45:d0:0d:4a:70:8b:9e:9d:2d:3b:d6:30:f1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4983e96ff270f4eca9701258081bb5cf818966c8
Validity
Not Before: Jan 31 17:00:10 2025 GMT
Not After : Feb 1 17:00:10 2025 GMT
Subject: CN=85450184c1935fec9367d2cea40c4709f9c70680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:96:ab:5d:a3:f2:e2:eb:c7:7b:e0:d2:3b:
bc:65:49:4b:87:6a:7c:6d:de:d7:d6:7d:5f:c8:5f:
b9:12:ab:02:94:cb:3b:f5:60:37:83:b9:67:5a:12:
c8:d0:b0:a0:b5:70:73:d6:d5:d8:da:ce:55:d3:40:
95:ce:1b:0e:77:49:f1:c8:90:71:85:cb:30:2d:b1:
6e:f3:5a:a6:8a:dc:f2:c9:52:bb:38:9b:64:95:c2:
19:58:e9:16:83:7a:6a:e0:ce:16:3b:af:18:1c:88:
6f:06:66:62:76:97:fc:71:e8:05:95:a2:b0:89:ba:
54:b4:ce:a6:7e:88:c7:07:fd:5b:fc:28:68:87:d7:
01:3e:6a:ff:c4:3b:6f:54:4a:d2:60:bc:11:1b:1c:
d4:1b:56:eb:82:74:e3:87:ed:6a:25:2d:2f:14:66:
62:3e:08:a2:73:4e:d2:e5:d2:3e:e0:eb:eb:60:60:
28:c2:28:76:fc:e4:f6:1c:72:f5:da:9c:40:a0:b8:
88:14:ab:f0:a6:48:0c:11:b9:07:e3:37:6c:cd:99:
23:52:61:d2:50:47:1d:30:13:62:2a:48:c9:4b:ca:
75:89:cb:c5:ad:bd:91:87:ac:ed:a3:b2:b0:fc:fc:
ba:21:36:72:4d:5d:a1:e3:0e:a3:df:51:7f:a0:50:
7d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:45:01:84:C1:93:5F:EC:93:67:D2:CE:A4:0C:47:09:F9:C7:06:80
X509v3 Authority Key Identifier:
keyid:49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:05:5e:d3:0b:2e:30:7c:53:c4:bd:89:d6:bf:a3:e4:3f:dc:
f9:9b:b5:03:5e:9b:ac:ff:a7:91:ff:86:67:b5:9f:6b:c2:56:
ec:e4:4e:8f:49:ff:58:ae:ac:19:b3:3b:c6:71:45:14:9c:2f:
61:01:39:7b:0b:df:b4:d1:00:4f:c2:f5:b3:48:d3:3f:3d:9b:
52:1a:ee:24:b7:d1:ac:15:bb:2f:6a:fd:9a:fa:b1:9e:24:96:
52:53:85:e2:e0:aa:2b:04:f9:91:87:a2:c1:94:4c:c4:ff:a5:
9e:18:3c:f3:d7:17:f4:76:10:03:91:2a:3b:0f:c3:5e:eb:a2:
da:f7:b2:18:fd:55:85:88:76:60:b8:7f:5a:de:7d:1e:fe:9d:
80:79:d5:89:ab:94:91:52:72:1f:85:66:d2:ea:93:8d:5d:e9:
4e:d9:ab:cc:6b:7b:95:48:76:d7:40:8f:12:87:ef:14:48:fe:
e1:1d:a4:46:53:36:3a:68:80:32:c0:64:c5:38:5b:b7:9e:e7:
7f:d7:a9:e1:4c:88:27:ba:d8:82:a3:46:c7:c2:f1:3f:27:c6:
08:98:83:8b:3b:57:06:c8:51:86:90:d3:5b:79:2e:83:ad:56:
9c:9f:1f:e5:27:f1:33:41:2d:d1:d4:8b:72:8b:36:47:66:b5:
e2:5a:18:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:36:01 2025 by rpki-client