Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c9234d-e133-4194-84ac-71a39db88a23/1/YhcForItk4GoI8l5xvTnc0I1I20.mft
File: YhcForItk4GoI8l5xvTnc0I1I20.mft (raw, json)
Hash identifier: 1HR2F5qdHyZOKSqpxSD2c5BqUyiGEUGOwrmow2FBwNY=
Subject key identifier: 65:6B:A8:FD:F2:77:B7:DC:70:E1:0E:CF:8C:24:AF:55:06:CB:82:D6
Authority key identifier: 62:17:05:A2:B2:2D:93:81:A8:23:C9:79:C6:F4:E7:73:42:35:23:6D
Certificate issuer: /CN=621705a2b22d9381a823c979c6f4e7734235236d
Certificate serial: 0194BCA9F6E81B791A129C747CB493CFA9C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhcForItk4GoI8l5xvTnc0I1I20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c9234d-e133-4194-84ac-71a39db88a23/1/YhcForItk4GoI8l5xvTnc0I1I20.mft
Manifest number: 0D0C
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: YhcForItk4GoI8l5xvTnc0I1I20.crl (hash: HENDplPYo+0nhCx4IPiJc52OALRJOM+tih0WdbvrO1I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f6:e8:1b:79:1a:12:9c:74:7c:b4:93:cf:a9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621705a2b22d9381a823c979c6f4e7734235236d
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=656ba8fdf277b7dc70e10ecf8c24af5506cb82d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:91:1c:08:41:8a:77:f6:26:41:75:6d:0a:fb:
d6:22:e1:b7:ab:91:d9:68:13:a4:e2:22:4f:95:92:
bd:b4:99:97:a1:16:73:93:ef:16:b5:db:bd:8b:80:
89:6c:e6:1d:09:5b:2e:b7:e3:27:ce:51:96:5a:cc:
8c:6e:7a:13:ad:56:cd:5b:e4:b9:fb:94:68:47:9a:
03:7d:11:8b:8d:9b:da:87:0d:19:a8:e5:38:43:9c:
bd:2b:6e:ea:04:c1:36:bd:5f:40:69:e2:16:bb:08:
81:a6:3d:ec:bc:0b:8c:f9:2d:62:fa:35:08:ef:dc:
18:33:67:c8:95:64:a1:7f:6c:6e:62:d4:fc:fe:92:
47:43:69:0c:22:56:7f:88:7e:13:1a:bc:16:3d:89:
19:49:db:22:21:0a:d3:8a:26:78:71:f6:18:a4:97:
9c:64:cd:a6:3a:87:e0:45:e2:12:ee:ae:3d:a4:c5:
50:84:f2:10:83:f5:57:46:09:4a:f6:d2:3c:6a:3b:
0a:f4:ff:30:7f:a2:50:38:01:33:29:90:9e:56:4b:
5a:7a:17:00:c8:0c:0f:73:1b:56:cc:7c:4f:cd:d8:
0b:3b:ab:a7:02:38:28:a4:1a:72:12:cb:01:da:ef:
8f:d4:81:4b:05:de:a2:e3:c3:89:d2:30:b2:27:19:
29:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6B:A8:FD:F2:77:B7:DC:70:E1:0E:CF:8C:24:AF:55:06:CB:82:D6
X509v3 Authority Key Identifier:
keyid:62:17:05:A2:B2:2D:93:81:A8:23:C9:79:C6:F4:E7:73:42:35:23:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhcForItk4GoI8l5xvTnc0I1I20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c9234d-e133-4194-84ac-71a39db88a23/1/YhcForItk4GoI8l5xvTnc0I1I20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c9234d-e133-4194-84ac-71a39db88a23/1/YhcForItk4GoI8l5xvTnc0I1I20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:87:61:82:4f:ce:d0:7c:25:d8:76:1c:74:c3:f4:37:86:e3:
58:e2:49:2d:c1:7c:9f:93:df:0b:36:dc:fb:72:f0:6d:6d:ca:
cb:bd:80:05:55:32:fe:0a:12:25:ca:fe:e2:a1:46:25:07:3e:
58:d8:3b:0b:b3:bd:25:40:db:75:15:e3:68:52:7d:3d:14:9c:
14:07:44:ab:9e:be:47:84:d9:83:92:67:9b:d8:5f:ae:c3:80:
ea:5c:8c:cd:05:51:bf:83:14:fa:7a:73:a9:5d:fd:19:ce:7b:
5b:74:9e:a1:43:7f:77:cc:1c:77:ca:b5:4a:a6:e6:42:fc:d0:
9b:ff:8c:12:c7:e6:8f:bd:35:db:07:9c:66:ec:4f:9c:94:a5:
35:6a:ca:b8:26:bc:af:e8:d3:1f:3e:89:f4:cb:cf:64:29:5a:
28:a9:7d:b8:43:99:13:04:f2:cc:b4:2d:1d:71:87:38:ad:0e:
47:5f:82:04:45:c2:1b:af:05:52:32:75:2c:1f:5f:ec:1d:f6:
8e:e2:d7:82:82:cc:8a:4a:15:b9:ef:fb:1c:9d:f5:c0:9f:57:
0b:66:19:61:10:8c:4e:1b:d8:0d:5c:63:cf:06:3d:34:e3:c7:
44:8c:81:1f:2b:fa:c9:9a:d6:67:6b:63:4b:22:f8:bc:38:52:
15:6e:ea:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:02 2025 by rpki-client