Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6801c9-dd17-4dca-8100-6a3f01d9cb50/1/YKQ0_Wv_i2-7DVL42kLpH4paKS8.mft
File: YKQ0_Wv_i2-7DVL42kLpH4paKS8.mft (raw, json)
Hash identifier: r0rSYOUOX4MNhEyYIRAlcTSU0sylHxo5eAr8H0mUp0Y=
Subject key identifier: D2:D4:C4:B9:01:77:0E:AA:59:69:E6:BB:B8:A0:4F:64:1F:D9:3C:5A
Authority key identifier: 60:A4:34:FD:6B:FF:8B:6F:BB:0D:52:F8:DA:42:E9:1F:8A:5A:29:2F
Certificate issuer: /CN=60a434fd6bff8b6fbb0d52f8da42e91f8a5a292f
Certificate serial: 0194BD17A78B916A09CE33D04D9E5E92AC89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKQ0_Wv_i2-7DVL42kLpH4paKS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6801c9-dd17-4dca-8100-6a3f01d9cb50/1/YKQ0_Wv_i2-7DVL42kLpH4paKS8.mft
Manifest number: 05C4
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: YKQ0_Wv_i2-7DVL42kLpH4paKS8.crl (hash: q0i/j8Jg8v3yN50QZdwLvLeITr59I3t45wglQtt1+3I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a7:8b:91:6a:09:ce:33:d0:4d:9e:5e:92:ac:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a434fd6bff8b6fbb0d52f8da42e91f8a5a292f
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=d2d4c4b901770eaa5969e6bbb8a04f641fd93c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b3:ed:19:af:e8:21:54:ff:da:82:63:10:c4:
25:8e:fb:f1:e5:39:f9:8e:77:5b:ff:2b:32:11:30:
41:b4:01:19:6c:6b:61:17:52:8b:7c:36:50:15:32:
45:cd:18:8f:24:a4:1e:b3:d1:47:03:61:ca:3a:4b:
43:22:84:9c:eb:7a:19:44:61:c7:e2:3b:8c:b6:35:
23:35:c4:49:97:bb:86:6b:45:44:e0:f4:27:c5:d7:
b1:4b:7f:18:1e:35:55:1e:ed:2f:4e:44:61:89:f3:
5c:24:e9:e6:4a:7e:92:92:2e:66:01:1f:02:e1:67:
7e:69:fe:8b:28:11:51:a3:f5:9a:f1:c2:bc:2d:8b:
ee:3e:0d:f1:5a:b3:69:7b:46:4e:96:dd:b2:06:85:
d1:98:1c:44:92:55:a9:f2:1a:ae:96:7d:c3:19:f2:
5f:26:6d:c7:4b:d4:f0:cf:a3:1e:99:a1:a5:33:45:
0a:f3:5f:05:22:e5:24:76:83:81:1a:ff:48:d1:f3:
ff:95:b6:d8:c2:d5:ab:9f:46:38:3d:30:1e:ae:23:
0e:a5:be:0c:a1:68:39:e8:69:80:4b:9f:41:70:0f:
ee:1c:23:2e:60:c0:b2:9f:2b:f1:41:c6:2e:d5:02:
fb:e5:23:4d:f2:98:ec:e4:3c:0a:48:88:c1:cf:8f:
13:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D4:C4:B9:01:77:0E:AA:59:69:E6:BB:B8:A0:4F:64:1F:D9:3C:5A
X509v3 Authority Key Identifier:
keyid:60:A4:34:FD:6B:FF:8B:6F:BB:0D:52:F8:DA:42:E9:1F:8A:5A:29:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKQ0_Wv_i2-7DVL42kLpH4paKS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6801c9-dd17-4dca-8100-6a3f01d9cb50/1/YKQ0_Wv_i2-7DVL42kLpH4paKS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6801c9-dd17-4dca-8100-6a3f01d9cb50/1/YKQ0_Wv_i2-7DVL42kLpH4paKS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:dd:04:92:37:67:62:13:02:7c:2a:77:83:1e:b8:97:27:82:
c6:3b:18:e5:94:ac:7c:9f:7f:79:04:53:9c:6d:a7:58:56:4b:
63:4b:a6:4d:c7:13:71:10:e9:a8:35:59:d8:43:de:16:92:38:
1c:cc:60:1b:18:d4:bf:40:44:27:69:f8:e1:e3:a4:f0:8b:fa:
38:ca:a2:26:8e:72:0d:ea:1b:f0:36:57:5b:66:63:30:ac:6d:
c8:71:ea:96:cd:cc:3b:71:6c:ac:b8:75:91:ac:9a:46:01:3f:
36:dd:10:a3:0c:b9:b3:59:3d:fd:a9:73:71:7a:b5:e7:be:25:
5a:73:13:bf:16:3a:bb:c5:c4:85:fe:57:ed:5b:51:23:29:04:
13:5f:7f:8f:d6:57:b6:0f:65:c0:b3:d3:69:9c:92:18:c3:65:
d5:25:6d:0c:dc:86:04:68:e9:53:6c:1f:98:ad:a4:f6:6e:b9:
59:53:21:1a:b7:29:e5:b7:72:49:85:60:34:72:15:fb:77:87:
23:8b:b8:06:42:57:9e:96:37:f9:d7:9e:8d:92:db:fd:c5:de:
30:7f:19:2a:ee:d8:98:45:ef:3a:1b:49:24:c1:ec:61:68:62:
0a:12:40:53:21:39:e3:92:35:18:90:4f:1c:0c:d3:bd:b0:49:
f5:61:0a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:54 2025 by rpki-client