Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8ea881-dce2-4066-8508-12c349e39d9a/1/yz65T8gixYUUKHlA6NzdwEGw41k.mft
File: yz65T8gixYUUKHlA6NzdwEGw41k.mft (raw, json)
Hash identifier: rfAPeEdn4X5KtW8vKIFxQE58K/LMmch5yzjfIygAGh8=
Subject key identifier: 05:7F:E7:DA:42:19:10:A8:2E:AE:20:E6:3A:FC:DB:4B:AC:32:F2:FD
Authority key identifier: CB:3E:B9:4F:C8:22:C5:85:14:28:79:40:E8:DC:DD:C0:41:B0:E3:59
Certificate issuer: /CN=cb3eb94fc822c58514287940e8dcddc041b0e359
Certificate serial: 0194BD17BFB41DBA7D325E2D9A7BD1AD3003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yz65T8gixYUUKHlA6NzdwEGw41k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8ea881-dce2-4066-8508-12c349e39d9a/1/yz65T8gixYUUKHlA6NzdwEGw41k.mft
Manifest number: 0E53
Signing time: Fri 31 Jan 2025 16:00:37 +0000
Manifest this update: Fri 31 Jan 2025 16:00:37 +0000
Manifest next update: Sat 01 Feb 2025 16:00:37 +0000
Files and hashes: 1: yz65T8gixYUUKHlA6NzdwEGw41k.crl (hash: 56WBpw6EY99BwNgaMNZAj9xcb/cW+evj7dNIGpD9yXk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:bf:b4:1d:ba:7d:32:5e:2d:9a:7b:d1:ad:30:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb3eb94fc822c58514287940e8dcddc041b0e359
Validity
Not Before: Jan 31 16:00:37 2025 GMT
Not After : Feb 1 16:00:37 2025 GMT
Subject: CN=057fe7da421910a82eae20e63afcdb4bac32f2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:58:11:6e:5e:0d:f9:8c:c1:5e:b8:61:94:
02:57:a1:c1:3c:22:5b:f1:5f:3b:17:15:50:44:f2:
54:46:34:0e:ed:f2:4c:92:37:58:ff:e1:13:7f:c9:
ec:2f:e1:e6:47:a8:d8:41:c3:47:00:b4:39:a9:3b:
f5:f4:a4:22:0b:8f:da:a8:c5:5b:72:ad:a4:81:b7:
52:7a:1c:42:09:2f:92:ad:f4:05:6e:3a:2e:a0:fa:
ee:61:a9:fa:71:48:b9:a5:92:74:4b:5c:84:f5:38:
3c:a6:89:a4:5e:12:c1:08:e3:d8:d3:33:d7:4b:a4:
d1:3b:c9:45:a0:db:e2:95:fa:28:4d:a3:7f:3a:b9:
5f:1f:3c:8c:b3:72:aa:ea:1e:eb:44:68:ad:ee:85:
34:5a:05:e0:d9:92:a1:4c:bd:1a:50:d7:14:00:d7:
a3:c6:c4:12:60:68:08:04:63:61:b6:83:1a:11:dd:
8f:b5:28:82:e0:e5:00:5b:d4:26:c7:e2:fa:2c:31:
96:ae:6a:9f:0d:ad:81:20:72:57:ef:6c:f3:22:37:
76:3c:26:c4:a3:15:49:16:a7:9f:39:98:ab:db:0f:
3d:64:d7:61:3d:cd:3a:16:f4:a6:a9:98:a5:39:83:
c2:32:3f:06:f9:15:ea:6d:dd:f6:2d:30:36:6c:d6:
95:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7F:E7:DA:42:19:10:A8:2E:AE:20:E6:3A:FC:DB:4B:AC:32:F2:FD
X509v3 Authority Key Identifier:
keyid:CB:3E:B9:4F:C8:22:C5:85:14:28:79:40:E8:DC:DD:C0:41:B0:E3:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yz65T8gixYUUKHlA6NzdwEGw41k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8ea881-dce2-4066-8508-12c349e39d9a/1/yz65T8gixYUUKHlA6NzdwEGw41k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8ea881-dce2-4066-8508-12c349e39d9a/1/yz65T8gixYUUKHlA6NzdwEGw41k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6f:e5:f7:d8:51:4f:d5:b4:2b:cc:ef:e9:e1:4f:08:27:37:
68:ab:9c:00:20:1d:85:1b:d9:81:00:d1:b4:47:b2:e9:f9:d1:
f5:8f:e7:1c:cd:b4:75:0f:83:35:f0:39:ca:f8:03:ad:c8:d9:
3c:04:eb:7f:2e:ba:19:a5:05:33:9c:ef:c3:5b:93:30:93:52:
13:1e:8a:31:de:da:30:63:37:cd:7f:2d:8a:18:56:e3:42:f4:
6b:b7:13:60:c2:45:62:7a:a8:6b:97:50:79:7d:8f:74:11:cf:
2e:aa:28:93:55:44:62:f9:e9:db:1d:ab:96:2e:85:4a:59:ab:
13:20:7f:7e:fc:af:b1:c0:fa:89:b6:ff:f7:05:52:11:82:40:
5d:c1:02:66:5c:36:05:85:04:d4:d7:e2:34:6b:37:23:b7:9d:
41:46:f9:75:63:be:a3:ac:9c:e2:8c:b5:84:fe:d7:de:f8:6b:
00:c8:cf:ef:2c:e8:0c:de:5a:5a:e7:02:15:91:ad:7f:6b:c8:
76:b7:89:d8:f9:b1:1a:ed:0a:1c:86:b0:eb:4e:56:11:8e:fc:
1b:36:07:70:3c:41:a5:52:f2:2f:3f:ff:89:84:89:cb:75:a1:
62:8e:ae:aa:ec:c8:b0:f0:59:1e:21:ea:13:6e:5c:dc:14:1a:
50:54:16:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:15:00 2025 by rpki-client