Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft
File: YDe79svKAic6peIbuIjj4exnZ98.mft (raw, json)
Hash identifier: tbg97KYuhRYuI57SBjbSSNzXj/xq5BEa1D389p7OuoU=
Subject key identifier: 90:25:75:1F:E7:BA:77:D3:92:FC:C2:F6:09:0E:88:E6:42:AA:AC:96
Authority key identifier: 60:37:BB:F6:CB:CA:02:27:3A:A5:E2:1B:B8:88:E3:E1:EC:67:67:DF
Certificate issuer: /CN=6037bbf6cbca02273aa5e21bb888e3e1ec6767df
Certificate serial: 0194BBCE454D17A85FD84F01E82965D11732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDe79svKAic6peIbuIjj4exnZ98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft
Manifest number: 094B
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: YDe79svKAic6peIbuIjj4exnZ98.crl (hash: Z6FkFl//z7kyK/cIZrTbKalAy+3I0tSZ8TeoQQQFEnk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:45:4d:17:a8:5f:d8:4f:01:e8:29:65:d1:17:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6037bbf6cbca02273aa5e21bb888e3e1ec6767df
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=9025751fe7ba77d392fcc2f6090e88e642aaac96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:16:82:92:98:91:bf:65:c1:7a:9b:c5:77:ed:
5b:8f:b0:56:ce:a3:a6:03:e9:3f:5d:82:60:d0:98:
56:75:2e:03:5f:18:4d:34:43:d0:c3:b5:5c:8c:2d:
01:8d:30:31:d9:6a:32:9f:b8:66:6c:05:60:99:0f:
d7:2d:b6:4c:8d:8c:5f:e8:23:2c:85:2e:8d:6b:f3:
79:02:f4:9e:ad:cd:a6:1c:ec:59:ca:8e:81:fe:09:
4f:eb:1d:af:aa:bb:29:89:ad:b7:27:3d:00:ee:fb:
5e:4f:8a:2e:c6:ae:65:f4:df:4e:d8:70:fb:44:b4:
4c:16:15:6c:50:40:b3:d6:24:45:ce:00:ff:ab:ce:
1c:e1:0f:b2:df:c8:73:29:46:8f:cd:f8:fb:74:c4:
20:7f:e5:e1:74:16:1a:60:1d:c4:d3:87:f6:3e:71:
7d:a5:59:95:b4:49:4a:e2:ea:a7:88:e5:c4:14:9a:
4e:79:9d:be:28:7d:47:62:e1:fc:78:20:7b:51:5a:
f9:17:05:4c:24:ad:22:b5:4a:06:aa:d7:26:0e:c5:
64:8d:3a:9a:f0:69:59:a2:82:53:42:2f:73:18:02:
78:9a:2f:2e:7e:36:3f:76:f7:c7:ac:a8:f0:32:29:
97:c0:cb:ef:3e:c1:ab:42:92:cf:1e:58:b1:65:bc:
e7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:25:75:1F:E7:BA:77:D3:92:FC:C2:F6:09:0E:88:E6:42:AA:AC:96
X509v3 Authority Key Identifier:
keyid:60:37:BB:F6:CB:CA:02:27:3A:A5:E2:1B:B8:88:E3:E1:EC:67:67:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDe79svKAic6peIbuIjj4exnZ98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:48:1f:2a:b6:67:a0:2f:25:18:23:53:46:44:f4:6d:c7:2d:
63:11:d7:9a:ac:8f:21:0b:b3:9d:0c:29:2d:26:91:82:b8:d9:
f9:46:93:40:99:48:e3:6c:d9:90:a2:55:5c:60:cd:89:37:14:
9a:2d:53:8e:09:3a:09:b3:60:8e:de:f4:2c:98:7b:14:9e:d9:
02:77:88:f3:e8:6b:35:1b:23:66:fb:cd:f6:4b:e1:cc:04:e0:
42:09:ad:12:0e:bd:e3:bc:e5:4d:a4:2b:e0:06:ee:ca:e8:b0:
dd:0c:40:08:0a:1a:90:82:2f:47:bc:87:8f:21:50:8a:70:31:
e9:8a:48:c6:60:26:52:e5:0b:69:0d:7f:71:92:c2:84:49:f5:
a7:b3:f1:b4:d9:6e:d0:cb:8c:e4:01:ee:34:f7:58:4d:6b:82:
5a:ce:b8:f0:34:8c:6c:f1:7a:11:53:f3:89:50:ae:b9:5a:54:
fb:4d:81:c6:18:23:1c:22:22:79:15:d6:f1:b5:b7:a9:98:b6:
03:b8:00:e6:e7:18:07:4c:1f:72:0e:31:86:a2:e7:01:49:8b:
cc:95:66:06:b2:23:73:1f:a8:39:9b:e0:72:43:7e:20:e8:95:
a5:fc:83:2e:01:ec:5e:e3:ea:c1:c9:25:56:09:b9:0f:e6:57:
cc:76:c1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:28 2025 by rpki-client