Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
File: 0YIiY6hwfHbz2ztr5xIiacgnrlU.mft (raw, json)
Hash identifier: 3PxRjX/joA2jbwYyz48zdFTWNag0pMsuG0RZrpEJ+a0=
Subject key identifier: BD:55:E6:F9:C1:B3:54:B9:5D:25:09:1E:5E:89:B0:05:B2:32:ED:DE
Authority key identifier: D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
Certificate issuer: /CN=d1822263a8707c76f3db3b6be7122269c827ae55
Certificate serial: 0194BBCDBD3AC4285F0B293DACC77E85AD20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
Manifest number: 09AE
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: 0YIiY6hwfHbz2ztr5xIiacgnrlU.crl (hash: 8K3Xfx0PRr5ZLJIW7u/ICIPvoqceFKwvbiNSpXRQ7Io=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bd:3a:c4:28:5f:0b:29:3d:ac:c7:7e:85:ad:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1822263a8707c76f3db3b6be7122269c827ae55
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=bd55e6f9c1b354b95d25091e5e89b005b232edde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8b:b1:0c:6f:2d:4c:08:e2:d0:fe:59:8d:48:
e8:b6:6a:06:0d:33:89:b5:08:01:3e:ec:f4:01:a2:
f4:98:89:51:2e:88:7b:39:15:39:4b:5a:59:d5:5a:
5b:d1:c1:1d:04:e4:76:8d:fd:5e:38:34:7c:cc:b9:
b4:48:51:20:70:d9:a3:6a:e8:7d:a7:f8:09:81:8e:
32:c1:31:04:5b:27:80:fc:a8:b5:3e:98:39:4e:8a:
e2:3b:d4:8f:8e:90:5e:16:72:8f:07:39:39:48:5b:
e4:d7:82:6f:7c:75:9e:5c:dc:55:b7:3e:78:e3:21:
3f:42:af:a5:b9:d8:ec:71:75:a7:db:87:c8:b5:2a:
40:12:64:13:60:1b:27:1a:d4:0c:f9:74:98:01:93:
e8:89:2d:57:78:0b:85:f1:3c:3f:b7:18:66:e6:7c:
9b:65:5a:9a:7e:0c:ce:eb:2b:5c:5f:1c:7d:3f:49:
14:56:c2:c3:19:dc:cc:73:f6:3c:40:c7:82:dd:17:
bd:ba:43:d0:12:6c:e4:c3:3f:d8:6b:52:31:26:ce:
02:c3:49:1c:1c:28:16:a4:07:ee:d6:98:02:9d:92:
7b:f0:ff:48:99:03:b4:70:84:83:67:1d:a3:4d:1d:
2a:3a:0a:1a:ea:84:e4:4c:19:d4:82:9a:d1:bd:d0:
ee:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:55:E6:F9:C1:B3:54:B9:5D:25:09:1E:5E:89:B0:05:B2:32:ED:DE
X509v3 Authority Key Identifier:
keyid:D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:48:12:d1:a4:82:a8:d5:28:8a:ec:5b:10:d4:4e:0c:65:eb:
4c:a6:4d:12:e9:8c:0e:28:c1:de:30:8a:ff:af:22:22:84:f7:
ba:a1:64:b5:7d:00:59:f6:cb:ce:a7:11:d7:0f:f4:76:71:36:
80:05:ee:b0:8b:18:12:da:74:e8:53:ad:6b:d7:fc:4f:93:30:
5e:ae:d8:3c:88:ba:57:57:93:e5:30:cc:f6:73:6d:18:b7:80:
32:df:1f:55:13:fc:ec:e6:03:d2:2e:85:14:0c:88:f0:48:46:
62:9d:6b:09:21:e7:fb:08:fe:38:4a:ee:7a:62:04:22:83:ed:
a7:8f:6f:63:9d:5d:7c:f6:37:c8:62:ad:c6:c1:9f:14:4c:a6:
80:ff:51:c5:d0:b3:ea:c4:6c:fc:5b:f9:23:d5:ef:57:7f:a2:
05:b6:e6:26:80:00:f3:a7:ac:a1:e0:5b:88:4e:e9:96:24:1e:
6a:bc:bc:a9:3a:3c:ad:98:ac:53:c1:d0:b2:8e:1a:cc:7f:3d:
de:fe:23:3e:7e:ef:9b:31:cf:dc:bb:ff:d2:75:7e:81:5b:c8:
08:9b:ce:94:c9:6e:01:fd:74:c5:01:57:18:53:76:e8:03:2b:
24:f7:79:23:69:d5:94:18:fc:56:f1:7c:6f:67:b7:3b:06:ae:
f4:58:f3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:41 2025 by rpki-client