Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
File: YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft (raw, json)
Hash identifier: EUF62nHxZ2/3Ix/5J/Shc5/frTk94o0GoS2bHPi8WLM=
Subject key identifier: 7A:C8:A2:B5:4F:03:44:80:F1:9C:5F:46:C3:6D:4C:08:74:24:64:47
Authority key identifier: 60:0B:11:3E:06:2D:17:EA:23:08:06:B3:4A:21:DE:B5:62:7B:67:74
Certificate issuer: /CN=600b113e062d17ea230806b34a21deb5627b6774
Certificate serial: 0194BBCE6FECD8C5E0F675219ED09B662A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
Manifest number: 10A7
Signing time: Fri 31 Jan 2025 10:00:55 +0000
Manifest this update: Fri 31 Jan 2025 10:00:55 +0000
Manifest next update: Sat 01 Feb 2025 10:00:55 +0000
Files and hashes: 1: YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl (hash: DsEBfBJ7AcywNWvFJOltzogmUTi+niWXBignfRjw9VI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6f:ec:d8:c5:e0:f6:75:21:9e:d0:9b:66:2a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600b113e062d17ea230806b34a21deb5627b6774
Validity
Not Before: Jan 31 10:00:55 2025 GMT
Not After : Feb 1 10:00:55 2025 GMT
Subject: CN=7ac8a2b54f034480f19c5f46c36d4c0874246447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dd:59:67:83:58:60:f8:c6:5b:e7:75:28:2c:
ac:03:86:e5:7e:6d:8a:e6:40:1a:46:7d:85:2a:f9:
ac:16:19:72:e3:87:ba:ce:6f:81:4c:57:fa:48:91:
66:4e:f4:07:8c:c4:0f:6c:d0:d6:ea:c5:bb:7d:12:
63:50:81:34:27:52:00:06:c4:bb:4d:cf:d2:5e:bf:
1b:46:a9:5b:c0:90:38:d9:1c:ea:9b:5c:18:58:77:
af:75:5b:15:3f:00:03:d0:b4:c5:49:97:d2:cc:66:
f2:1e:1a:13:f6:7a:e5:01:39:03:dd:5c:4c:f5:23:
7c:8e:13:c4:2f:0d:77:97:63:66:20:39:99:2a:18:
dc:9b:01:15:fc:dd:1a:ba:37:47:44:44:9e:59:17:
aa:22:fb:14:89:07:c3:9a:ec:34:39:0b:14:05:68:
e2:64:e2:f7:f3:ae:85:73:e3:c3:84:67:69:fd:62:
f5:6d:40:9f:25:02:ab:50:36:3c:84:dc:ad:17:75:
f4:cd:00:9b:50:ee:52:e4:16:4f:e6:09:08:95:02:
75:de:2b:7a:d7:1b:04:c0:03:62:99:49:ed:92:b6:
00:99:fd:25:4f:96:e3:09:0f:51:f1:a7:16:69:14:
94:e8:97:6f:c7:57:1a:1e:8b:b0:a5:47:51:aa:f2:
41:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C8:A2:B5:4F:03:44:80:F1:9C:5F:46:C3:6D:4C:08:74:24:64:47
X509v3 Authority Key Identifier:
keyid:60:0B:11:3E:06:2D:17:EA:23:08:06:B3:4A:21:DE:B5:62:7B:67:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5f:90:31:59:36:db:72:4a:8b:12:e0:dc:fb:a2:fc:ef:38:
a8:49:8c:44:d1:b3:a3:bd:a9:b2:ba:00:1d:0b:e2:6e:25:8c:
ce:d9:64:99:d7:eb:a9:32:d8:d2:00:d8:35:09:a0:fe:03:21:
3d:7b:06:5b:e1:fe:44:07:33:62:ec:fc:48:b6:68:f1:96:02:
a7:48:c3:6e:45:d5:d7:26:a9:ae:a5:a5:83:4a:bd:80:70:37:
be:23:68:5a:85:2e:55:59:64:82:2a:82:3c:39:9f:e1:52:45:
61:25:14:20:58:d1:5d:d3:9d:22:50:dd:25:c7:3b:75:cc:97:
b3:91:c6:79:68:d7:39:c2:00:f0:e6:5f:af:e0:09:01:35:f7:
ad:30:61:bc:ea:db:8c:c7:54:15:2c:ba:91:2f:9d:56:c7:30:
ec:fc:b9:7b:58:97:3f:a7:4b:2e:3f:50:a8:cb:6f:14:6d:77:
6c:37:be:51:8a:16:aa:92:50:dd:04:b7:f0:13:27:79:c1:a4:
46:5a:39:a0:03:ff:4c:4d:ac:01:43:9a:2f:e8:06:d4:2f:07:
d6:5e:56:63:ae:bf:2b:81:3d:09:bb:e6:ee:d3:31:ab:e6:6c:
18:b6:e9:b6:7f:0e:46:9f:ec:ed:e7:69:e0:f1:8a:a5:f6:c2:
b8:cd:b6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:51:54 2025 by rpki-client