Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/8b9066-2ea7-4204-a84a-e3e8a98c2168/1/jYzDMwiBzYyjntYJ_-GENySyqaw.mft
File: jYzDMwiBzYyjntYJ_-GENySyqaw.mft (raw, json)
Hash identifier: ktpUP1ro/wOyVC8MIL+p/ouNUAn/h4IYFAPxnEu7Z8Y=
Subject key identifier: C2:6C:0E:20:D2:67:F8:AF:87:74:7D:E2:21:CB:29:2D:6F:FC:1B:65
Authority key identifier: 8D:8C:C3:33:08:81:CD:8C:A3:9E:D6:09:FF:E1:84:37:24:B2:A9:AC
Certificate issuer: /CN=8d8cc3330881cd8ca39ed609ffe1843724b2a9ac
Certificate serial: 0194BBCED635EF02407D63BDE35D7A8184DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYzDMwiBzYyjntYJ_-GENySyqaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/8b9066-2ea7-4204-a84a-e3e8a98c2168/1/jYzDMwiBzYyjntYJ_-GENySyqaw.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: jYzDMwiBzYyjntYJ_-GENySyqaw.crl (hash: LzJgMI1N8UHGENc9r7kf5Iz1BNSFf7jRG1GI5DWBD5o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d6:35:ef:02:40:7d:63:bd:e3:5d:7a:81:84:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8cc3330881cd8ca39ed609ffe1843724b2a9ac
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=c26c0e20d267f8af87747de221cb292d6ffc1b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:24:74:49:41:91:e9:0f:5f:69:7a:ad:42:9f:
7e:74:53:7e:4d:77:af:83:f3:51:d8:37:1c:4d:f2:
10:13:3a:71:fb:fd:2c:4b:f4:7f:bb:1c:33:ff:73:
59:2f:bc:21:89:e2:35:c5:5d:7f:20:31:eb:7a:b8:
9c:7f:a6:0d:18:18:01:7d:e4:ef:ed:90:d9:64:be:
57:cb:a2:a9:dd:b4:43:9b:94:45:cd:08:ba:15:18:
f0:22:7e:cf:04:dd:1b:61:10:10:27:9c:87:f5:74:
30:69:5a:db:c7:39:60:b3:70:55:ce:6e:34:88:4c:
1e:eb:d6:c9:5e:82:55:e9:58:5a:07:14:0a:f1:ed:
3e:ea:a4:ce:e4:47:ef:43:f3:62:6b:09:a0:27:bc:
a4:09:07:44:49:e2:9d:ea:b4:be:37:33:44:7a:15:
b8:27:ec:19:70:24:ac:f5:da:2a:c6:12:08:33:10:
60:f4:6b:00:fd:24:07:2b:79:fb:e0:f1:c0:14:d5:
da:82:a4:ca:3e:9d:48:1a:e3:7b:4f:f6:30:8e:98:
bf:ed:6f:a2:48:5e:c2:c9:34:83:b2:d4:54:76:6d:
fd:5e:7b:77:f4:43:94:57:16:61:0e:d6:c1:62:8a:
62:fb:8d:69:a4:d4:30:40:5a:04:dd:96:2f:ca:c6:
af:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6C:0E:20:D2:67:F8:AF:87:74:7D:E2:21:CB:29:2D:6F:FC:1B:65
X509v3 Authority Key Identifier:
keyid:8D:8C:C3:33:08:81:CD:8C:A3:9E:D6:09:FF:E1:84:37:24:B2:A9:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYzDMwiBzYyjntYJ_-GENySyqaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b9066-2ea7-4204-a84a-e3e8a98c2168/1/jYzDMwiBzYyjntYJ_-GENySyqaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b9066-2ea7-4204-a84a-e3e8a98c2168/1/jYzDMwiBzYyjntYJ_-GENySyqaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:28:5c:48:58:d2:73:24:cd:5d:41:41:c9:2c:43:f9:84:4e:
15:4e:a3:25:af:30:0f:c8:4e:72:c9:11:53:1f:f5:d0:cc:98:
f7:ff:63:70:fe:ec:41:4d:ae:5f:3d:58:15:57:a9:58:3d:b4:
23:1f:c1:b5:48:d5:ab:20:05:0c:33:74:a5:d8:02:9e:57:b1:
05:a0:23:20:17:14:00:e6:3e:aa:78:cb:b7:7d:71:fd:7c:7f:
fc:7f:86:bf:9b:97:01:2c:f2:4f:d7:6c:0a:fd:06:51:ec:2d:
c2:3e:d5:9f:6b:fe:1a:15:8f:dd:9e:c2:03:1c:0d:82:b5:62:
e6:1d:63:6f:b9:84:d9:7d:07:d9:01:65:c7:c2:28:e4:21:ce:
bc:4c:be:b3:87:05:40:9b:ce:46:4c:af:8c:f3:3d:13:f7:f9:
41:4e:a4:30:7e:17:7b:a8:9c:ff:b3:a0:d4:35:95:dc:e2:95:
6e:fa:26:dc:ba:5d:fd:cf:2c:40:ef:87:9a:8d:77:3b:35:61:
a6:98:c6:90:bb:d9:c4:aa:88:1b:d1:80:fc:d6:c9:0b:61:8b:
ea:1c:cb:9a:a0:aa:3c:cd:7e:6c:81:7f:b8:39:f6:9e:75:e1:
50:b7:c7:c4:c9:9d:a5:fe:53:e0:28:d6:70:ad:e3:c5:ce:7f:
6a:53:c2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:05:58 2025 by rpki-client