Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft
File: Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft (raw, json)
Hash identifier: vEAZYKLchLTJj9010rFrNy0mqSBcNraZB8k2fqAuxco=
Subject key identifier: DF:DA:49:31:0B:B9:2A:99:0A:87:53:25:C4:CF:B2:EC:1A:78:FA:D9
Authority key identifier: 62:4A:7F:25:07:FC:AD:BE:CD:3D:2B:62:98:E7:0F:5D:4B:FE:04:B4
Certificate issuer: /CN=624a7f2507fcadbecd3d2b6298e70f5d4bfe04b4
Certificate serial: 0194BBCEA5855308E9461ACBD1CF217A9F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ykp_JQf8rb7NPStimOcPXUv-BLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft
Manifest number: 1003
Signing time: Fri 31 Jan 2025 10:01:09 +0000
Manifest this update: Fri 31 Jan 2025 10:01:09 +0000
Manifest next update: Sat 01 Feb 2025 10:01:09 +0000
Files and hashes: 1: Ykp_JQf8rb7NPStimOcPXUv-BLQ.crl (hash: /8o0u4fdvpxxZms9suAgUw/NzmLkR51CBdDRsFSkawU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a5:85:53:08:e9:46:1a:cb:d1:cf:21:7a:9f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624a7f2507fcadbecd3d2b6298e70f5d4bfe04b4
Validity
Not Before: Jan 31 10:01:09 2025 GMT
Not After : Feb 1 10:01:09 2025 GMT
Subject: CN=dfda49310bb92a990a875325c4cfb2ec1a78fad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:8c:53:7c:4d:54:fc:a8:50:7f:3d:ba:5c:
57:c6:16:f3:61:ac:a7:e9:27:8a:4e:2c:00:57:be:
6c:f2:5b:9a:b5:93:38:bf:e0:6e:f9:2c:67:62:a5:
d3:ee:d0:a5:3c:57:53:33:69:06:79:ff:f5:3b:12:
f9:cb:4c:dc:5b:17:94:be:56:d6:56:4a:80:ed:bf:
b3:74:d8:d3:2c:c1:82:bb:ef:1e:b8:dc:77:49:ac:
5f:b6:20:76:64:fa:d9:4e:6e:d8:33:8f:54:9b:7e:
5e:a3:ec:84:74:de:2e:67:60:57:3a:41:cf:25:ee:
28:91:2a:04:a5:16:72:3c:12:8e:16:75:37:32:e8:
6c:88:42:be:8b:0a:6e:01:21:92:04:fe:44:19:bd:
56:b5:f9:7e:44:7f:12:56:5d:44:f6:1e:55:a1:70:
ec:ac:9f:20:ee:f7:67:1b:11:21:b3:57:c4:a1:2c:
d9:69:45:08:10:e5:3b:07:b0:bb:56:ef:2e:9c:94:
00:b3:10:ef:89:48:78:49:84:0e:9b:44:db:51:f3:
40:e2:50:2f:8a:1a:ac:df:c8:d4:7e:87:83:81:af:
2c:d6:bb:f4:a9:70:2a:1f:3c:58:e4:b1:8f:0f:3a:
c3:ac:7f:73:e3:08:9e:a9:b1:46:10:93:c0:f9:c9:
64:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DA:49:31:0B:B9:2A:99:0A:87:53:25:C4:CF:B2:EC:1A:78:FA:D9
X509v3 Authority Key Identifier:
keyid:62:4A:7F:25:07:FC:AD:BE:CD:3D:2B:62:98:E7:0F:5D:4B:FE:04:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ykp_JQf8rb7NPStimOcPXUv-BLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:cf:af:02:b0:13:19:37:ec:46:e0:ea:89:6a:51:43:d0:c5:
33:96:1a:c4:f2:a8:cb:78:19:16:7e:d3:4d:7f:56:4e:84:42:
b2:23:3a:bc:eb:7c:e6:28:ed:4d:a6:52:65:e8:08:a4:37:9c:
6d:41:14:6e:f7:b5:ad:94:ea:f4:df:19:20:e0:82:b7:b3:23:
ae:d9:b6:07:ea:c3:6d:a2:ee:4c:65:8a:5f:3e:46:db:d9:59:
de:c4:ba:de:be:b1:4a:7f:6e:7a:46:ec:89:1a:a6:6e:a1:a3:
6d:dd:98:a9:fc:d2:c9:e5:b4:43:3e:c6:dc:69:79:0e:ad:f7:
37:48:fa:70:74:13:7d:3f:0d:9b:10:90:f4:58:24:ba:e7:b7:
e5:75:6d:53:26:fd:bd:e3:f4:73:f2:25:34:48:21:4b:a2:6b:
3a:a0:0e:51:1d:54:79:58:c5:41:67:6f:91:f1:83:c6:ee:d4:
75:d0:bd:93:7f:3c:f6:11:f2:ef:10:00:0a:f5:3d:e4:8f:ca:
bf:05:14:67:2d:1b:9d:a9:ae:81:8d:53:9c:d7:fb:a3:cb:7e:
98:7b:54:74:65:5d:db:17:f0:af:58:d8:3b:70:6a:ac:4d:35:
e7:c1:77:cd:55:36:38:42:44:89:17:08:1b:01:bb:cf:88:42:
6b:c0:3d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:55:27 2025 by rpki-client