Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/309a19-c129-4d0f-8f19-ab109324fdd3/1/yEx3OCCqpPrR9BHJWRmTxGwY_Cc.mft
File: yEx3OCCqpPrR9BHJWRmTxGwY_Cc.mft (raw, json)
Hash identifier: w0Bg9tBIjlKChlvlh4t5ef7nMVoRK3xQvPuLvDC/u08=
Subject key identifier: E0:D4:C1:8B:41:8A:32:4A:EB:72:D1:12:C0:5B:6D:48:64:DD:29:58
Authority key identifier: C8:4C:77:38:20:AA:A4:FA:D1:F4:11:C9:59:19:93:C4:6C:18:FC:27
Certificate issuer: /CN=c84c773820aaa4fad1f411c9591993c46c18fc27
Certificate serial: 0194BBCEC7EFD7200C2BC86EC5B181296378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yEx3OCCqpPrR9BHJWRmTxGwY_Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/309a19-c129-4d0f-8f19-ab109324fdd3/1/yEx3OCCqpPrR9BHJWRmTxGwY_Cc.mft
Manifest number: 040D
Signing time: Fri 31 Jan 2025 10:01:18 +0000
Manifest this update: Fri 31 Jan 2025 10:01:18 +0000
Manifest next update: Sat 01 Feb 2025 10:01:18 +0000
Files and hashes: 1: yEx3OCCqpPrR9BHJWRmTxGwY_Cc.crl (hash: rjWV9dR6FcL7hrgu9z4bmKKQvAMjxIz1RX0NJWrBc1A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c7:ef:d7:20:0c:2b:c8:6e:c5:b1:81:29:63:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84c773820aaa4fad1f411c9591993c46c18fc27
Validity
Not Before: Jan 31 10:01:18 2025 GMT
Not After : Feb 1 10:01:18 2025 GMT
Subject: CN=e0d4c18b418a324aeb72d112c05b6d4864dd2958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:76:8a:95:ec:d0:d1:cf:0c:57:60:1f:98:44:
d9:6a:1e:05:7a:49:c4:62:7a:33:bc:fe:bb:fe:8e:
6b:29:27:12:a8:e4:6d:38:54:d0:a8:80:52:88:f8:
2b:bc:b0:82:f4:11:46:70:3a:5e:09:1a:12:66:05:
b5:a2:e0:6f:18:2c:12:ac:00:77:34:1f:29:a7:51:
e8:96:ec:ff:93:9c:ee:8b:f2:54:a2:f2:54:00:dd:
ea:81:a0:01:6a:32:60:74:49:bf:92:df:88:2c:3e:
4c:bb:a8:64:02:f0:e5:28:d7:cc:5e:97:c4:4b:8b:
60:08:53:6e:ef:37:99:ad:0b:66:e5:8c:8e:42:2a:
43:12:54:7e:76:f7:d0:7e:f3:e5:74:21:e9:f8:c0:
cf:6e:59:de:db:eb:d0:0d:ca:85:ee:53:ba:eb:f1:
89:9d:2e:a3:b9:c7:22:43:15:0e:29:2c:1f:10:40:
d4:58:df:21:2b:ee:b1:bc:5f:13:fb:3a:b3:0e:32:
b7:4d:cc:06:36:d1:44:fb:b4:98:63:1b:ce:d4:44:
e2:9b:be:06:2f:fb:e7:68:f9:49:02:cf:7d:6a:85:
26:e4:21:d7:41:75:15:7f:6e:0b:c1:05:7c:fd:01:
9f:1c:c9:98:b5:92:c7:d8:f9:fa:0a:49:0c:21:1b:
f6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D4:C1:8B:41:8A:32:4A:EB:72:D1:12:C0:5B:6D:48:64:DD:29:58
X509v3 Authority Key Identifier:
keyid:C8:4C:77:38:20:AA:A4:FA:D1:F4:11:C9:59:19:93:C4:6C:18:FC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEx3OCCqpPrR9BHJWRmTxGwY_Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/309a19-c129-4d0f-8f19-ab109324fdd3/1/yEx3OCCqpPrR9BHJWRmTxGwY_Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/309a19-c129-4d0f-8f19-ab109324fdd3/1/yEx3OCCqpPrR9BHJWRmTxGwY_Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e3:1e:ce:6b:b3:03:69:bb:ab:7d:b2:13:ca:fa:9f:5f:12:
13:07:5f:1d:bd:25:e0:12:6b:40:c2:03:f6:82:08:e8:0b:21:
0f:43:d0:1f:87:f1:d8:97:a5:40:33:84:9f:e6:a0:b3:5a:31:
06:a3:25:68:fd:ba:d8:76:83:7b:80:41:5c:0a:66:94:a8:58:
b5:df:72:66:75:e9:3f:f2:e1:b9:6b:a0:0e:0c:f7:0d:85:00:
f6:1b:03:b8:62:62:13:ce:a0:9a:52:29:77:9a:8c:4b:1e:60:
5c:e6:63:7d:99:b0:6e:f5:b4:69:2d:87:37:fe:74:ef:e3:49:
88:fc:86:90:4b:a0:5c:8d:67:a2:12:11:c2:00:9b:1b:1e:67:
2f:a1:fe:02:84:81:4d:83:69:df:19:58:ba:9b:6e:22:6b:67:
72:ff:6a:f0:fd:f9:47:e3:73:2c:14:ca:32:5a:d4:70:a7:c2:
eb:8b:ee:f1:ab:fc:7a:4c:9e:ef:9e:76:68:6b:3d:c3:a0:eb:
59:29:1a:1f:d4:fd:e3:35:4d:2b:8b:91:34:e2:5d:90:0b:9d:
f4:7b:0b:fd:40:80:c8:00:dc:4c:59:a9:2f:c7:cf:08:65:b2:
dd:c6:c9:a0:78:ff:7a:db:f1:b4:a1:7c:61:d2:e9:a5:12:a0:
6f:68:7e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:13:25 2025 by rpki-client