Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
File: yjzk270E4HrOGTf4ChWvc5m4Aw4.mft (raw, json)
Hash identifier: t1KCFWKDbUq8RLtQtnmlGKU6nfntUZ0APlaoW8Q4Jb4=
Subject key identifier: 4D:7F:BC:21:6D:11:D4:03:C0:68:0A:0E:49:24:5E:3F:4F:2E:46:90
Authority key identifier: CA:3C:E4:DB:BD:04:E0:7A:CE:19:37:F8:0A:15:AF:73:99:B8:03:0E
Certificate issuer: /CN=ca3ce4dbbd04e07ace1937f80a15af7399b8030e
Certificate serial: 0194BCE0CE01963E69D87FA50F0E7F40DE1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
Manifest number: 03C1
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: yjzk270E4HrOGTf4ChWvc5m4Aw4.crl (hash: xhcIbL5csU0Xdvl7mdPDXbnvT+9yc2bdGtYFV3TkdFM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ce:01:96:3e:69:d8:7f:a5:0f:0e:7f:40:de:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3ce4dbbd04e07ace1937f80a15af7399b8030e
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=4d7fbc216d11d403c0680a0e49245e3f4f2e4690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:86:c8:c1:da:47:f7:0e:4c:73:ba:5e:e0:e6:
40:39:c6:b0:13:72:7f:b4:aa:00:2b:f0:59:55:18:
47:71:f5:dc:26:5f:83:92:65:a4:dd:f5:69:c1:4d:
46:92:d7:f2:12:5c:16:03:ff:b0:69:97:89:6d:62:
70:2d:55:99:d4:bf:e8:62:6c:9e:b5:b3:11:6f:38:
67:2d:ef:71:a1:64:06:1c:bf:0e:68:25:bb:26:6f:
c1:41:4d:6b:29:4d:88:47:85:de:c1:85:5f:4b:62:
0b:77:25:40:42:4c:e9:5a:ef:b4:c6:8f:76:43:68:
38:1c:be:88:43:b5:40:7a:56:9e:f3:cd:df:fe:24:
71:3b:22:78:88:d9:c3:3c:c9:52:fd:49:0e:f1:cc:
66:9e:ca:e3:ad:ea:6a:82:38:f2:2d:e5:da:de:5c:
4a:12:90:ac:27:d4:fb:09:c9:4a:d8:36:83:b2:1f:
2f:28:e1:e8:a3:64:ae:40:08:53:c5:24:05:08:d3:
57:7a:bf:22:74:47:d8:33:8c:43:62:ab:e8:3d:a9:
d3:a6:10:b2:12:1d:b5:25:6b:54:e1:25:52:34:fa:
61:17:11:16:ae:a0:df:b5:99:09:ee:b0:bb:d0:dc:
38:88:04:89:65:98:a0:44:fb:e2:f6:51:9b:f5:fe:
fb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7F:BC:21:6D:11:D4:03:C0:68:0A:0E:49:24:5E:3F:4F:2E:46:90
X509v3 Authority Key Identifier:
keyid:CA:3C:E4:DB:BD:04:E0:7A:CE:19:37:F8:0A:15:AF:73:99:B8:03:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0b:fb:58:db:fc:47:3d:1d:6b:20:cc:06:6d:1b:80:fb:5e:
52:90:12:68:18:c4:8c:95:fb:f5:b0:ed:28:e4:35:3b:a0:7b:
18:58:a3:ae:46:7c:74:c2:b3:11:65:04:d1:fc:6e:6e:91:04:
9e:27:fa:ca:c8:fc:5c:2c:02:51:7b:8e:58:d5:49:40:fa:b5:
e5:54:c8:82:fa:5e:b7:b5:56:48:8d:2f:67:f0:22:5c:d6:66:
32:f4:97:0a:a4:9f:65:fa:97:23:bf:ad:85:6f:57:06:8b:e6:
dd:23:a3:dd:d1:21:d9:73:8c:5d:b1:8c:8e:c5:0e:0a:91:a2:
7b:ae:6a:0c:37:ee:b1:32:c8:82:5c:de:17:4b:ab:17:d5:20:
ea:82:93:76:4a:a8:7b:9b:79:59:94:da:dc:f8:0c:89:c2:f1:
49:b2:a5:67:47:0f:2b:2f:f4:59:ca:20:3f:bc:4a:01:2b:7f:
c0:eb:0d:f9:bb:7c:2a:a2:a6:17:3c:b9:1b:1a:8b:7a:85:fb:
95:e2:78:28:e3:bf:b4:d9:df:cc:03:d6:15:6d:09:1f:89:a8:
3d:a7:38:5c:3c:5f:fd:a1:8f:54:3b:f6:52:f0:a9:df:af:8b:
a2:5f:ae:44:10:ad:18:a5:d4:f8:7a:0e:15:c1:cb:f2:68:c1:
3f:25:4b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:24:43 2025 by rpki-client