Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.mft
File: _ypds7oz42wW2_UmCy_idK5_siI.mft (raw, json)
Hash identifier: MUlDr+Dmix0xOU/zu//Ec041zvMmSuhpPuWfRvlOYDA=
Subject key identifier: 35:13:01:32:99:AA:3A:3D:7E:E2:75:4D:48:07:80:D4:FD:20:5C:CF
Authority key identifier: FF:2A:5D:B3:BA:33:E3:6C:16:DB:F5:26:0B:2F:E2:74:AE:7F:B2:22
Certificate issuer: /CN=ff2a5db3ba33e36c16dbf5260b2fe274ae7fb222
Certificate serial: 0194BD17C5D888F7E605CD76CE5873B1C88D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ypds7oz42wW2_UmCy_idK5_siI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.mft
Manifest number: 0B0A
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: _ypds7oz42wW2_UmCy_idK5_siI.crl (hash: MB62DEqvs9OVURC+6k6iucC2rorPPe+hQaMBSixBScA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c5:d8:88:f7:e6:05:cd:76:ce:58:73:b1:c8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2a5db3ba33e36c16dbf5260b2fe274ae7fb222
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=3513013299aa3a3d7ee2754d480780d4fd205ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a1:66:b7:a6:01:6f:5e:9a:37:8d:9a:7b:15:
9d:eb:1f:fe:de:65:11:e7:5b:11:da:ef:c7:f7:c7:
8d:b9:79:2b:14:32:df:78:09:f3:fa:17:1f:b4:1e:
62:e5:eb:10:bf:3f:ae:4d:de:a4:60:eb:37:a4:1b:
1f:7d:7f:aa:f1:62:2f:1f:bc:f6:11:ca:c3:25:fd:
b4:fe:f7:ac:c3:93:bb:8e:e3:59:35:09:37:3b:17:
8e:90:7e:6d:29:ef:d4:f9:e8:69:cb:80:9e:b8:6a:
22:54:63:0a:59:62:ce:d5:40:ef:f9:a4:ba:07:f0:
73:d2:60:6c:df:a2:23:1e:79:33:ea:eb:36:36:7f:
c9:3a:f9:99:84:a5:04:8e:48:cb:d6:d1:dc:85:b5:
fb:69:48:84:5a:4a:82:27:77:c6:5f:7e:0d:c2:82:
5f:d9:67:70:57:b6:41:39:40:38:23:57:a4:7a:5b:
2c:36:0d:73:22:7f:47:d2:6e:85:f6:08:37:81:2a:
3f:ab:d2:7b:83:55:25:e3:41:c9:21:ea:a0:70:69:
93:f0:4c:aa:0b:7a:76:53:c9:f6:32:f8:f6:62:24:
f6:0b:26:a2:2e:d4:43:55:4d:38:c6:8c:2c:6a:89:
8c:39:01:99:74:ea:e5:72:8c:07:bc:84:fe:27:fa:
4a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:13:01:32:99:AA:3A:3D:7E:E2:75:4D:48:07:80:D4:FD:20:5C:CF
X509v3 Authority Key Identifier:
keyid:FF:2A:5D:B3:BA:33:E3:6C:16:DB:F5:26:0B:2F:E2:74:AE:7F:B2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ypds7oz42wW2_UmCy_idK5_siI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c0:5c:c0:ed:e4:47:ef:50:2a:01:fd:88:79:83:1c:20:23:
31:55:49:1c:08:cd:e9:d6:c8:7e:83:f3:bf:22:d3:79:d6:ce:
6c:80:5f:a3:9f:db:80:39:a0:a2:85:4c:41:7a:98:b6:8d:c4:
e4:35:78:82:5c:4f:09:58:08:74:31:78:ea:18:d9:88:59:bf:
93:c7:2e:7d:47:94:e5:78:39:19:ed:60:b1:56:57:63:7a:d8:
dd:9a:4d:43:70:eb:66:b0:51:0c:92:91:78:1d:f3:fc:d4:f7:
21:23:1e:33:4b:ac:e7:9b:18:14:f2:68:44:10:a9:a1:bf:85:
a9:91:4c:06:03:e6:70:41:76:4d:f2:b8:f7:fa:7b:af:a0:55:
a8:81:a3:6d:14:18:97:6e:1f:0a:6e:d0:3e:25:05:05:43:8e:
5a:d4:39:44:44:6d:5e:77:ef:2c:a0:d7:9b:37:30:57:c6:d5:
f5:38:01:ff:f7:41:f2:d8:ba:11:67:c3:dd:7a:59:57:86:c4:
03:db:95:77:c6:bd:62:3c:97:3f:0f:43:45:91:8a:cd:fb:c1:
87:c1:9f:6a:8b:f9:2f:82:40:9e:6f:30:ee:08:24:4c:f7:b4:
c9:40:61:f3:bb:1b:5a:8c:0d:cf:f2:8d:a5:9e:01:12:48:19:
e5:72:8f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:33:30 2025 by rpki-client