Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7b540f-b83a-40b9-ae6d-cdcee23a83b0/1/yKQR5q7CPK13xDcrTXsLH8gtXcA.mft
File: yKQR5q7CPK13xDcrTXsLH8gtXcA.mft (raw, json)
Hash identifier: zMRfVyEofL5L3078FNqPOSaPxmJ3nz4pRknXSb4dMZs=
Subject key identifier: C0:CA:9B:24:61:4B:72:58:E1:61:1E:08:F4:8B:73:63:07:55:90:11
Authority key identifier: C8:A4:11:E6:AE:C2:3C:AD:77:C4:37:2B:4D:7B:0B:1F:C8:2D:5D:C0
Certificate issuer: /CN=c8a411e6aec23cad77c4372b4d7b0b1fc82d5dc0
Certificate serial: 0194BC72B787624ED71161E3D21DFB66B2D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKQR5q7CPK13xDcrTXsLH8gtXcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7b540f-b83a-40b9-ae6d-cdcee23a83b0/1/yKQR5q7CPK13xDcrTXsLH8gtXcA.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: yKQR5q7CPK13xDcrTXsLH8gtXcA.crl (hash: an5/l+r3W3I1k+ZtCTNjCGdP6cdA9kzgGsqIJZ2Dzmo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b7:87:62:4e:d7:11:61:e3:d2:1d:fb:66:b2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8a411e6aec23cad77c4372b4d7b0b1fc82d5dc0
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=c0ca9b24614b7258e1611e08f48b736307559011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ce:d9:a9:c1:86:b8:44:ce:a8:bd:bd:68:03:
b0:93:cb:94:8c:5a:5f:cd:3b:87:e8:df:4d:8a:8b:
85:24:f6:29:df:f2:eb:e1:35:25:17:41:ce:7b:2a:
73:94:1f:75:a4:fa:66:db:7f:24:a2:d1:74:2d:74:
aa:ee:1f:21:d0:e0:83:e8:2f:b7:56:7e:86:f9:19:
b1:f9:23:ff:f6:a8:7a:8e:89:c3:ca:9c:85:cc:87:
6b:f0:6e:d2:a7:ec:e7:bb:7f:99:92:03:9b:80:ac:
4f:34:c6:01:7e:18:2f:1b:2d:ec:31:77:71:4d:5a:
69:9f:b4:62:29:6c:b0:e9:e0:66:68:22:40:c4:84:
ec:3b:d7:89:24:7b:07:bf:39:37:86:05:f9:32:22:
d2:fd:1d:fe:b6:63:07:06:03:b1:85:75:8f:3d:cc:
12:40:b5:b6:7a:3f:a2:ce:76:09:6a:48:39:13:16:
3e:bb:7d:a0:eb:70:0b:5d:52:6f:8a:15:3c:5a:ff:
b8:d5:30:26:ba:5d:e8:a2:ef:3c:7f:d1:71:cd:c7:
60:78:9a:b4:b5:db:3d:ce:5a:62:3a:8b:ec:dc:77:
da:fd:06:56:61:34:96:0c:5b:b2:e4:48:74:08:06:
d4:92:97:2e:3a:33:9c:fa:6a:ac:ed:0c:05:19:c1:
6f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CA:9B:24:61:4B:72:58:E1:61:1E:08:F4:8B:73:63:07:55:90:11
X509v3 Authority Key Identifier:
keyid:C8:A4:11:E6:AE:C2:3C:AD:77:C4:37:2B:4D:7B:0B:1F:C8:2D:5D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKQR5q7CPK13xDcrTXsLH8gtXcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7b540f-b83a-40b9-ae6d-cdcee23a83b0/1/yKQR5q7CPK13xDcrTXsLH8gtXcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7b540f-b83a-40b9-ae6d-cdcee23a83b0/1/yKQR5q7CPK13xDcrTXsLH8gtXcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:15:f7:f0:76:16:04:b1:d2:95:b0:f7:70:76:e7:d9:e0:84:
71:78:28:7d:c8:70:c9:ab:cc:48:d6:f2:1a:92:85:2e:61:ce:
f6:0e:75:46:df:32:45:cb:24:57:72:ab:64:60:59:4b:ce:fb:
30:b9:88:f9:07:57:f0:3e:fe:2c:31:a3:81:da:63:c9:62:1f:
96:9c:b0:b2:d4:d6:99:b4:00:70:1e:d4:a1:48:8b:9b:6e:6c:
37:7b:98:2c:7f:18:93:76:cd:1e:c1:0a:67:27:12:7c:76:5d:
31:2c:06:a0:ee:b7:fd:fd:0c:8c:db:d9:a9:31:f8:5b:8c:14:
bb:73:c2:c7:9a:25:2d:ff:17:c4:91:54:10:b5:cb:ae:24:03:
15:63:bb:44:cd:0a:47:f5:7c:78:d1:ee:58:95:f5:0c:d1:d3:
bc:75:23:07:fd:74:a1:34:8d:9a:d2:79:11:8a:78:1f:26:09:
ce:48:47:81:48:05:59:a3:15:98:25:5d:d6:e8:ad:7d:31:22:
62:6b:e6:6e:ce:49:f8:6a:9e:74:18:bd:9b:72:6a:32:c3:1a:
15:bb:c4:7d:20:2d:89:59:5e:10:c7:7b:4b:69:e6:45:c4:d0:
ef:32:60:88:1e:cc:e0:a8:f0:a7:15:7f:e8:cb:87:1a:f6:0d:
d4:aa:48:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:21:25 2025 by rpki-client