Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
File: YXe1tkvknoGZlf7n8-NiG9ymrow.mft (raw, json)
Hash identifier: ROsLHLwZUlLbv6ODfvNBMCorPQIYriXjiU7/5Yc6DkY=
Subject key identifier: 70:C5:B2:4F:4D:33:13:CA:5F:DF:7D:0F:72:6A:2B:A7:A1:8A:C2:4F
Authority key identifier: 61:77:B5:B6:4B:E4:9E:81:99:95:FE:E7:F3:E3:62:1B:DC:A6:AE:8C
Certificate issuer: /CN=6177b5b64be49e819995fee7f3e3621bdca6ae8c
Certificate serial: 0194BD4EAC6F5BAB348A30DA33367C7EAFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: YXe1tkvknoGZlf7n8-NiG9ymrow.crl (hash: +9eEkpudBoA8Gzape0Z5xIc7M8Kwfy8HKBSWmrmIIWQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ac:6f:5b:ab:34:8a:30:da:33:36:7c:7e:af:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6177b5b64be49e819995fee7f3e3621bdca6ae8c
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=70c5b24f4d3313ca5fdf7d0f726a2ba7a18ac24f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:33:7e:f3:b4:3d:b4:5b:a8:53:40:a2:9f:
b9:a1:71:3c:db:9d:1d:b5:bb:b5:f8:e5:f7:4f:57:
24:2c:05:62:f8:5f:ed:1f:4d:9d:54:47:69:3d:bc:
20:5e:53:6b:80:00:83:72:55:ed:dd:ae:18:e8:02:
f3:a3:56:62:ee:f6:6d:67:3f:31:27:4a:e1:5d:ee:
55:fe:79:7f:aa:86:fd:30:ad:3b:33:17:8f:1a:5e:
e6:86:43:b3:cf:01:29:5a:be:f5:25:33:0f:39:10:
e2:56:ad:f2:1e:0f:66:ce:78:8e:ff:6e:88:58:4c:
7d:9c:32:7f:61:91:35:31:21:09:f7:07:6c:f2:97:
9b:72:50:33:33:fd:92:96:b1:66:b0:fd:a6:89:3e:
5e:b7:47:ef:49:2a:85:8a:4d:b0:5a:35:52:0a:33:
ba:69:d6:80:4c:6e:78:e8:42:d6:1a:a4:b4:50:ef:
38:fe:9d:70:ad:69:30:8e:31:dc:c7:41:c2:45:a6:
88:40:f1:e3:99:4a:8f:cc:d3:5d:00:9f:83:84:97:
6b:78:2c:4b:55:f3:6e:a2:92:d1:55:cc:9f:be:12:
6e:a8:09:da:24:ba:43:4d:ea:58:70:cb:32:56:54:
63:8a:95:90:82:79:e7:f2:fb:9d:6a:4a:a1:5a:30:
5f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C5:B2:4F:4D:33:13:CA:5F:DF:7D:0F:72:6A:2B:A7:A1:8A:C2:4F
X509v3 Authority Key Identifier:
keyid:61:77:B5:B6:4B:E4:9E:81:99:95:FE:E7:F3:E3:62:1B:DC:A6:AE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a4:3c:d9:db:aa:17:cd:e3:d5:c3:dd:8a:c6:f4:6a:43:c2:
ad:d2:4f:c7:91:3d:fe:e4:d3:a2:4f:38:dd:74:06:8d:c1:2f:
e1:31:c0:64:19:68:ee:2e:b9:d9:e6:20:11:7a:7a:4d:02:93:
80:78:61:c4:72:c1:3e:4b:07:82:44:09:20:ce:31:0c:5f:ef:
bd:a2:d4:65:5c:ad:14:30:25:bf:10:ce:5b:49:6f:9f:e4:fe:
56:7d:88:74:33:64:32:55:f3:03:bf:e9:66:e2:87:f2:22:2b:
d0:74:94:7f:68:15:ae:07:d2:ba:8e:67:dc:81:c0:22:72:b8:
d0:f6:d1:d2:d8:9b:84:df:19:95:e1:54:0f:61:cd:d0:f9:d9:
8b:b4:d3:f4:0b:5d:ad:f2:06:50:e7:ac:7e:30:98:f7:75:3d:
21:02:66:d8:c6:88:d1:0b:13:f5:6a:6f:78:f2:74:2b:e7:27:
18:ba:39:6d:5f:24:88:e2:68:10:57:f8:81:02:a0:59:66:44:
1a:d9:df:6b:d3:a4:c3:4b:b1:04:e6:1f:ab:82:78:86:46:a7:
af:25:8a:eb:f7:3f:97:fb:32:3d:d9:cd:0c:bc:cf:ff:15:d5:
bf:93:28:69:3c:34:65:e2:5c:24:d3:cf:dd:3c:52:c6:3d:32:
3f:ec:88:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:58 2025 by rpki-client