Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
File: yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft (raw, json)
Hash identifier: 5yutscz5Lou25/ux100YS9xXyy2xlVDNwUjoTSaENeY=
Subject key identifier: 19:58:0C:87:EC:72:F2:BE:C9:21:61:55:26:3B:17:62:B5:03:3E:92
Authority key identifier: C8:67:6F:FD:E3:17:F2:EC:1B:81:00:D2:D9:D4:4A:3E:7D:8F:78:D6
Certificate issuer: /CN=c8676ffde317f2ec1b8100d2d9d44a3e7d8f78d6
Certificate serial: 0194BD1755BEF8DB7606C14319A587285D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
Manifest number: 0AE3
Signing time: Fri 31 Jan 2025 16:00:10 +0000
Manifest this update: Fri 31 Jan 2025 16:00:10 +0000
Manifest next update: Sat 01 Feb 2025 16:00:10 +0000
Files and hashes: 1: yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl (hash: 6/FRHPID2S+w93cHqlHV4hSsme/xxNJoweD3p+SnwhI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:55:be:f8:db:76:06:c1:43:19:a5:87:28:5d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8676ffde317f2ec1b8100d2d9d44a3e7d8f78d6
Validity
Not Before: Jan 31 16:00:10 2025 GMT
Not After : Feb 1 16:00:10 2025 GMT
Subject: CN=19580c87ec72f2bec9216155263b1762b5033e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:24:e0:4e:f8:57:a3:0e:43:5d:77:90:c3:a6:
e8:5d:2c:df:15:97:6d:e8:f8:53:d6:b9:f2:69:cc:
37:25:01:17:5d:74:6e:be:fd:b3:41:39:0e:aa:d5:
4f:3c:04:82:a0:64:b8:a2:b1:39:1d:7b:2d:06:56:
26:fd:f1:37:3a:93:31:2a:33:4b:dc:eb:ab:92:85:
2c:a1:b6:1d:96:41:8e:ee:26:e1:20:28:84:1b:0c:
b3:0f:bf:cb:3c:f3:92:a2:51:8e:b5:31:22:66:c3:
4b:11:a9:34:a5:82:ef:41:b1:64:35:31:94:99:0c:
1b:c9:22:99:86:d0:04:ed:1a:e7:96:76:84:38:4f:
fe:af:d9:13:46:97:c7:01:ce:9d:03:86:6e:e8:d5:
25:4d:fb:e1:b8:40:2c:8c:be:2c:d8:93:48:fc:05:
d7:a5:4a:a4:c0:b6:3a:a1:e0:09:1e:b7:3c:42:15:
24:a8:e2:66:aa:92:60:94:ed:cf:6b:d6:1e:d8:3b:
ce:38:2c:7b:6c:9c:56:37:56:72:ef:e7:e5:ef:66:
5c:73:09:c7:9b:29:d5:c4:31:b3:f6:e4:dc:c0:90:
4c:e9:cd:d0:2c:73:bd:1b:eb:f1:e4:12:dc:08:18:
c4:1a:bf:69:5e:26:7d:1b:df:e4:85:a2:b5:6c:fa:
78:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:58:0C:87:EC:72:F2:BE:C9:21:61:55:26:3B:17:62:B5:03:3E:92
X509v3 Authority Key Identifier:
keyid:C8:67:6F:FD:E3:17:F2:EC:1B:81:00:D2:D9:D4:4A:3E:7D:8F:78:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:52:bd:9f:ae:aa:01:18:d8:2e:cc:84:b6:d8:ca:a3:a4:90:
59:dd:ca:5f:6a:34:da:68:d1:de:a6:fc:c8:d1:de:d2:62:be:
88:2b:0e:2b:7d:24:85:bf:cb:5a:99:d2:3a:85:8c:e7:c9:ef:
46:36:86:0d:c0:fe:ba:be:95:71:56:b1:3b:30:f8:1a:80:02:
9c:fd:f7:0e:27:fd:44:59:f2:cb:70:ad:a9:2f:f0:3b:9a:5f:
15:84:b0:d2:fc:28:53:d1:de:7f:62:77:ae:d4:2e:3d:35:11:
59:68:45:02:04:a5:12:d6:07:fe:90:a1:0e:7e:d6:62:8c:67:
4c:c2:c6:d8:e8:1e:48:5c:7d:48:f2:a9:3f:d0:a4:a4:40:6e:
5c:fe:2a:ec:c7:8a:63:98:a3:d9:9a:30:96:45:bd:ba:fe:2a:
2e:2c:de:f4:57:63:3f:16:3f:a1:ad:26:ee:19:70:3f:ac:45:
f0:d9:1d:b5:ed:2f:e4:14:3b:34:02:26:d1:0a:f7:9b:88:00:
49:37:b3:bf:98:b1:6b:a7:77:c8:84:bb:54:67:de:8b:66:df:
c5:ee:b1:56:23:b1:38:8e:04:e3:d9:b0:d0:f7:b1:89:7c:c6:
4d:4a:56:92:a0:bf:71:f2:95:fb:88:c7:58:f1:00:b5:1e:c0:
bf:9c:bc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:48:08 2025 by rpki-client