Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
File: YgFl-_qOJEicVVPRuF7FAX79-VY.mft (raw, json)
Hash identifier: bpKaiEXy/QVHFVTok8cJaGmJ3AOC0fuRit5WTp0G1d4=
Subject key identifier: 88:07:63:72:7B:DF:E9:58:89:01:75:55:64:BE:CA:4B:1E:C8:48:27
Authority key identifier: 62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56
Certificate issuer: /CN=620165fbfa8e24489c5553d1b85ec5017efdf956
Certificate serial: 0194BCAA45690601FE9E3283E4FF82682B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
Manifest number: 10BC
Signing time: Fri 31 Jan 2025 14:01:02 +0000
Manifest this update: Fri 31 Jan 2025 14:01:02 +0000
Manifest next update: Sat 01 Feb 2025 14:01:02 +0000
Files and hashes: 1: YgFl-_qOJEicVVPRuF7FAX79-VY.crl (hash: zlXrO7Xvvhy5ZFShrrCdNcSFn7s+kLgp3oSwUGh5UZI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:45:69:06:01:fe:9e:32:83:e4:ff:82:68:2b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620165fbfa8e24489c5553d1b85ec5017efdf956
Validity
Not Before: Jan 31 14:01:02 2025 GMT
Not After : Feb 1 14:01:02 2025 GMT
Subject: CN=880763727bdfe9588901755564beca4b1ec84827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:7a:5c:77:22:b9:3b:c5:17:90:01:de:20:53:
51:4b:0f:34:dd:df:91:43:b0:24:dc:40:3a:8d:8d:
35:35:52:61:b9:82:47:63:ca:8b:e9:80:19:d0:07:
f7:ff:57:ff:d8:bd:c7:7a:4f:f6:6b:b1:92:f4:ff:
1a:94:46:53:5a:c3:31:d0:5e:16:ee:16:1c:ac:55:
ab:9f:94:d9:1a:2b:85:1f:3f:38:8f:68:c9:e1:41:
af:01:a5:54:a5:96:fc:8b:90:7e:51:89:18:5f:2a:
59:64:fa:c0:44:33:e4:95:c3:ef:8f:ba:6d:a0:6f:
ed:07:36:ab:2d:f6:b7:9e:69:53:7d:78:e6:1a:96:
06:12:c8:e4:c0:b9:5b:74:6b:37:65:fd:97:ff:9d:
6e:83:ea:dc:df:6c:5d:30:75:8b:59:35:6c:c1:f2:
56:e6:54:c3:f1:e8:80:c6:1e:c3:bb:32:cf:70:20:
dc:2d:d2:fe:53:92:34:71:60:6a:67:62:90:57:1c:
41:23:d9:6c:3d:29:ed:65:d0:94:a2:df:29:6e:4f:
e6:5a:c9:56:5b:ef:37:cd:9f:6b:4b:b7:38:6a:4c:
2e:72:c6:36:11:b0:32:82:22:be:c2:e2:8b:2a:f0:
55:48:27:9e:ce:17:af:86:12:02:ec:d9:7e:9c:ab:
19:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:07:63:72:7B:DF:E9:58:89:01:75:55:64:BE:CA:4B:1E:C8:48:27
X509v3 Authority Key Identifier:
keyid:62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ef:66:2a:54:e3:1f:20:95:15:fa:4a:2d:01:71:1f:e3:57:
26:68:eb:53:ef:01:51:4e:19:38:d1:f2:43:2e:bf:e5:8f:73:
02:1a:d3:11:ed:24:0a:e7:aa:00:7c:b8:f7:50:c8:69:bf:e8:
fd:23:c6:94:cc:b6:29:5d:70:a9:8f:db:19:5c:1e:1a:0e:3b:
5c:d2:ce:e8:9f:cb:a0:af:31:7e:a8:73:37:ba:08:7b:0b:2a:
08:97:d0:38:f9:3c:d3:e6:2a:03:be:60:81:73:03:2e:41:b0:
4a:c9:01:6e:61:1f:e1:e6:d8:3c:ff:85:0b:9e:f6:96:c4:cd:
8e:82:47:bc:fe:19:bd:61:17:28:55:1e:d3:12:f7:df:3e:c7:
55:1e:ba:c9:03:12:6e:f1:c7:f9:f1:76:df:8a:ff:46:7b:a5:
65:4e:34:d9:cc:44:ee:e5:8e:90:9f:4e:fa:e2:b8:56:6b:2c:
c9:0e:00:e6:ce:d6:da:fd:01:c8:6a:eb:74:7f:87:c4:1a:74:
34:15:05:e8:bd:8d:9f:dc:23:8b:9d:1d:15:c5:78:6b:66:2f:
2d:d0:37:e0:5d:c4:7f:93:8f:ae:5b:c7:a8:26:3c:55:b8:69:
6a:9d:d9:fe:a3:2a:52:b7:cf:b8:26:c3:ad:cc:18:08:e5:9b:
6a:42:f0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:13:16 2025 by rpki-client