Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft
File: yYDRnDv8xARxVndvAqNJiY5GuQ0.mft (raw, json)
Hash identifier: psMs2eX5n6KVQdLvBtqcaTZLTlB+ozlBwsclhThRFhk=
Subject key identifier: 50:04:8D:DA:20:E5:67:28:88:70:9F:BB:AB:4B:07:1F:69:27:FD:EC
Authority key identifier: C9:80:D1:9C:3B:FC:C4:04:71:56:77:6F:02:A3:49:89:8E:46:B9:0D
Certificate issuer: /CN=c980d19c3bfcc4047156776f02a349898e46b90d
Certificate serial: 0194BBCEE2EC3F436E00CCF60E5BFEE9658C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYDRnDv8xARxVndvAqNJiY5GuQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft
Manifest number: 0745
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: yYDRnDv8xARxVndvAqNJiY5GuQ0.crl (hash: VLo6/aCxG31HQIjNY6oOD5WpwjVt8nb70T9i4OizoZU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e2:ec:3f:43:6e:00:cc:f6:0e:5b:fe:e9:65:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c980d19c3bfcc4047156776f02a349898e46b90d
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=50048dda20e5672888709fbbab4b071f6927fdec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:62:c3:32:cd:1e:28:e7:bc:e3:33:95:f0:88:
65:d9:9a:5b:c2:01:d9:23:7d:38:d4:56:b8:31:f5:
96:9a:2f:76:04:2b:ef:b2:8b:27:9c:8d:dc:9b:36:
6e:41:d7:b4:3a:5e:9e:0a:cc:91:49:bc:9f:7b:17:
d2:46:82:42:c3:74:bd:71:f9:44:64:fb:bb:d4:cf:
b7:0c:3e:49:5f:49:05:6b:2f:83:e4:dc:34:79:30:
bc:20:b7:10:1d:eb:5c:6d:66:a4:7e:24:d7:c3:76:
24:02:a7:bc:e2:8b:9c:fe:c0:48:c2:b0:c1:67:c7:
92:75:3b:f2:23:a9:bf:e2:04:4f:48:58:48:c2:1a:
84:37:11:4e:81:55:0e:1f:19:87:e3:16:38:f3:15:
5c:1a:1c:21:47:1d:63:ff:ad:83:9d:72:a4:b1:a5:
d6:af:7e:80:f5:c7:87:4f:3a:82:fc:66:87:e4:6b:
71:31:5a:a8:1a:fc:cc:f8:30:c4:61:e8:61:63:ae:
26:4d:f4:62:2b:e0:2d:65:61:74:a4:d6:64:ad:62:
1e:3a:09:e4:a7:47:ed:f5:55:c2:2d:da:06:ae:af:
72:4e:86:b2:2a:cd:ba:a7:cc:b5:e5:3b:e9:95:d7:
80:3f:57:89:9c:2c:64:a6:2f:3a:99:e1:fb:fc:59:
a1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:04:8D:DA:20:E5:67:28:88:70:9F:BB:AB:4B:07:1F:69:27:FD:EC
X509v3 Authority Key Identifier:
keyid:C9:80:D1:9C:3B:FC:C4:04:71:56:77:6F:02:A3:49:89:8E:46:B9:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYDRnDv8xARxVndvAqNJiY5GuQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:35:b7:c2:c8:b6:02:48:76:88:56:28:cc:38:7a:94:8b:b7:
7b:21:f4:6f:b7:f4:dc:85:b7:59:7c:8b:c6:66:13:64:fc:02:
96:d6:b8:3f:a6:c3:04:79:b3:29:d9:62:27:e3:b0:bd:a0:29:
d6:e7:3a:5f:a8:04:f1:f3:80:5e:5f:34:52:df:df:5e:ee:0d:
14:7a:72:49:2e:02:25:20:f7:c4:a8:7c:69:1f:59:b2:93:ac:
db:bf:e8:b6:64:8c:ba:0a:89:fa:18:01:77:35:3d:1b:84:05:
86:83:46:6b:a9:fb:36:a9:68:07:cf:ad:5f:18:cf:30:2b:42:
c9:ae:69:d5:4d:61:a6:c9:7b:11:88:e6:cf:eb:7e:b4:4b:01:
6e:d0:36:47:e3:a5:f3:43:ec:86:a4:0c:64:df:45:cb:88:0b:
1f:fe:06:e9:8a:98:39:07:62:85:80:41:5b:35:70:53:61:63:
fc:30:f3:8d:e2:09:e6:9c:02:2f:5f:20:0b:cc:38:5f:6f:3b:
3b:a8:41:34:33:3a:6c:ee:36:34:86:54:11:e5:08:20:5d:4c:
d3:e6:f8:6e:f5:ae:ce:58:d6:24:9e:47:45:24:3c:ae:7f:cb:
fe:de:49:65:36:8d:8c:9a:b7:c8:86:c4:ac:cc:6a:37:0a:7f:
42:7f:c3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:38 2025 by rpki-client