Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
File: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft (raw, json)
Hash identifier: IgXBwFJJH216Dc109aHcbQ2uO7Ch85pGuX/KPmB82eY=
Subject key identifier: 42:9D:5C:F3:44:4C:E6:29:17:DD:D1:C3:55:FA:09:3E:54:6D:88:F3
Authority key identifier: CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
Certificate issuer: /CN=ca2ded27751f291c0b55b79457207cb3a255197c
Certificate serial: 0194BBCE4C5DA60BAF7A28B359DC61393F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
Manifest number: 13B8
Signing time: Fri 31 Jan 2025 10:00:46 +0000
Manifest this update: Fri 31 Jan 2025 10:00:46 +0000
Manifest next update: Sat 01 Feb 2025 10:00:46 +0000
Files and hashes: 1: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl (hash: tUqeBOK7A/PPsKgZYFgactmGxO8SSAwUi1C2Pzi0Y2c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4c:5d:a6:0b:af:7a:28:b3:59:dc:61:39:3f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca2ded27751f291c0b55b79457207cb3a255197c
Validity
Not Before: Jan 31 10:00:46 2025 GMT
Not After : Feb 1 10:00:46 2025 GMT
Subject: CN=429d5cf3444ce62917ddd1c355fa093e546d88f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:5a:b8:0d:5e:dd:3b:87:ff:0e:48:85:6b:
7c:91:b2:85:4f:a8:6b:a7:e1:c2:21:76:5f:34:fe:
a5:ed:06:89:3f:88:af:97:37:da:64:f6:14:d9:b1:
4e:e3:59:c3:4e:2e:a0:f0:a8:a6:a9:ae:da:9a:31:
f6:6d:e3:ef:05:08:7b:00:82:e9:5e:e3:1b:cc:0d:
b4:0a:05:50:aa:b8:7e:94:a8:b8:ef:d6:0a:31:7c:
60:3f:19:2c:70:91:d5:76:0e:3d:5d:70:28:1d:b7:
13:4b:b5:33:98:f0:e4:7f:aa:28:e0:4f:27:f0:c3:
05:03:39:a4:dc:1f:e6:aa:bf:9f:c2:b6:c1:e7:a3:
38:0a:26:67:54:9a:eb:6d:d1:f3:b6:7f:25:79:7e:
b7:75:3d:08:a3:0c:5c:ae:19:8a:69:e8:67:82:e9:
d9:ee:54:6f:02:f0:0d:13:54:e8:5a:4f:26:39:32:
6a:b7:ed:35:8c:50:b5:df:cf:8b:49:fe:81:48:37:
ee:0b:5c:b5:5b:8a:f2:11:dd:a9:05:a2:bd:d5:d0:
aa:c7:f8:93:63:7b:5f:40:be:0c:a5:cb:75:0c:c6:
12:f7:47:81:59:80:b3:cc:c9:d5:71:09:d1:1e:8e:
86:df:0d:d8:df:90:71:9d:b7:ef:ca:b6:5c:cd:20:
31:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9D:5C:F3:44:4C:E6:29:17:DD:D1:C3:55:FA:09:3E:54:6D:88:F3
X509v3 Authority Key Identifier:
keyid:CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:70:43:0a:b3:d5:0b:26:52:27:04:44:fd:6d:dd:a7:6d:b7:
fb:41:77:0d:cb:2c:6a:69:e6:b1:fa:d5:b4:c0:dc:18:7e:b6:
9f:81:c5:dd:bb:2a:b3:50:df:0c:ca:aa:9b:2e:35:45:47:83:
f4:81:0b:1a:0e:0d:f9:6b:7e:89:b2:57:a6:bc:15:c2:4c:09:
0b:a8:06:a4:fc:68:c0:6a:e5:da:fb:ad:4a:e8:0f:91:3f:9a:
b5:bc:c6:6a:3f:10:50:17:99:34:d9:8f:ff:81:8b:e6:cc:47:
fd:84:18:7e:50:39:d1:a2:89:af:b1:f4:f7:f4:8d:bd:bd:b1:
32:68:c3:37:76:ab:a8:61:0f:fb:e3:1d:50:50:98:89:bd:c7:
61:e2:cd:a9:ce:3f:bb:15:7f:3d:e8:1e:12:80:fe:71:c7:03:
66:e2:da:51:94:b0:fb:2e:e5:af:7e:69:4c:fb:05:e3:70:c6:
17:57:c8:ca:e9:8f:c8:0b:27:17:c0:0e:ce:78:34:71:cf:87:
b8:62:e0:71:b8:9c:06:28:b5:f8:c0:6c:9f:08:15:9a:20:58:
40:77:ca:15:17:8b:10:b0:0a:de:ec:1a:47:57:48:32:14:af:
88:0b:e5:67:c6:49:9b:50:62:d3:ab:bc:2b:27:2e:67:54:af:
9e:ec:53:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:49 2025 by rpki-client