Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
File: YsuMEjOwFrHwSBCJc9asPnYvY-0.mft (raw, json)
Hash identifier: d9b2vbbMHc2jd6mYq/agsXcR27LhflwgTsxX1rsDa0o=
Subject key identifier: 65:9F:7D:57:F4:22:A0:13:A6:A9:20:F4:78:82:19:B1:A3:B0:D8:62
Authority key identifier: 62:CB:8C:12:33:B0:16:B1:F0:48:10:89:73:D6:AC:3E:76:2F:63:ED
Certificate issuer: /CN=62cb8c1233b016b1f048108973d6ac3e762f63ed
Certificate serial: 0194BC3C84A3B64055FB5AB54294A814192E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
Manifest number: 0FD2
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: YsuMEjOwFrHwSBCJc9asPnYvY-0.crl (hash: ssOPpf05Kdd17RCZwOltWxWJkPQO+JJ4i4mmkBYwHt0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:84:a3:b6:40:55:fb:5a:b5:42:94:a8:14:19:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62cb8c1233b016b1f048108973d6ac3e762f63ed
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=659f7d57f422a013a6a920f4788219b1a3b0d862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ff:f4:0a:d9:7d:c9:ec:57:0f:46:74:55:7d:
14:91:34:00:c2:96:04:3d:33:7e:9b:5f:2b:2a:f6:
4e:7c:bb:24:40:af:e6:cb:1b:8d:03:51:04:f9:b0:
25:6e:29:53:dd:66:f0:5a:ab:5e:b2:d7:5b:a9:63:
9a:2e:da:9e:9f:9a:97:ab:47:88:77:cb:ce:c0:d9:
bd:f5:9f:19:8e:45:34:11:72:dc:b2:d1:61:94:5b:
58:43:74:c0:17:c0:88:dc:24:64:e1:51:be:59:d0:
68:e0:bd:22:f5:56:cb:a2:cf:ee:19:10:fa:eb:95:
17:5b:f9:11:d7:19:8b:a5:a9:8e:ad:3e:51:d3:22:
45:5e:90:fd:99:18:2d:19:0c:08:49:1a:ec:c2:e8:
49:9b:00:4a:5a:d2:49:85:b0:cb:b6:70:03:bd:b9:
34:fc:4e:70:32:b4:2e:c6:8f:0f:ad:1a:13:b9:06:
f6:e5:99:55:9c:7e:3a:17:19:c9:10:e2:d7:e7:a7:
23:33:98:b1:09:ca:72:d8:b5:4e:65:ff:b4:85:e8:
22:ac:2b:47:04:39:d1:2d:9c:4b:6b:35:ee:34:b4:
e8:3f:db:aa:59:4e:39:c1:3a:7e:a5:c4:05:eb:40:
34:53:70:5f:87:93:66:be:4f:ac:50:af:17:4f:9a:
68:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9F:7D:57:F4:22:A0:13:A6:A9:20:F4:78:82:19:B1:A3:B0:D8:62
X509v3 Authority Key Identifier:
keyid:62:CB:8C:12:33:B0:16:B1:F0:48:10:89:73:D6:AC:3E:76:2F:63:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c0:c0:d3:ad:93:8c:68:9a:a0:cc:e1:94:60:86:15:c2:26:
df:b4:e3:e5:f8:d3:d1:71:de:15:ff:16:57:cb:15:99:47:41:
69:d8:86:d3:a8:c0:b3:21:a6:69:01:77:b7:26:7c:77:78:e0:
d9:63:9b:29:1b:ad:a6:17:56:75:50:ff:d7:16:32:e9:64:30:
1b:c4:65:38:d6:13:1e:f4:29:ed:e0:1b:14:72:b5:39:f4:45:
88:d9:28:61:36:2b:14:37:24:e1:14:f7:dc:27:a3:ba:ba:34:
eb:5d:2d:07:66:5d:52:50:a9:b2:94:13:08:0e:7e:4f:2d:3f:
64:08:1b:06:24:17:f1:56:4e:f7:6b:96:4e:c1:59:7d:36:c7:
25:aa:64:3d:81:77:0e:f7:df:ac:a6:d0:64:9e:2e:94:4b:81:
97:80:6f:c3:38:d9:76:ed:1c:90:40:90:30:b1:5f:94:5d:8b:
73:19:fa:5c:d1:41:a5:96:57:cb:65:0e:62:9f:d9:d5:3c:bd:
fe:eb:21:12:c9:b0:d3:33:97:13:a8:b7:0e:f9:41:36:43:5d:
7e:af:36:cd:62:fc:3e:e4:4b:e4:52:a3:8e:44:94:1a:42:f8:
33:8b:78:13:a7:1f:96:41:1f:f0:7b:08:7f:d9:f5:1e:cf:67:
b2:cf:19:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:23 2025 by rpki-client