Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
File: yHfSSx1xwCFHafEZ33KY_wz4l7A.mft (raw, json)
Hash identifier: oYA/ecDgQzyIyIgKQclpYbyejVeyOaHStFMRqTpvFe8=
Subject key identifier: 7F:48:D0:E1:72:75:1A:39:66:0B:8C:95:B7:2D:AB:3E:53:1D:4B:E4
Authority key identifier: C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
Certificate issuer: /CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Certificate serial: 0194BCA9806FAB24A2122AF0E4E980957666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
Manifest number: 0894
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: yHfSSx1xwCFHafEZ33KY_wz4l7A.crl (hash: zk6yNRJ3HR+Oh0w7xaLR0ygaYlj8ghija5hFA71ErEo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:80:6f:ab:24:a2:12:2a:f0:e4:e9:80:95:76:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=7f48d0e172751a39660b8c95b72dab3e531d4be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:ed:82:bb:4f:80:f5:58:94:2d:b0:f2:64:
bd:99:ff:70:2b:ba:6c:97:29:aa:f6:6b:03:83:0d:
38:a0:a4:a2:1d:08:47:59:fb:b8:d7:1c:1a:41:10:
1f:e5:c7:3b:81:0b:d5:08:ba:12:94:77:b2:16:7e:
6d:77:bc:46:e8:ad:5c:87:d5:51:61:0b:fd:8b:34:
74:15:2a:44:6f:17:e0:0d:55:2c:fb:cd:74:0e:37:
04:48:66:2b:3b:d0:f0:cd:84:7a:b9:98:77:c5:fa:
81:20:d8:52:3b:6f:2d:0f:bc:60:c4:ea:9c:3b:a2:
5c:e4:62:c7:a1:95:18:37:a5:c9:f2:9a:af:33:ed:
ca:47:22:b3:1d:dc:44:4c:e5:e3:f1:51:31:eb:da:
df:bd:e5:cd:87:84:1f:e1:5b:a1:9f:99:2f:6c:45:
b7:ae:8d:0d:58:57:86:3c:9b:9f:31:a0:e2:25:a9:
92:98:66:a1:4d:9e:76:4c:2f:af:9f:01:f2:59:ac:
64:12:b6:d9:aa:a8:01:96:c2:4e:8a:6f:f5:4d:da:
2d:cc:c2:9d:71:c6:0f:c0:07:88:40:59:1a:e0:59:
59:b1:0d:7c:d1:d1:b5:74:20:f2:84:77:b4:c0:6d:
17:a4:a6:96:7d:34:07:74:40:7b:54:32:b6:5b:ce:
b5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:48:D0:E1:72:75:1A:39:66:0B:8C:95:B7:2D:AB:3E:53:1D:4B:E4
X509v3 Authority Key Identifier:
keyid:C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:cf:b5:7f:33:ee:ba:e3:4c:c7:ed:03:ca:30:d5:8e:74:80:
68:41:76:38:fa:f4:27:dd:f0:31:e5:ce:4d:cf:fd:70:e6:78:
be:74:22:f1:a5:a4:79:7a:db:d0:4d:5c:4d:97:9f:79:b1:41:
ea:71:43:e2:55:17:b6:a8:c8:92:ea:a4:ce:4e:a4:26:cf:06:
77:27:9c:4d:7e:a7:a3:3f:6d:19:81:bb:f4:3c:ff:62:9e:bb:
41:58:8e:56:cb:29:9a:1e:5d:ed:b8:46:af:8f:04:67:cc:7f:
63:af:9f:04:d5:d5:e3:4b:e3:18:8a:8c:fd:c3:6c:e9:b5:0d:
39:b8:53:14:22:0d:ba:3c:f7:e0:fb:44:00:42:be:84:11:91:
b7:f2:9e:0c:d2:a1:f6:13:07:21:8d:39:cb:fa:52:7f:20:3b:
37:d3:26:f8:84:64:86:a7:6c:af:5c:fb:99:ce:56:34:0c:2a:
73:6a:97:c7:fa:95:a8:a5:0d:f4:d9:27:ff:12:33:1d:a5:a9:
e3:71:5c:71:a4:1c:c9:28:d4:86:fc:bf:49:2b:0c:57:6b:fc:
d5:6a:37:c6:67:7d:4a:37:89:b7:5b:ce:3e:eb:f4:0d:5f:2b:
09:59:f7:56:b7:7e:27:60:e3:10:fd:2c:52:6b:45:ce:f7:93:
98:76:0f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:43 2025 by rpki-client