Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
File: YE1FsSrOCsIjA-08d5S4MGpqtbA.mft (raw, json)
Hash identifier: 5n3HDUh5BQlDrmFpVVv22XTmXUNdk7sEanJvHW5ztP8=
Subject key identifier: D3:B3:1F:65:64:42:23:D5:EC:F9:39:87:E0:E5:FB:48:0D:F7:23:96
Authority key identifier: 60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
Certificate issuer: /CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Certificate serial: 0194BBCDE5838EAC330D178ACCE253B615AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 10:00:20 +0000
Manifest this update: Fri 31 Jan 2025 10:00:20 +0000
Manifest next update: Sat 01 Feb 2025 10:00:20 +0000
Files and hashes: 1: YE1FsSrOCsIjA-08d5S4MGpqtbA.crl (hash: vbm7Hl1lwegeOF5zxO7aMtJbjA9qAxMlWK9dfw26R44=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e5:83:8e:ac:33:0d:17:8a:cc:e2:53:b6:15:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Validity
Not Before: Jan 31 10:00:20 2025 GMT
Not After : Feb 1 10:00:20 2025 GMT
Subject: CN=d3b31f65644223d5ecf93987e0e5fb480df72396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:75:77:8b:37:6b:5f:c1:88:e1:e2:0d:90:74:
da:f4:47:2d:c0:4f:2b:2a:8b:7e:ab:aa:f4:b7:f1:
19:32:81:e2:66:39:ca:88:68:59:e2:d9:33:30:8c:
3d:46:0f:93:ef:fe:e8:f5:04:4a:a2:76:85:b6:4b:
11:77:c8:13:14:38:bc:6f:d2:6f:68:71:e4:18:b8:
04:c7:8c:30:2c:5e:41:50:37:9c:81:f9:08:78:54:
06:ca:fc:4c:1b:94:43:cf:8d:ea:6b:75:45:19:c9:
fc:5f:db:d5:42:9e:53:3a:a5:41:a5:a2:88:2f:d2:
3a:45:9f:e1:d7:c4:b0:6b:79:bd:59:fe:a0:f0:97:
d5:03:cd:86:7d:b0:7b:02:0a:db:95:e3:fa:11:ff:
6f:53:07:0f:6f:d2:af:4f:97:b1:a0:75:dd:ce:69:
f8:20:fe:b1:98:6b:3d:f6:7f:f1:0b:3e:38:2c:5a:
84:90:ab:92:e7:92:27:e3:8c:66:e4:75:53:86:2e:
3f:1d:57:cd:30:74:82:0a:17:69:ed:9a:f2:1a:27:
34:18:28:75:fe:88:c8:09:df:74:5b:97:2d:04:9e:
4b:e9:7c:40:69:09:22:50:59:53:38:df:b0:1f:e8:
11:e6:3f:41:9f:cd:c3:de:d5:9c:95:95:b1:b7:90:
90:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B3:1F:65:64:42:23:D5:EC:F9:39:87:E0:E5:FB:48:0D:F7:23:96
X509v3 Authority Key Identifier:
keyid:60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e8:c2:7f:c0:25:a4:4f:0c:19:85:4d:14:6e:b0:f3:8e:8d:
ae:9d:2e:06:90:d8:f6:01:33:37:48:77:b8:f6:ad:7b:22:b4:
00:43:89:40:9d:b4:db:7f:43:ee:44:01:7f:2a:1a:67:8a:a6:
82:4a:8c:2d:5c:af:1d:a8:18:89:75:f7:d2:66:02:fd:10:0d:
5e:7c:b4:2e:f6:b0:ab:aa:05:21:5e:eb:7f:ed:8c:26:8e:a4:
f9:a5:59:ab:e6:21:b4:89:ef:48:52:52:23:0d:fd:aa:a8:fe:
fc:a9:fd:ad:c6:12:1d:14:0d:19:78:d9:4b:4e:37:69:fd:69:
dc:f8:c2:ac:e9:97:df:ce:91:28:ef:c8:71:0e:d2:e4:4e:26:
fa:6e:00:71:29:6b:00:b7:9d:a1:19:40:5e:10:d4:5c:d6:9d:
6e:c4:81:65:e1:d3:0a:3b:53:89:43:fa:95:ef:07:2b:01:08:
a5:4a:d1:39:ce:d7:39:70:d8:6f:63:e5:0f:c5:2b:dd:9a:bd:
5a:6e:b2:34:c5:d9:9c:91:9b:4d:08:06:c2:1f:43:53:1b:13:
b8:4a:52:9d:d3:38:00:e8:39:7a:ac:8d:af:3e:fe:04:e4:96:
5d:36:f4:a8:69:e8:be:f2:92:40:9a:6b:d5:79:84:f3:d2:2f:
be:b3:ef:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:06 2025 by rpki-client