Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/da0c64-9128-4eeb-a35a-90cd53d6732e/1/YHE9sXNxkpe4_FKLXEM4RKFaMgs.mft
File: YHE9sXNxkpe4_FKLXEM4RKFaMgs.mft (raw, json)
Hash identifier: QhTx4KCuXSBDaN5uP7lnVXWr/ONrCnipOp60WEwp/U8=
Subject key identifier: 54:8A:A7:A2:17:20:5F:7C:B9:D9:3C:09:19:06:BC:3A:B6:AF:2D:D1
Authority key identifier: 60:71:3D:B1:73:71:92:97:B8:FC:52:8B:5C:43:38:44:A1:5A:32:0B
Certificate issuer: /CN=60713db173719297b8fc528b5c433844a15a320b
Certificate serial: 0194BBCE37E62BB2A20DB88D821AE831014D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHE9sXNxkpe4_FKLXEM4RKFaMgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/da0c64-9128-4eeb-a35a-90cd53d6732e/1/YHE9sXNxkpe4_FKLXEM4RKFaMgs.mft
Manifest number: 0D43
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: YHE9sXNxkpe4_FKLXEM4RKFaMgs.crl (hash: 1Ar4+GtkUwBb01rPVm+IQwn8r3tOUSCqkBPDBP28H/o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:37:e6:2b:b2:a2:0d:b8:8d:82:1a:e8:31:01:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60713db173719297b8fc528b5c433844a15a320b
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=548aa7a217205f7cb9d93c091906bc3ab6af2dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:9e:9f:c0:b5:52:84:bb:18:bb:14:51:49:
b4:ce:39:18:8e:48:ae:38:35:34:9f:75:54:48:b7:
f5:69:86:e6:0b:d7:f7:c9:14:8a:b7:c0:60:58:d3:
4b:11:94:24:ea:a7:c0:f8:b4:48:10:f8:5b:0b:2e:
aa:79:4a:9f:7b:af:1c:d0:f3:2a:6d:7b:c3:11:d3:
7a:82:64:35:b7:db:ac:64:04:d3:06:5e:8d:e1:fb:
3e:7c:90:69:fc:11:af:af:ff:4b:fc:d9:17:f1:62:
52:99:ea:0d:80:04:4d:15:c1:4d:f4:23:ef:bf:64:
42:c5:ed:85:59:74:96:54:38:81:d5:d2:6e:0e:d4:
72:7a:73:b7:f0:ae:3d:96:a5:cc:d8:db:e2:c0:a2:
b6:00:ee:f6:e3:70:41:55:de:17:90:7a:31:29:9d:
07:0f:9b:ab:03:d5:34:53:f4:65:a1:5d:1a:20:4f:
23:b3:2e:68:25:5e:3b:7f:11:42:c1:c4:64:bf:06:
8e:7b:b1:a8:38:ee:c6:e4:d4:f4:6e:e6:fe:c7:09:
11:d9:cb:b5:28:c7:6c:7c:40:4c:dc:4d:43:50:f1:
3e:db:31:8a:71:e5:0a:28:4f:19:e5:3a:4c:32:5d:
5f:70:de:41:6d:9f:cf:f2:26:86:0c:de:82:5a:07:
1c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8A:A7:A2:17:20:5F:7C:B9:D9:3C:09:19:06:BC:3A:B6:AF:2D:D1
X509v3 Authority Key Identifier:
keyid:60:71:3D:B1:73:71:92:97:B8:FC:52:8B:5C:43:38:44:A1:5A:32:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHE9sXNxkpe4_FKLXEM4RKFaMgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/da0c64-9128-4eeb-a35a-90cd53d6732e/1/YHE9sXNxkpe4_FKLXEM4RKFaMgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/da0c64-9128-4eeb-a35a-90cd53d6732e/1/YHE9sXNxkpe4_FKLXEM4RKFaMgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8b:0c:d0:ba:24:99:14:a6:f9:5a:c6:f7:5d:be:70:03:a1:
e8:ea:a5:b0:94:f3:4b:bd:2c:35:07:ff:b9:0d:47:79:86:2d:
6d:82:fd:78:b7:bf:49:ea:ea:1b:8f:ee:d2:70:25:67:83:96:
e2:11:02:12:a1:50:ac:50:39:bd:6f:45:be:9a:66:f5:87:6d:
b6:2c:fb:5e:4a:a3:49:74:0a:59:c8:a2:89:5c:c8:b5:89:d3:
8c:89:de:0e:56:7f:12:b8:97:5f:d1:26:b5:7e:0d:4f:9f:66:
2c:d2:40:c8:63:b1:a3:71:19:49:5b:26:8d:59:c7:56:b8:ec:
d4:0f:19:57:9d:20:a3:fa:dd:b2:68:a6:c0:da:4b:b4:04:92:
07:c6:0a:8c:e4:21:b6:dd:ec:18:f2:ca:43:df:59:75:c8:2d:
2f:1f:82:38:98:60:bb:4b:44:78:07:d6:63:8e:43:cb:48:24:
88:31:10:bd:c9:f7:a9:ff:d6:f9:07:c9:cb:b8:83:9b:85:8e:
91:84:b9:35:f5:ae:1b:b7:a9:b4:45:80:76:6d:35:90:c2:ec:
19:7a:5d:80:7c:9b:ea:de:85:2e:20:df:0f:f3:4c:82:56:b6:
45:12:c8:b1:62:88:f8:34:2f:f7:dd:f1:f1:65:85:d4:b2:26:
8f:2e:58:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:36:45 2025 by rpki-client