Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
File: YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft (raw, json)
Hash identifier: 3qBks933mRvbgxVY4h8HhCgH5a/f6bAyZ+4p8+SBQXs=
Subject key identifier: C3:59:BA:CD:46:3A:23:6B:B8:76:49:E5:86:98:6F:87:70:97:86:64
Authority key identifier: 61:9A:79:41:E0:C2:C8:61:32:2F:83:1E:D0:6F:07:FB:70:85:A3:BB
Certificate issuer: /CN=619a7941e0c2c861322f831ed06f07fb7085a3bb
Certificate serial: 0194BD17A76CC450524EB0240AC51C306E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
Manifest number: 1045
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl (hash: BU4XYkNT7i9H6naLY08FTIUaw5/xQpWpNPUoArj+So0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a7:6c:c4:50:52:4e:b0:24:0a:c5:1c:30:6e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619a7941e0c2c861322f831ed06f07fb7085a3bb
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=c359bacd463a236bb87649e586986f8770978664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:bd:07:d6:20:f4:13:b2:11:2b:b7:57:4f:
6e:75:98:ed:66:ad:9f:e9:16:e1:f2:b4:a3:ed:3e:
f8:8f:04:cd:b4:9b:14:de:e5:b1:12:08:4e:4c:4c:
ea:a2:b8:a1:cb:e8:53:97:88:2a:e0:3b:8c:57:25:
10:d4:ad:ed:19:af:7f:8e:ac:2f:61:b4:9e:37:3c:
f6:20:78:43:ef:25:24:82:bd:f7:7f:e4:9d:48:3e:
f8:07:c3:41:6b:20:1f:6c:f9:fd:43:f9:c6:7e:d1:
46:0c:a8:7c:e5:d4:16:e9:f2:6f:69:eb:7b:b2:7c:
cc:b1:9b:a6:06:d4:9f:17:2f:4f:78:40:b0:59:53:
3d:84:af:ba:ba:45:07:43:6f:25:9f:68:85:ba:62:
5e:97:43:15:16:43:06:0f:08:1c:95:16:fa:35:cf:
a2:2f:fe:07:df:22:dd:8c:3f:96:85:ec:76:7a:d0:
74:c9:b1:4e:7f:9c:75:2c:c4:9f:73:86:48:a6:1b:
97:68:d7:09:90:4d:85:4d:9e:88:88:ef:5c:72:c1:
95:4a:3b:2c:2a:8a:ec:ed:2c:9c:2e:03:e0:f5:d8:
41:4b:2b:5d:f7:a1:63:65:ea:00:31:d3:2d:6f:fe:
95:51:a4:10:4c:65:85:36:a2:f6:c0:78:89:7f:2e:
ae:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:59:BA:CD:46:3A:23:6B:B8:76:49:E5:86:98:6F:87:70:97:86:64
X509v3 Authority Key Identifier:
keyid:61:9A:79:41:E0:C2:C8:61:32:2F:83:1E:D0:6F:07:FB:70:85:A3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:8d:a9:cd:af:06:47:98:82:ef:4a:4a:93:51:4e:2c:d3:58:
42:e2:7c:76:fa:81:1d:06:b4:81:1f:7e:55:11:d9:e0:18:33:
2f:9f:87:1b:b3:b8:f0:b8:68:ba:26:28:d8:a4:1e:a6:d8:01:
50:c5:76:07:81:24:74:de:9e:21:bd:57:a7:33:8b:6f:4e:9f:
b4:24:d5:cf:a2:4b:89:4a:f3:96:c7:3e:19:0e:5d:dc:e6:e3:
3b:e4:e4:f3:b0:b3:0f:a1:a0:01:7f:5b:73:81:c8:09:ff:cd:
de:60:d6:26:52:6c:8d:ea:de:8f:b0:04:f3:e1:cc:ee:d1:f0:
5c:15:38:87:fc:88:85:f4:5e:f0:d0:ac:46:a7:dc:d2:ac:27:
a0:17:68:a6:cc:46:76:57:be:30:53:60:ef:28:34:b0:c7:3b:
c4:21:eb:04:6c:ae:76:2e:b8:54:cc:1a:48:b3:31:0b:0b:89:
c9:d7:15:dc:90:95:38:18:51:6e:f2:42:b7:d0:ce:58:0c:55:
ce:1c:dc:9d:93:0b:59:09:86:c3:f0:4d:bf:f9:3e:ca:cd:0a:
ca:06:3c:98:6d:2c:69:b5:db:a5:41:96:38:bf:ad:18:a8:59:
d0:95:a8:ac:bd:8e:74:4e:73:0f:dc:54:b3:96:41:d1:14:4a:
77:02:6f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:24:59 2025 by rpki-client