Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.mft
File: yoaOeySqNaTdEKyVmfBkqpadAx0.mft (raw, json)
Hash identifier: RkzTBcTssT1zkp6biUqyLrqkMjiR1yi4cOxFjZjJQnw=
Subject key identifier: E7:72:D9:24:8A:F6:18:85:79:13:4C:1C:41:E4:C2:E5:32:03:17:C4
Authority key identifier: CA:86:8E:7B:24:AA:35:A4:DD:10:AC:95:99:F0:64:AA:96:9D:03:1D
Certificate issuer: /CN=ca868e7b24aa35a4dd10ac9599f064aa969d031d
Certificate serial: 0194BCE0D165FE759212D85F74839BCBBDF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yoaOeySqNaTdEKyVmfBkqpadAx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.mft
Manifest number: 9C
Signing time: Fri 31 Jan 2025 15:00:37 +0000
Manifest this update: Fri 31 Jan 2025 15:00:37 +0000
Manifest next update: Sat 01 Feb 2025 15:00:37 +0000
Files and hashes: 1: yoaOeySqNaTdEKyVmfBkqpadAx0.crl (hash: razuVAzElsNEKICqn1LIVwVDft7DYT/332WMqsjqjlg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d1:65:fe:75:92:12:d8:5f:74:83:9b:cb:bd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca868e7b24aa35a4dd10ac9599f064aa969d031d
Validity
Not Before: Jan 31 15:00:37 2025 GMT
Not After : Feb 1 15:00:37 2025 GMT
Subject: CN=e772d9248af6188579134c1c41e4c2e5320317c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9d:6a:54:ad:63:14:97:67:19:8f:e9:d2:4d:
a1:a1:7e:b4:28:2e:44:64:4e:d1:e8:b1:c1:58:3f:
a6:70:d6:ec:7b:2c:21:3c:77:07:41:94:ed:a4:f2:
3b:cb:77:80:f8:a1:79:43:95:8d:a6:2d:fd:7b:73:
98:67:a0:d8:6b:3a:bd:59:33:dc:04:47:bc:82:b6:
0a:80:81:d9:91:d1:bd:7f:df:66:65:8f:2e:5a:43:
c5:be:85:a3:4b:a4:76:1c:1b:7b:97:77:3b:ca:0b:
38:67:6a:0d:29:4c:bb:bd:83:a7:c6:f5:31:ab:7d:
d9:2f:da:5c:8d:5a:c6:b8:91:ab:0e:07:30:0f:b5:
c1:75:11:42:3c:20:87:66:ea:b4:95:84:8d:f8:86:
25:17:a6:fc:e1:dd:a9:5b:d5:3f:32:1a:ee:e1:96:
5f:2c:8c:7b:ba:66:66:60:a9:71:84:3f:25:44:72:
fb:8e:a2:5b:9f:57:4d:3d:61:8c:c1:48:e8:05:6b:
26:28:d0:a6:f3:30:f6:fc:c5:6b:3c:9e:c4:11:52:
78:4c:eb:a2:f7:bb:01:a3:2d:b6:10:6c:f5:62:3b:
0a:af:d3:82:95:b8:32:d9:8c:c7:17:50:66:b0:af:
2c:b7:ba:09:f7:5f:c6:06:3e:87:df:9e:7d:c2:df:
50:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:72:D9:24:8A:F6:18:85:79:13:4C:1C:41:E4:C2:E5:32:03:17:C4
X509v3 Authority Key Identifier:
keyid:CA:86:8E:7B:24:AA:35:A4:DD:10:AC:95:99:F0:64:AA:96:9D:03:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yoaOeySqNaTdEKyVmfBkqpadAx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3d:e0:6b:2e:9f:48:0d:9b:d8:b4:24:21:2d:4d:35:9a:b0:
83:e9:e6:fb:f4:00:2a:fa:a7:ae:cb:07:51:ba:9f:e3:ec:1e:
43:03:92:cd:af:15:ff:b5:ae:b3:59:71:fd:02:f1:f1:37:4a:
bd:7f:da:7e:da:c6:26:f0:7a:77:8c:04:8f:97:c7:23:d0:65:
cb:e8:08:fb:f2:2d:20:74:a0:23:48:8c:0e:12:fc:84:05:f5:
d1:51:92:ce:ff:ac:7d:68:e1:58:cc:ed:46:8a:2e:2a:e5:ac:
b9:88:eb:f2:4e:17:10:8e:b3:d8:46:60:59:34:44:ad:6e:aa:
3b:bc:9b:eb:9c:b4:2f:ba:15:e8:a1:31:04:54:66:2d:0f:d2:
eb:18:16:50:63:61:97:d0:c7:90:ae:4b:98:ee:a2:29:5d:98:
71:f7:98:a0:ef:8f:ee:1f:a9:c4:48:08:35:15:37:f2:8c:79:
be:5c:19:1d:60:4b:ca:18:cb:6c:18:d0:32:de:d5:c2:31:68:
c2:9c:f7:02:11:ab:9e:bd:0a:0f:21:53:a7:33:e9:63:28:4c:
7b:43:d7:ba:d2:8f:9e:d4:91:d6:85:fd:af:7e:b5:9a:24:f2:
b0:60:4f:85:79:cc:0e:72:2a:08:2a:6a:b6:01:8d:d9:9b:e8:
45:52:67:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:53:11 2025 by rpki-client