Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/5e2266-a07b-4f20-a064-78ae5984b783/1/yvudtA7PxxFTJYwYkfak4SYh7h0.mft
File: yvudtA7PxxFTJYwYkfak4SYh7h0.mft (raw, json)
Hash identifier: vTSin5cb+RHyWixYW5S70jhjMCFt3T1Smep2G4SAc1c=
Subject key identifier: 63:29:E7:E2:65:EB:A2:76:EB:DC:4C:B7:58:C2:9E:C8:76:B9:75:91
Authority key identifier: CA:FB:9D:B4:0E:CF:C7:11:53:25:8C:18:91:F6:A4:E1:26:21:EE:1D
Certificate issuer: /CN=cafb9db40ecfc71153258c1891f6a4e12621ee1d
Certificate serial: 0194BBCE64F4F1869C7019A3D323A5342E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvudtA7PxxFTJYwYkfak4SYh7h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/5e2266-a07b-4f20-a064-78ae5984b783/1/yvudtA7PxxFTJYwYkfak4SYh7h0.mft
Manifest number: 02AB
Signing time: Fri 31 Jan 2025 10:00:53 +0000
Manifest this update: Fri 31 Jan 2025 10:00:53 +0000
Manifest next update: Sat 01 Feb 2025 10:00:53 +0000
Files and hashes: 1: yvudtA7PxxFTJYwYkfak4SYh7h0.crl (hash: pQcgFYO+YDkGdXQ0BXgzpMYMI4JrqyZk5znZBfqwXKQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:64:f4:f1:86:9c:70:19:a3:d3:23:a5:34:2e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cafb9db40ecfc71153258c1891f6a4e12621ee1d
Validity
Not Before: Jan 31 10:00:53 2025 GMT
Not After : Feb 1 10:00:53 2025 GMT
Subject: CN=6329e7e265eba276ebdc4cb758c29ec876b97591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:32:9c:c2:a1:d1:1a:c3:41:1e:3f:ba:bd:46:
00:a2:cd:ac:78:1a:39:95:bf:77:e0:df:15:e6:60:
15:6d:d7:a4:81:71:3e:cd:96:58:dd:fb:b7:12:88:
3a:5e:af:1c:d1:bb:73:a8:10:04:44:11:4f:56:83:
1c:47:51:e3:f7:aa:ac:10:6b:10:82:43:75:f3:e3:
65:f1:04:2d:f6:6e:52:05:a9:5b:3a:24:fc:0d:71:
8b:0e:e1:64:64:91:a3:2c:da:c2:38:a2:8e:dd:70:
79:e2:5c:de:63:6d:ea:9a:f5:46:40:d8:65:58:10:
b6:e3:7e:c8:e8:e4:a4:4d:f5:a0:fa:4d:c0:cd:05:
70:c5:8a:85:d0:ee:2f:a0:28:74:a5:a2:40:f5:67:
80:f3:c5:1a:4d:22:b2:e0:b7:06:01:b3:47:46:3c:
59:30:79:79:fa:ad:4e:2b:11:3b:0f:73:5a:63:65:
70:bf:77:3b:fb:a4:bb:41:ef:11:57:e4:a1:81:6f:
f6:ed:e2:21:a2:69:37:f0:e2:e9:7f:a3:4d:15:b0:
0d:33:92:5c:f0:0d:66:39:23:f9:8c:1d:25:03:46:
57:90:5a:71:8d:14:d2:cc:45:aa:ca:23:d9:0f:e0:
9a:f1:0f:ce:eb:6c:6e:a4:c7:1e:db:67:c6:bc:52:
c8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:29:E7:E2:65:EB:A2:76:EB:DC:4C:B7:58:C2:9E:C8:76:B9:75:91
X509v3 Authority Key Identifier:
keyid:CA:FB:9D:B4:0E:CF:C7:11:53:25:8C:18:91:F6:A4:E1:26:21:EE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvudtA7PxxFTJYwYkfak4SYh7h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5e2266-a07b-4f20-a064-78ae5984b783/1/yvudtA7PxxFTJYwYkfak4SYh7h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5e2266-a07b-4f20-a064-78ae5984b783/1/yvudtA7PxxFTJYwYkfak4SYh7h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ab:4e:55:ca:b4:e5:3d:22:33:dc:e9:51:80:fa:d5:c3:af:
f0:08:aa:d8:07:8c:8d:e4:1a:00:80:1f:26:20:16:65:d4:08:
4f:be:13:28:8e:c1:32:ab:c5:82:05:17:dc:f3:a9:9c:ae:ea:
3c:9a:1c:84:92:48:8d:c1:4c:d8:68:62:86:df:e7:2e:d7:26:
c3:dc:0b:9b:88:f3:ad:81:c2:55:ec:cd:4e:2b:16:c0:77:33:
78:f9:e1:37:a4:e1:9a:ed:0c:93:fc:5f:7a:0d:65:6b:4a:2f:
22:47:5c:dc:11:4e:72:ae:48:71:ee:8e:d8:09:f3:a9:d6:a8:
b0:36:c3:c2:9c:f2:fd:03:19:e8:22:33:d6:76:f9:52:c4:1e:
43:0e:95:9f:90:b4:65:d3:7c:b7:96:46:52:3c:ff:91:fc:f5:
72:02:54:a6:e9:36:a0:b2:a7:59:f8:df:37:ec:08:56:4c:2b:
05:45:cc:b4:c4:be:42:41:d9:9c:ce:14:da:15:46:6c:bb:8a:
68:df:73:e6:b9:9d:47:05:d6:9c:96:46:19:b8:7c:1b:a7:d8:
b8:95:9e:b1:2c:3e:fc:51:dc:3f:85:ba:97:fc:34:34:14:45:
fe:43:57:51:a1:00:e5:ac:b7:98:ea:0a:e9:9d:83:76:e2:1e:
88:2c:db:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:42 2025 by rpki-client