Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
File: _yBr0QgxynN4dWteFhc4lqYLAZE.mft (raw, json)
Hash identifier: Zm2x2fi3Rzy8Gf+HcgxusV/0RpkwxuHZlvhnH1/wWh0=
Subject key identifier: C6:49:C4:D9:2D:EC:A6:6A:9A:94:12:3A:17:4C:44:03:E3:D7:BE:35
Authority key identifier: FF:20:6B:D1:08:31:CA:73:78:75:6B:5E:16:17:38:96:A6:0B:01:91
Certificate issuer: /CN=ff206bd10831ca7378756b5e16173896a60b0191
Certificate serial: 0194BBCE321F4CA0D5E9365DEDCFED75B8D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
Manifest number: 0BE9
Signing time: Fri 31 Jan 2025 10:00:40 +0000
Manifest this update: Fri 31 Jan 2025 10:00:40 +0000
Manifest next update: Sat 01 Feb 2025 10:00:40 +0000
Files and hashes: 1: _yBr0QgxynN4dWteFhc4lqYLAZE.crl (hash: oryXqCtry9RbenWBFAEdNGYMRTG2jhtLPDXIyNbu07s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:32:1f:4c:a0:d5:e9:36:5d:ed:cf:ed:75:b8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff206bd10831ca7378756b5e16173896a60b0191
Validity
Not Before: Jan 31 10:00:40 2025 GMT
Not After : Feb 1 10:00:40 2025 GMT
Subject: CN=c649c4d92deca66a9a94123a174c4403e3d7be35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:50:1f:36:13:db:9f:f4:78:9b:c1:a9:10:85:
e7:b2:2d:df:12:b6:5f:e5:6b:43:87:55:f4:4e:1d:
c2:9f:6d:12:1c:97:a2:c9:2a:5e:8f:a7:79:60:34:
7b:7b:ef:65:a8:ed:54:9f:cc:b0:a4:82:72:3e:e5:
10:c3:e5:fb:9c:09:12:c4:da:d1:8e:84:de:28:84:
87:bc:52:f7:e6:da:e2:d7:33:33:0f:91:61:77:9e:
5c:30:d9:37:79:ee:f6:6c:c6:fe:36:60:e5:20:80:
6f:d1:53:35:00:85:a5:b1:8d:e7:48:5a:d6:8b:d8:
e6:05:a5:6b:e6:6e:4d:46:d7:c7:8e:05:ad:5a:ec:
01:48:4e:c7:63:a4:2d:e9:db:c7:72:05:ae:77:3f:
75:85:fb:39:93:9c:85:c1:b9:97:2e:35:93:23:d8:
bd:3b:14:ac:c0:c2:43:b6:e3:77:71:e8:8d:78:40:
18:29:f0:97:89:87:e3:5a:8c:67:9f:eb:44:52:83:
b7:be:46:0e:d6:02:18:35:02:0b:a9:95:90:76:2a:
40:05:a7:ec:79:70:ed:11:32:19:a4:e5:0d:34:10:
56:79:0f:55:32:7a:3a:6a:09:75:b6:44:85:61:3d:
e3:cb:bd:cc:32:4d:98:66:98:af:d8:fd:d7:1f:93:
ad:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:49:C4:D9:2D:EC:A6:6A:9A:94:12:3A:17:4C:44:03:E3:D7:BE:35
X509v3 Authority Key Identifier:
keyid:FF:20:6B:D1:08:31:CA:73:78:75:6B:5E:16:17:38:96:A6:0B:01:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:66:13:a7:7a:42:30:6c:b7:f9:96:a7:26:56:bc:25:be:84:
f0:ab:69:ba:aa:b3:59:0b:1a:a6:33:f7:7a:06:2e:de:1b:4e:
22:90:39:b0:c1:1b:b9:f5:00:14:f3:81:76:10:51:88:18:1b:
87:d9:51:67:af:c5:9f:b1:be:6f:22:1e:aa:7f:5c:8d:82:1d:
d6:e4:e7:87:92:79:53:1b:85:00:bc:26:40:52:55:83:f6:fe:
a1:a0:93:68:5a:41:1f:9a:bf:25:5c:c5:ef:c6:0e:aa:59:33:
20:6e:78:88:77:f5:d5:f4:28:f0:0b:d9:57:88:a6:c9:d0:ad:
04:c6:b3:fc:f1:79:2a:41:c4:80:5f:fb:45:2b:14:39:50:2e:
f8:38:48:a6:7b:8c:01:27:83:0a:8b:76:23:90:b1:ca:6c:b9:
4f:20:7b:fd:95:70:f4:ba:20:94:57:c6:c8:bd:5f:45:69:7f:
f1:6c:c7:a7:74:72:72:9c:aa:a3:71:3d:e3:a4:9c:5a:fd:38:
de:c1:cf:7d:57:ef:e6:55:dd:98:19:73:da:28:26:ca:fc:b7:
82:76:07:2a:58:7f:e5:6d:f1:7b:5f:aa:21:ad:d4:24:b5:c4:
2d:9b:e0:93:7a:34:4c:54:d4:3e:04:fd:6e:fc:29:e8:bb:46:
23:f5:30:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:22 2025 by rpki-client