Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
File: YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft (raw, json)
Hash identifier: 4hFZo6vT2SWIfR7H7ZQc0zrmbcO+xy+KUpteAyu+YSI=
Subject key identifier: 7F:C5:00:AC:01:F7:8C:04:79:5B:23:C8:3F:50:71:BC:E2:91:AE:E7
Authority key identifier: 60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C
Certificate issuer: /CN=60024324c31a2817923e0f6c53790426e142c24c
Certificate serial: 0194BBCE389745614BA08B67B1E1AD5BAF29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
Manifest number: 0EDC
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl (hash: Lv9rBx+0/ekbM/pLVHSBZR50k053ohrbUuCiS+WEKyU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:38:97:45:61:4b:a0:8b:67:b1:e1:ad:5b:af:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60024324c31a2817923e0f6c53790426e142c24c
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=7fc500ac01f78c04795b23c83f5071bce291aee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:58:1d:75:df:f4:85:ca:24:ed:fb:9b:25:
cd:3b:db:a1:39:21:d2:7c:e4:9a:92:10:78:eb:1b:
34:ed:2f:f5:30:4c:0f:e5:ea:37:ae:12:6a:3f:94:
d3:cf:91:39:82:7d:b9:19:e5:41:a9:5f:5c:6c:31:
06:f0:b5:f5:e7:28:4e:52:67:e7:8e:10:29:8e:62:
50:e3:86:b9:82:80:96:b6:22:35:f5:d2:87:8b:08:
32:9d:d0:60:ba:ac:7a:d3:8d:0b:f4:2d:57:01:6e:
b2:c2:35:9d:fa:fd:6a:c0:0a:b0:f1:39:de:70:22:
4b:8d:c5:a7:0d:be:33:55:aa:46:d2:c3:bd:45:9d:
6b:90:af:be:70:b5:78:f9:1b:d5:9f:1a:28:a2:56:
e8:1e:52:34:28:ac:51:aa:af:1e:7b:0f:ee:48:bf:
d1:84:c2:f7:73:ae:59:ee:7f:93:4f:ca:8c:86:35:
44:1a:54:ff:38:86:d6:88:2d:57:e8:ae:90:31:3c:
da:6d:e1:bc:8e:72:aa:53:3b:0a:70:f2:8f:2b:46:
51:a3:e8:1a:0a:10:88:80:8c:5b:5d:6b:1e:f6:bd:
ef:45:5e:5b:df:f4:52:0b:58:11:83:e1:aa:01:39:
6e:f6:72:14:db:57:76:dc:a3:6f:66:1b:9f:8e:f0:
6e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C5:00:AC:01:F7:8C:04:79:5B:23:C8:3F:50:71:BC:E2:91:AE:E7
X509v3 Authority Key Identifier:
keyid:60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a1:af:8f:19:9b:cc:34:48:02:a2:aa:9d:d7:5e:54:52:e0:
65:3c:3b:82:80:f2:91:e7:7d:0e:9d:2b:f9:c3:20:61:7e:c0:
67:71:97:ce:9e:d6:c5:f8:31:be:dc:26:75:18:5a:f3:e6:6f:
85:da:6b:6d:e9:b0:58:57:ce:99:fd:02:2b:a1:6e:50:9a:06:
f6:3d:12:d2:64:57:63:c4:78:99:c4:33:aa:47:2d:76:39:5f:
52:9c:cf:5b:57:56:93:63:42:b1:90:0c:6b:5d:79:ed:af:9b:
6b:84:cc:31:2f:7b:08:ad:37:ac:3b:87:2b:98:11:90:9e:fd:
fb:20:72:33:dc:5e:9f:eb:68:35:4e:45:88:04:d4:41:17:ab:
0a:ef:b0:fb:db:d4:01:01:6d:f9:07:9a:df:a6:89:4e:da:02:
6d:40:cd:de:d7:bc:5b:01:f3:4a:16:d7:7b:6e:87:31:ea:0d:
6c:d4:e9:35:2e:88:7c:cb:8e:51:e7:0a:3c:ed:1c:3b:fa:e3:
56:f7:04:23:db:8b:35:13:94:83:c4:43:ce:53:68:42:97:65:
e8:0c:c9:a5:1a:0d:e5:2b:fd:76:84:6e:c7:6d:19:a2:75:15:
4d:74:9b:ef:9c:c7:46:0b:1a:7e:27:f5:dd:60:82:18:fb:a8:
0d:d9:16:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:25 2025 by rpki-client