Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5151c5-faa4-45ef-b238-b69cdb4efd82/1/yNAqmjozOK5j1ITvMAa4rW6vqho.mft
File: yNAqmjozOK5j1ITvMAa4rW6vqho.mft (raw, json)
Hash identifier: bbZ/NtQb1YXv/X+j/xOu2/t3NLJSqV0WtHTmONuoWIA=
Subject key identifier: C0:24:6C:5A:C9:3D:0D:B0:56:D4:E4:22:22:7D:45:6F:5D:39:73:77
Authority key identifier: C8:D0:2A:9A:3A:33:38:AE:63:D4:84:EF:30:06:B8:AD:6E:AF:AA:1A
Certificate issuer: /CN=c8d02a9a3a3338ae63d484ef3006b8ad6eafaa1a
Certificate serial: 0193900A703995749B3BE4FC9A8F719DE5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNAqmjozOK5j1ITvMAa4rW6vqho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/5151c5-faa4-45ef-b238-b69cdb4efd82/1/yNAqmjozOK5j1ITvMAa4rW6vqho.mft
Manifest number: 1210
Signing time: Wed 04 Dec 2024 05:00:23 +0000
Manifest this update: Wed 04 Dec 2024 05:00:23 +0000
Manifest next update: Thu 05 Dec 2024 05:00:23 +0000
Files and hashes: 1: yNAqmjozOK5j1ITvMAa4rW6vqho.crl (hash: muGSIWiQCdjElV3zRz22HquKP9BO6P9ky0YybqJlHbM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:90:0a:70:39:95:74:9b:3b:e4:fc:9a:8f:71:9d:e5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d02a9a3a3338ae63d484ef3006b8ad6eafaa1a
Validity
Not Before: Dec 4 05:00:23 2024 GMT
Not After : Dec 5 05:00:23 2024 GMT
Subject: CN=c0246c5ac93d0db056d4e422227d456f5d397377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:00:c7:c1:3b:ec:99:23:88:8b:cf:58:58:b4:
fb:28:ca:e6:b8:10:93:62:cb:bc:c1:0c:ca:82:05:
f9:ab:e8:6a:44:ba:ef:19:6c:95:be:a2:b4:8a:52:
d5:36:ac:52:74:2f:3e:7c:54:f1:af:c6:fe:94:5f:
ff:d1:e4:b4:3f:30:81:f6:c0:b4:b2:6f:ba:80:e5:
70:0a:1b:4b:dc:7e:ad:3c:d6:01:4e:e7:3e:2b:ea:
32:71:26:55:39:a0:c1:91:bb:39:1e:24:d7:79:c9:
3a:1b:89:be:e2:66:61:ac:d9:45:44:a1:5f:52:a4:
e6:fd:6b:a4:f5:48:0d:11:9f:b2:21:57:36:72:ec:
c8:43:19:d7:eb:97:dd:c6:d3:d3:62:61:80:1f:d2:
f9:dd:8f:9b:5a:51:58:a6:c5:de:98:d7:fc:7b:2c:
c8:6f:68:a7:44:d4:fd:5e:9f:eb:23:66:78:b2:38:
a3:dd:db:de:42:ff:f4:24:81:17:d7:00:33:d1:fd:
ae:9f:33:29:5d:ce:cd:6e:15:a0:1a:b3:a2:31:65:
c2:69:0c:6d:1c:10:2b:e2:34:a9:89:6b:7e:c9:f3:
ef:d6:1d:19:ba:a7:37:9a:15:26:13:d7:e6:88:2e:
aa:aa:b6:45:9b:08:ce:a9:3f:97:b5:48:5e:cb:87:
b2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:24:6C:5A:C9:3D:0D:B0:56:D4:E4:22:22:7D:45:6F:5D:39:73:77
X509v3 Authority Key Identifier:
keyid:C8:D0:2A:9A:3A:33:38:AE:63:D4:84:EF:30:06:B8:AD:6E:AF:AA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNAqmjozOK5j1ITvMAa4rW6vqho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5151c5-faa4-45ef-b238-b69cdb4efd82/1/yNAqmjozOK5j1ITvMAa4rW6vqho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5151c5-faa4-45ef-b238-b69cdb4efd82/1/yNAqmjozOK5j1ITvMAa4rW6vqho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:48:f4:08:25:5b:9a:6c:00:c0:d8:5b:b1:4f:52:3a:bd:74:
2d:95:84:f2:12:dd:80:dc:19:c3:df:75:45:b0:ac:d9:f0:12:
13:5f:57:34:f5:cf:ce:77:28:eb:68:58:4d:2f:ad:a0:71:76:
a7:38:03:1f:1a:0e:29:7a:bd:5f:eb:9f:0e:43:6c:c0:b1:3a:
d2:3b:46:c3:11:93:b1:6d:90:f9:9b:c5:d1:16:8c:5c:13:4f:
30:37:70:a5:a4:ef:4d:ed:69:98:1a:85:12:82:27:79:71:a7:
0d:a9:ea:1c:cd:c7:6a:d3:27:de:69:6e:89:ba:5c:e1:1e:73:
6f:a9:e5:47:1b:9b:43:97:e4:09:d7:0d:64:ca:61:08:21:3e:
6a:fd:41:3f:b7:ef:e4:6d:5a:76:2d:de:35:97:af:37:bb:83:
e7:a1:44:0a:3a:8d:15:e6:0d:c7:40:72:47:9a:f2:49:cc:af:
3c:38:99:65:3e:08:40:ed:41:02:a1:e8:9d:d5:c9:a0:00:7d:
f8:82:89:2c:13:10:6e:11:42:0b:fa:f8:86:c2:15:1b:46:78:
44:f8:4c:56:3b:2d:48:47:8e:51:63:dd:b3:10:b6:b0:de:b0:
9c:00:c2:26:ec:3f:d1:5e:b6:68:fe:0d:e8:72:cb:c7:52:bc:
5f:19:ef:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:56:28 2025 by rpki-client