Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2545a5-06c2-4155-b7ac-92135e6aff63/1/yc9KG7Dow1J9KrgdvxQaX75JUag.mft
File: yc9KG7Dow1J9KrgdvxQaX75JUag.mft (raw, json)
Hash identifier: oz4ZuxEUZRpA6FjnYL/rWf4/u7kDeSwCfTqZRRtys68=
Subject key identifier: AE:3A:78:A3:7D:E2:24:CB:62:5A:EA:61:ED:53:7A:C2:3E:2B:85:2C
Authority key identifier: C9:CF:4A:1B:B0:E8:C3:52:7D:2A:B8:1D:BF:14:1A:5F:BE:49:51:A8
Certificate issuer: /CN=c9cf4a1bb0e8c3527d2ab81dbf141a5fbe4951a8
Certificate serial: 018E942B3F37C6628AA297E32106EA8CC688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc9KG7Dow1J9KrgdvxQaX75JUag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/2545a5-06c2-4155-b7ac-92135e6aff63/1/yc9KG7Dow1J9KrgdvxQaX75JUag.mft
Manifest number: 06
Signing time: Sun 31 Mar 2024 11:00:45 +0000
Manifest this update: Sun 31 Mar 2024 11:00:45 +0000
Manifest next update: Mon 01 Apr 2024 11:00:45 +0000
Files and hashes: 1: yc9KG7Dow1J9KrgdvxQaX75JUag.crl (hash: UiFyTTM9vFtwsH1dlli5P+Gbdt8efgTleCPJDrfSII8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:94:2b:3f:37:c6:62:8a:a2:97:e3:21:06:ea:8c:c6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cf4a1bb0e8c3527d2ab81dbf141a5fbe4951a8
Validity
Not Before: Mar 31 11:00:45 2024 GMT
Not After : Apr 1 11:00:45 2024 GMT
Subject: CN=ae3a78a37de224cb625aea61ed537ac23e2b852c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ad:68:0e:4d:76:07:49:8e:ce:f2:5c:6a:da:
7d:27:2a:9b:0f:78:cf:ae:bb:4d:4a:64:bc:68:e3:
e3:fa:99:ab:a2:76:ce:4f:59:1f:31:c9:ee:81:84:
61:8e:8b:31:15:86:32:6f:23:7b:8c:69:98:8e:01:
17:58:59:ef:1b:8d:76:46:f8:67:d6:9d:f6:66:9a:
89:0c:0b:16:b8:b2:19:79:e2:d7:27:f5:c3:3e:ce:
9d:98:1f:1e:47:03:b3:66:05:6d:cc:f5:d2:73:96:
75:7a:b4:04:15:61:37:cc:e5:5c:66:eb:46:4d:07:
59:ed:2d:f0:b7:56:5d:2d:08:94:b3:67:37:08:2d:
3a:f5:5a:34:db:f0:c8:27:09:9f:ad:9b:4a:fc:71:
df:92:d7:3b:3a:07:24:db:5b:a1:56:5c:17:b6:eb:
33:c8:8d:49:09:5a:27:49:7e:43:10:62:11:24:61:
bc:a6:be:ff:99:10:76:8f:47:70:a2:bf:21:aa:22:
5d:81:e3:1b:91:0e:56:71:fa:78:2b:87:51:76:9b:
a1:59:54:2a:33:1c:63:54:ad:0a:af:65:43:1b:b1:
94:33:bc:43:0e:94:75:86:30:0e:b7:68:85:70:99:
a9:73:1d:c0:e2:5f:ab:01:fe:ac:e6:1a:32:38:18:
21:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3A:78:A3:7D:E2:24:CB:62:5A:EA:61:ED:53:7A:C2:3E:2B:85:2C
X509v3 Authority Key Identifier:
keyid:C9:CF:4A:1B:B0:E8:C3:52:7D:2A:B8:1D:BF:14:1A:5F:BE:49:51:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc9KG7Dow1J9KrgdvxQaX75JUag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2545a5-06c2-4155-b7ac-92135e6aff63/1/yc9KG7Dow1J9KrgdvxQaX75JUag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2545a5-06c2-4155-b7ac-92135e6aff63/1/yc9KG7Dow1J9KrgdvxQaX75JUag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b2:40:9b:d3:65:2d:5e:10:46:a6:a0:f1:1b:c4:7d:19:9b:
ef:50:39:0e:4b:5c:49:01:c6:18:22:6a:f2:10:aa:d3:e0:4d:
8e:e6:d3:c3:dc:e0:4a:c9:6e:9e:8e:2d:2c:16:e0:4c:90:6f:
c1:af:c3:37:ac:c6:3a:97:9e:ca:76:5e:c7:af:e9:0d:4d:31:
86:d6:9a:2d:05:2e:df:49:77:29:a7:66:29:3b:46:88:8c:a0:
f5:3e:d7:38:31:5f:52:a0:b2:56:3e:ed:dc:3b:96:e1:3f:c3:
69:2b:e7:45:76:fb:34:a7:8e:47:56:6c:be:f8:f3:65:2c:cd:
43:6f:92:f0:6c:36:40:c2:14:23:5c:d9:c3:80:8c:90:d8:b1:
a9:37:85:35:7c:3e:70:c5:85:c3:9f:6e:7b:33:41:89:41:70:
a4:e4:6a:af:77:75:39:b8:c7:c3:12:df:7d:ca:2e:a5:ba:ea:
66:e2:d9:4c:78:88:71:08:f4:11:b2:2e:96:69:3e:af:e1:0a:
f6:35:5b:6e:16:f9:27:08:a8:9b:de:43:00:ae:e6:b3:82:8b:
fe:0b:e5:cc:0a:65:fa:1c:f7:c8:9b:88:9b:8e:e5:70:44:98:
1a:23:dc:c1:7b:3a:ca:60:ea:cb:ba:14:d8:ca:18:33:3e:dd:
fd:31:4c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:00 2025 by rpki-client