Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/05b3ca-09c3-401d-8bec-fe15e0b32e58/1/YgSUhalEZkFN1sInlHCCIL86Szw.mft
File: YgSUhalEZkFN1sInlHCCIL86Szw.mft (raw, json)
Hash identifier: GtpEgWR421FthK381kMzdLIOe1j3Ar8/bZEIGzAluls=
Subject key identifier: 01:54:A3:33:AB:AE:F5:84:36:C6:78:72:21:CC:E5:B6:45:7E:58:A9
Authority key identifier: 62:04:94:85:A9:44:66:41:4D:D6:C2:27:94:70:82:20:BF:3A:4B:3C
Certificate issuer: /CN=62049485a94466414dd6c22794708220bf3a4b3c
Certificate serial: 0196DE1E624BDCC77FFBD3AD05B42B9E96F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgSUhalEZkFN1sInlHCCIL86Szw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/05b3ca-09c3-401d-8bec-fe15e0b32e58/1/YgSUhalEZkFN1sInlHCCIL86Szw.mft
Manifest number: 0C
Signing time: Sat 17 May 2025 12:00:55 +0000
Manifest this update: Sat 17 May 2025 12:00:55 +0000
Manifest next update: Sun 18 May 2025 12:00:55 +0000
Files and hashes: 1: YgSUhalEZkFN1sInlHCCIL86Szw.crl (hash: 8tXaCMA1wwefYM8Vsf0aoWLbLKl5vEjeMtfM+wBfSDs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:de:1e:62:4b:dc:c7:7f:fb:d3:ad:05:b4:2b:9e:96:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62049485a94466414dd6c22794708220bf3a4b3c
Validity
Not Before: May 17 12:00:55 2025 GMT
Not After : May 18 12:00:55 2025 GMT
Subject: CN=0154a333abaef58436c6787221cce5b6457e58a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:30:44:cd:9a:d3:1e:56:97:3f:ac:e4:6b:
43:ba:98:ba:e0:be:2d:4b:8e:0b:b2:67:6d:b2:93:
83:db:70:0e:57:5a:91:5f:a9:e5:68:0d:22:b4:0d:
f7:c0:fc:2c:9d:93:e5:cd:8a:fc:52:f4:48:49:b7:
c1:9b:d2:a2:f4:b7:77:23:e6:e6:2a:88:96:82:2d:
d8:b6:7f:cc:1f:77:d4:89:23:49:6f:50:b8:5f:b1:
1c:6f:b3:11:5b:bc:a5:04:cc:27:60:f8:d0:32:1d:
22:5d:8f:8e:ba:a8:5c:7c:04:0e:a8:4f:86:fd:18:
36:14:3c:58:70:88:c0:4d:44:d8:23:e2:f9:63:c5:
96:0c:f3:2a:ff:e6:ef:ad:6d:66:49:dc:cc:40:ed:
37:f8:00:ad:1a:1c:04:03:86:1b:36:31:a8:ae:2f:
95:d8:0b:9a:c6:84:b8:b3:cb:fb:b2:e2:0f:50:db:
c1:4e:9f:6e:29:47:90:c5:4e:bd:07:f8:82:ad:e5:
1a:4d:36:94:ad:8f:3e:74:27:93:d4:2a:4b:39:36:
91:31:58:a3:cd:e8:4c:42:45:bf:01:68:ff:1c:2c:
3d:f6:26:7e:57:71:c7:bc:6e:68:4e:fb:fd:9d:a8:
f4:79:96:04:9b:10:cf:01:b4:75:b5:71:bc:88:58:
5d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:54:A3:33:AB:AE:F5:84:36:C6:78:72:21:CC:E5:B6:45:7E:58:A9
X509v3 Authority Key Identifier:
keyid:62:04:94:85:A9:44:66:41:4D:D6:C2:27:94:70:82:20:BF:3A:4B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgSUhalEZkFN1sInlHCCIL86Szw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/05b3ca-09c3-401d-8bec-fe15e0b32e58/1/YgSUhalEZkFN1sInlHCCIL86Szw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/05b3ca-09c3-401d-8bec-fe15e0b32e58/1/YgSUhalEZkFN1sInlHCCIL86Szw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:64:de:9e:f7:e2:f7:41:55:e1:1b:c7:f6:9f:b3:eb:ee:d2:
a2:ba:71:b0:32:e2:cc:32:a8:17:f6:aa:28:d3:14:32:ad:6b:
e8:77:74:be:20:52:53:f6:4a:71:56:33:97:29:dc:c4:06:5c:
45:3b:56:fc:b5:32:3b:a2:2d:d2:b8:62:f3:83:09:b0:3a:df:
33:a7:43:c8:ee:26:2b:e5:7e:cc:14:58:25:0e:0a:7d:1b:ca:
c2:8d:58:8d:9f:a3:6d:ea:85:14:6e:fd:e0:d3:bf:a1:68:38:
75:e4:31:cb:fe:64:ca:34:da:72:d7:59:43:6d:de:b7:ce:b7:
03:65:b9:ea:07:32:79:d3:b6:58:12:78:07:f2:2a:7d:49:4e:
65:90:fc:4d:e4:9c:fe:8b:75:fc:cf:44:66:94:69:a1:cf:a6:
2a:3c:4d:b2:f3:14:c9:91:2d:04:ba:5a:54:24:cb:c0:05:d8:
07:99:32:0b:b6:a2:12:3d:8b:e7:c3:fd:50:3a:97:86:04:d5:
4c:18:48:b9:a1:ac:e8:63:0b:93:22:16:ce:bf:85:f1:e3:fe:
3e:5f:1b:72:b3:40:06:b7:15:1c:2f:91:c7:bc:58:e6:1f:7c:
34:f9:60:94:86:59:46:d3:76:24:39:20:8d:82:cd:23:65:27:
a1:2b:61:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:49:34 2025 by rpki-client