Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a01e67-d148-46f4-953a-c52758ad95e9/1/yDoMgB1lCLAFiqMvn9j25_JGtMI.mft
File: yDoMgB1lCLAFiqMvn9j25_JGtMI.mft (raw, json)
Hash identifier: YfTmSxtJcmx+6qheLJ9ViF9T127O9PPLZFc0nfJJ9Zk=
Subject key identifier: B6:A0:18:FA:36:80:8C:12:51:E7:80:A5:F7:48:09:AD:6A:34:6F:CF
Authority key identifier: C8:3A:0C:80:1D:65:08:B0:05:8A:A3:2F:9F:D8:F6:E7:F2:46:B4:C2
Certificate issuer: /CN=c83a0c801d6508b0058aa32f9fd8f6e7f246b4c2
Certificate serial: 019512B61D92E442ECB4194DD4E89CBD3925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDoMgB1lCLAFiqMvn9j25_JGtMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a01e67-d148-46f4-953a-c52758ad95e9/1/yDoMgB1lCLAFiqMvn9j25_JGtMI.mft
Manifest number: 118F
Signing time: Mon 17 Feb 2025 07:01:19 +0000
Manifest this update: Mon 17 Feb 2025 07:01:19 +0000
Manifest next update: Tue 18 Feb 2025 07:01:19 +0000
Files and hashes: 1: yDoMgB1lCLAFiqMvn9j25_JGtMI.crl (hash: 9jW8kUVqDssbSf1GSR5uwXZ0Yu7c5t32eHbOLP9cklY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:b6:1d:92:e4:42:ec:b4:19:4d:d4:e8:9c:bd:39:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83a0c801d6508b0058aa32f9fd8f6e7f246b4c2
Validity
Not Before: Feb 17 07:01:19 2025 GMT
Not After : Feb 18 07:01:19 2025 GMT
Subject: CN=b6a018fa36808c1251e780a5f74809ad6a346fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:59:00:be:91:a9:ed:a6:34:b5:de:7b:49:07:
25:f7:57:03:af:d0:dd:dd:e1:34:f4:9b:dd:03:72:
27:3f:39:9e:d3:b5:65:f0:a3:3c:6a:a8:22:1e:7a:
8e:19:26:72:27:16:53:e8:c4:ef:4b:7b:63:9e:03:
6f:61:4a:96:bf:60:86:f2:53:19:0d:b7:34:5b:26:
f4:49:23:df:ee:bf:72:41:64:67:62:0e:8b:0a:73:
7e:cc:85:6e:76:d1:25:18:cf:5a:84:47:b0:66:e6:
19:60:01:63:58:6c:47:8c:ed:f8:f8:b2:a4:8e:3a:
df:ee:f1:ed:97:36:b9:c6:50:10:c2:f1:13:40:e4:
21:bb:35:6d:b5:71:e5:b2:2c:83:f6:3f:3a:e5:f5:
2c:b8:5d:88:2f:27:44:6f:1f:45:41:c6:f0:8f:6f:
92:6b:9f:4a:e4:38:95:1a:9b:ab:a7:a4:84:2e:3a:
a6:24:02:d2:9b:68:0f:f8:fa:99:e2:e4:4b:cc:8a:
16:40:06:87:37:35:06:79:28:81:e0:83:73:39:24:
c9:73:3b:5d:df:7e:ad:c7:bb:28:98:08:89:d5:b2:
8a:0b:13:bb:e7:4e:75:41:0f:9e:8c:cb:6b:b9:98:
9e:97:22:e6:ea:0d:ce:54:01:56:0b:91:64:0a:fe:
a6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A0:18:FA:36:80:8C:12:51:E7:80:A5:F7:48:09:AD:6A:34:6F:CF
X509v3 Authority Key Identifier:
keyid:C8:3A:0C:80:1D:65:08:B0:05:8A:A3:2F:9F:D8:F6:E7:F2:46:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDoMgB1lCLAFiqMvn9j25_JGtMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a01e67-d148-46f4-953a-c52758ad95e9/1/yDoMgB1lCLAFiqMvn9j25_JGtMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a01e67-d148-46f4-953a-c52758ad95e9/1/yDoMgB1lCLAFiqMvn9j25_JGtMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:41:42:db:4b:86:9a:ba:24:e3:85:2e:fc:9d:ee:14:1c:dc:
96:91:c4:a3:6f:c7:dc:38:c1:73:95:b5:8f:0c:08:8e:42:b4:
a8:bb:cd:8f:b9:04:fa:ad:c9:e3:91:2e:6d:b3:86:5e:08:d1:
01:f9:7a:99:98:fa:2f:50:07:4d:ba:c0:e7:6d:4b:4c:49:14:
97:fc:96:83:d0:9b:75:62:a7:5d:60:45:19:63:f5:01:3d:4a:
e8:d4:4c:3a:95:b3:b1:89:b8:cd:bf:7d:22:3c:44:1d:bb:24:
99:31:2a:f8:1f:ed:fc:73:2d:21:66:0e:c4:5e:bd:fb:cd:53:
9e:9f:b4:50:92:a8:44:1b:14:68:bc:94:5a:3c:68:81:1e:b2:
1e:4c:ed:31:d1:db:91:af:0f:34:83:c2:09:70:19:fd:49:bf:
91:46:c1:12:76:3f:76:92:64:b6:5a:8e:08:8e:a6:3b:e6:0b:
d0:3e:bb:3b:2b:76:2a:32:19:06:48:eb:04:fc:73:08:ad:e5:
bb:a2:4c:2b:30:99:d0:f4:14:97:fb:8b:79:38:55:10:cd:55:
40:bd:26:04:79:67:d0:df:b3:f6:25:19:a9:55:8c:0a:ce:b4:
e2:d2:b7:5e:a6:97:e0:84:27:5e:e4:69:c8:81:57:7d:4c:a3:
47:f4:2e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:33:10 2025 by rpki-client