Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9d3500-7aba-4e66-bc50-291bd495bd9e/1/YCcdsz0j2d-kf8UMq1X7-mch_4o.mft
File: YCcdsz0j2d-kf8UMq1X7-mch_4o.mft (raw, json)
Hash identifier: cKhTwDVo2NamlSTKD3pnrPBYzyCmGs8KfWDsRS84hmo=
Subject key identifier: 11:97:D9:29:F2:08:47:2B:96:93:BB:2D:AC:44:3A:59:03:37:A7:69
Authority key identifier: 60:27:1D:B3:3D:23:D9:DF:A4:7F:C5:0C:AB:55:FB:FA:67:21:FF:8A
Certificate issuer: /CN=60271db33d23d9dfa47fc50cab55fbfa6721ff8a
Certificate serial: 0195CC1BF0F37C6A122D31483E45B598828B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCcdsz0j2d-kf8UMq1X7-mch_4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9d3500-7aba-4e66-bc50-291bd495bd9e/1/YCcdsz0j2d-kf8UMq1X7-mch_4o.mft
Manifest number: 0CA5
Signing time: Tue 25 Mar 2025 07:02:17 +0000
Manifest this update: Tue 25 Mar 2025 07:02:17 +0000
Manifest next update: Wed 26 Mar 2025 07:02:17 +0000
Files and hashes: 1: YCcdsz0j2d-kf8UMq1X7-mch_4o.crl (hash: ltj+CGnuRRaazTxtXTqOZKtSQrJdxdhGmnz1s+BViqE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:1b:f0:f3:7c:6a:12:2d:31:48:3e:45:b5:98:82:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60271db33d23d9dfa47fc50cab55fbfa6721ff8a
Validity
Not Before: Mar 25 07:02:17 2025 GMT
Not After : Mar 26 07:02:17 2025 GMT
Subject: CN=1197d929f208472b9693bb2dac443a590337a769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5b:39:b5:65:a0:00:5a:e1:56:42:51:61:1c:
e6:ac:95:7a:c6:b9:56:f6:41:03:c9:2a:90:1e:1b:
8c:23:ff:cc:d1:19:82:3f:78:09:bf:29:2e:2b:1b:
68:08:dc:af:cd:3c:17:5c:8e:50:d3:2e:57:d2:8e:
6b:4d:d8:9f:fe:f1:51:1b:28:90:ae:59:7d:60:94:
31:15:b3:47:d7:7d:42:8b:87:a9:be:d6:52:df:1b:
30:3d:54:bf:21:5a:30:3f:ae:3f:0f:5d:33:25:36:
d4:9a:b6:64:7d:22:f3:cb:3a:8b:e3:58:99:37:d9:
41:b4:04:b2:57:ef:be:1c:f9:e4:14:42:2c:6a:40:
d6:92:33:4d:1b:fa:72:f8:1a:10:63:31:99:7f:45:
9c:73:b9:16:e3:bf:28:5d:0f:31:73:54:f5:ca:2a:
2f:55:5b:cd:04:41:c0:63:de:b5:ca:6f:e5:e3:18:
db:a2:9f:e0:ae:a5:6a:82:88:e5:07:ab:88:8b:fe:
99:72:1b:66:85:d1:76:80:9d:f9:2a:32:cd:5e:05:
58:53:f8:ad:4f:f5:7b:49:eb:4b:e5:07:b5:37:66:
17:b8:fb:7a:75:0f:b2:fb:b0:1a:c0:4d:71:88:4f:
ff:6c:35:a8:35:d1:30:b3:db:46:c2:bc:7c:d2:4c:
fc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:97:D9:29:F2:08:47:2B:96:93:BB:2D:AC:44:3A:59:03:37:A7:69
X509v3 Authority Key Identifier:
keyid:60:27:1D:B3:3D:23:D9:DF:A4:7F:C5:0C:AB:55:FB:FA:67:21:FF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCcdsz0j2d-kf8UMq1X7-mch_4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9d3500-7aba-4e66-bc50-291bd495bd9e/1/YCcdsz0j2d-kf8UMq1X7-mch_4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9d3500-7aba-4e66-bc50-291bd495bd9e/1/YCcdsz0j2d-kf8UMq1X7-mch_4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4f:db:58:1c:41:a3:83:bc:7f:2a:4a:d3:7b:07:ba:c6:c2:
ce:64:ec:aa:08:9a:db:23:9f:25:ad:5d:a3:31:23:bc:2c:f4:
c2:b2:3a:d0:f4:a2:31:77:a4:ea:07:76:b4:0e:ee:5a:31:35:
c8:ab:10:58:8f:65:f1:36:19:20:98:3a:93:a4:00:4a:60:82:
d8:9f:44:8b:e6:f3:91:8c:78:73:88:e6:e2:e1:eb:f2:3a:f3:
53:b1:fb:64:16:ee:b5:78:2c:19:1c:51:96:c3:e4:05:db:34:
61:14:0e:bb:0e:b3:c7:bf:d6:61:ea:4a:82:b2:80:2b:67:ec:
be:77:ed:b7:17:c1:9b:68:55:49:70:35:65:e3:53:45:24:07:
25:60:ad:4c:33:b7:a4:e1:d5:ec:a5:40:81:49:36:b7:a2:4e:
83:97:2a:98:99:a8:14:a7:70:3a:db:9f:01:3b:76:85:98:7b:
c0:42:7c:c7:94:02:49:01:42:28:d1:26:f8:f3:20:86:cd:db:
cf:42:68:b4:54:0f:10:23:0b:9e:54:b6:04:48:01:df:2a:12:
98:fe:9e:fb:08:cd:08:86:0c:e2:0f:e5:77:3b:d7:b6:9f:8e:
98:c9:9e:bb:ed:3d:31:7d:eb:1e:ce:23:02:e7:0e:0a:8a:fa:
93:c2:b7:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXMG/DzfGoSLTFIPkW1mIKLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMjcxZGIzM2QyM2Q5ZGZhNDdmYzUwY2FiNTVmYmZhNjcy
MWZmOGEwHhcNMjUwMzI1MDcwMjE3WhcNMjUwMzI2MDcwMjE3WjAzMTEwLwYDVQQD
EygxMTk3ZDkyOWYyMDg0NzJiOTY5M2JiMmRhYzQ0M2E1OTAzMzdhNzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnls5tWWgAFrhVkJRYRzmrJV6xrlW
9kEDySqQHhuMI//M0RmCP3gJvykuKxtoCNyvzTwXXI5Q0y5X0o5rTdif/vFRGyiQ
rll9YJQxFbNH131Ci4epvtZS3xswPVS/IVowP64/D10zJTbUmrZkfSLzyzqL41iZ
N9lBtASyV+++HPnkFEIsakDWkjNNG/py+BoQYzGZf0Wcc7kW478oXQ8xc1T1yiov
VVvNBEHAY961ym/l4xjbop/grqVqgojlB6uIi/6ZchtmhdF2gJ35KjLNXgVYU/it
T/V7SetL5Qe1N2YXuPt6dQ+y+7AawE1xiE//bDWoNdEws9tGwrx80kz8tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGX2SnyCEcrlpO7LaxEOlkDN6dpMB8GA1UdIwQY
MBaAFGAnHbM9I9nfpH/FDKtV+/pnIf+KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUNjZHN6MGoyZC1rZjhVTXExWDctbWNoXzRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85ZDM1MDAtN2FiYS00ZTY2LWJjNTAt
MjkxYmQ0OTViZDllLzEvWUNjZHN6MGoyZC1rZjhVTXExWDctbWNoXzRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85ZDM1MDAtN2FiYS00ZTY2LWJjNTAtMjkxYmQ0OTViZDll
LzEvWUNjZHN6MGoyZC1rZjhVTXExWDctbWNoXzRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgk/bWBxB
o4O8fypK03sHusbCzmTsqgia2yOfJa1dozEjvCz0wrI60PSiMXek6gd2tA7uWjE1
yKsQWI9l8TYZIJg6k6QASmCC2J9Ei+bzkYx4c4jm4uHr8jrzU7H7ZBbutXgsGRxR
lsPkBds0YRQOuw6zx7/WYepKgrKAK2fsvnfttxfBm2hVSXA1ZeNTRSQHJWCtTDO3
pOHV7KVAgUk2t6JOg5cqmJmoFKdwOtufATt2hZh7wEJ8x5QCSQFCKNEm+PMghs3b
z0JotFQPECMLnlS2BEgB3yoSmP6e+wjNCIYM4g/ldzvXtp+OmMmeu+09MX3rHs4j
AucOCor6k8K3iA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:42:45 2025 by rpki-client