Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc95d6-6394-45a9-ab55-b7f5bf9fbe3c/1/y7LcaAU7KR5yk7tGNDspJc2CO10.mft
File: y7LcaAU7KR5yk7tGNDspJc2CO10.mft (raw, json)
Hash identifier: ttmp9pqHFexkyggXY4xPu89c+c4BcOMAj4NQbL0G1/A=
Subject key identifier: DC:45:5D:05:79:C5:3B:AD:E0:9B:2D:95:F6:9F:AC:72:BA:23:D7:4B
Authority key identifier: CB:B2:DC:68:05:3B:29:1E:72:93:BB:46:34:3B:29:25:CD:82:3B:5D
Certificate issuer: /CN=cbb2dc68053b291e7293bb46343b2925cd823b5d
Certificate serial: 018B3524C58F568E41FF41D67963950E23CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7LcaAU7KR5yk7tGNDspJc2CO10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc95d6-6394-45a9-ab55-b7f5bf9fbe3c/1/y7LcaAU7KR5yk7tGNDspJc2CO10.mft
Manifest number: 087D
Signing time: Sun 15 Oct 2023 21:01:24 +0000
Manifest this update: Sun 15 Oct 2023 21:01:24 +0000
Manifest next update: Mon 16 Oct 2023 21:01:24 +0000
Files and hashes: 1: y7LcaAU7KR5yk7tGNDspJc2CO10.crl (hash: ef/PA/0oAG2syYjLE1D2RE3fedIBH6Wd3h8N4qbywgI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:35:24:c5:8f:56:8e:41:ff:41:d6:79:63:95:0e:23:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb2dc68053b291e7293bb46343b2925cd823b5d
Validity
Not Before: Oct 15 21:01:24 2023 GMT
Not After : Oct 16 21:01:24 2023 GMT
Subject: CN=dc455d0579c53bade09b2d95f69fac72ba23d74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:c8:ec:46:8b:0b:8f:1a:c0:f9:88:78:9b:
4c:df:1c:b9:98:0a:ba:f3:b8:b0:c1:f8:24:4a:db:
e4:db:be:d0:0f:83:2e:f7:6c:17:d2:c2:92:7e:7a:
6d:e3:cc:43:88:7c:ef:28:18:de:5e:fc:1f:58:d2:
98:73:fd:48:76:38:6f:f7:84:90:69:47:07:14:de:
bb:bd:39:ca:99:24:f9:77:87:e5:1b:e3:43:81:10:
19:28:b5:e3:ec:bd:3e:6c:c2:1b:7b:8e:7d:ad:b8:
68:89:2d:b5:e0:c7:94:d2:1c:8f:2a:0a:71:e5:ad:
1b:3c:24:d5:38:d4:8a:ac:39:5b:96:8e:c8:ed:20:
21:fd:7d:1d:99:68:0c:98:5c:3b:c1:1e:3f:cd:0a:
31:11:09:64:3d:77:63:84:16:06:35:8d:4b:af:d9:
66:26:0e:0b:0a:99:92:c5:12:32:3b:28:4a:20:2b:
6e:a1:8c:f0:94:85:9e:40:e8:c1:bf:60:7e:01:95:
61:7f:27:87:48:71:48:47:0c:ab:25:67:5b:83:bf:
11:a8:a2:87:87:03:6d:8a:ae:68:3c:8a:fa:67:81:
30:84:c9:53:85:36:02:46:02:cc:59:3e:de:de:43:
99:48:01:7e:0a:9d:66:50:ef:bf:15:49:83:55:4c:
6d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:45:5D:05:79:C5:3B:AD:E0:9B:2D:95:F6:9F:AC:72:BA:23:D7:4B
X509v3 Authority Key Identifier:
keyid:CB:B2:DC:68:05:3B:29:1E:72:93:BB:46:34:3B:29:25:CD:82:3B:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7LcaAU7KR5yk7tGNDspJc2CO10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc95d6-6394-45a9-ab55-b7f5bf9fbe3c/1/y7LcaAU7KR5yk7tGNDspJc2CO10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc95d6-6394-45a9-ab55-b7f5bf9fbe3c/1/y7LcaAU7KR5yk7tGNDspJc2CO10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d9:79:59:fb:62:ce:f4:55:cb:1e:fa:a4:d1:c7:35:02:40:
3f:1e:9d:c9:a7:4b:12:51:99:44:5c:d6:2b:57:8e:b9:5d:c9:
03:a5:22:50:83:c9:aa:b2:65:1b:7e:84:8f:96:2e:ae:03:6b:
1b:5c:ed:8e:1a:40:d8:f7:35:37:63:58:b5:d0:52:0f:d5:26:
14:33:13:3f:2b:99:4f:c7:21:d8:9e:83:54:5b:7b:99:bb:1d:
cb:70:94:bb:bd:14:64:11:a7:70:eb:61:1a:ab:ad:f2:71:1c:
a9:01:ca:d7:d0:57:02:8a:b9:9e:1c:6c:06:90:6d:f1:78:af:
48:a4:80:4e:6b:4f:ca:f5:48:43:c2:35:2d:03:6a:a4:f5:cc:
ce:03:90:65:c1:72:93:b6:d8:64:3d:0a:00:d5:9b:bd:42:4f:
8a:a7:1a:92:f4:44:00:a6:b9:a2:a1:8c:2c:55:62:1d:ca:23:
69:14:9c:2d:26:57:82:0a:ff:0d:df:35:da:b3:5f:2f:4b:c4:
97:3c:c0:e6:30:2d:20:d7:91:0b:16:10:e4:64:ea:a1:74:75:
c6:b2:c4:f4:ff:ce:98:78:c2:ae:8c:8d:79:78:3d:62:5b:31:
09:da:69:50:eb:32:ef:58:59:e3:73:bb:33:ed:8b:9e:33:25:
b8:44:29:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:34 2025 by rpki-client