Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9d3500-7aba-4e66-bc50-291bd495bd9e/1/YCcdsz0j2d-kf8UMq1X7-mch_4o.mft
File: YCcdsz0j2d-kf8UMq1X7-mch_4o.mft (raw, json)
Hash identifier: CG2uFRxGAC9o7L0QIRHgmtNwPIzZ34eDJxC2jzZXxzk=
Subject key identifier: 86:A5:E0:31:B7:B5:C8:19:64:B8:5A:F5:C5:B8:65:FD:30:4E:92:8D
Authority key identifier: 60:27:1D:B3:3D:23:D9:DF:A4:7F:C5:0C:AB:55:FB:FA:67:21:FF:8A
Certificate issuer: /CN=60271db33d23d9dfa47fc50cab55fbfa6721ff8a
Certificate serial: 0195C83E5BF88825AEE4CF3E2E78415D96D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCcdsz0j2d-kf8UMq1X7-mch_4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9d3500-7aba-4e66-bc50-291bd495bd9e/1/YCcdsz0j2d-kf8UMq1X7-mch_4o.mft
Manifest number: 0CA3
Signing time: Mon 24 Mar 2025 13:01:24 +0000
Manifest this update: Mon 24 Mar 2025 13:01:24 +0000
Manifest next update: Tue 25 Mar 2025 13:01:24 +0000
Files and hashes: 1: YCcdsz0j2d-kf8UMq1X7-mch_4o.crl (hash: AuJwY2vYmSbBo23Cafn3eTEkRBhd9vM7+5gaL0LMypw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c8:3e:5b:f8:88:25:ae:e4:cf:3e:2e:78:41:5d:96:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60271db33d23d9dfa47fc50cab55fbfa6721ff8a
Validity
Not Before: Mar 24 13:01:24 2025 GMT
Not After : Mar 25 13:01:24 2025 GMT
Subject: CN=86a5e031b7b5c81964b85af5c5b865fd304e928d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:e9:0a:41:42:74:1d:83:08:07:48:4e:ec:
17:28:4f:75:bf:00:88:97:a8:1a:81:05:02:eb:e4:
d4:a8:72:2b:bd:46:6c:09:70:86:e3:6d:cf:0c:0c:
d1:47:fa:1d:d5:eb:c6:2c:2a:dc:8f:2a:aa:87:cd:
eb:51:44:a4:e4:c5:6d:2c:9d:75:84:ad:42:d7:79:
31:54:ba:99:86:08:47:c4:df:90:87:f0:0b:11:ce:
ba:ee:35:29:97:31:42:43:ed:d7:07:80:3d:94:fc:
ce:41:44:61:5c:a9:b1:cd:dd:16:6f:73:b6:84:86:
93:d8:56:6b:d1:9f:eb:ad:53:f9:e7:28:f8:9d:0a:
e4:fa:07:51:0c:58:15:d5:e9:23:3e:0a:59:85:b2:
3d:b1:b3:b5:17:b7:56:b9:74:04:7d:76:f9:92:9a:
b7:a8:d4:dc:bf:49:cb:df:81:37:d2:87:ac:b6:ff:
83:21:31:c3:2f:cd:2d:50:1c:a8:71:a8:64:b2:d8:
f4:4b:a7:29:73:2d:be:11:4c:f2:ee:88:bd:a5:3e:
e6:3a:c2:3a:44:1a:3f:71:b2:48:61:8a:e0:e2:13:
27:a9:cf:da:ef:fe:0c:92:a5:8c:48:cf:74:64:06:
51:c2:91:2a:5c:1d:0f:1d:7b:34:bd:97:52:1e:97:
ac:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A5:E0:31:B7:B5:C8:19:64:B8:5A:F5:C5:B8:65:FD:30:4E:92:8D
X509v3 Authority Key Identifier:
keyid:60:27:1D:B3:3D:23:D9:DF:A4:7F:C5:0C:AB:55:FB:FA:67:21:FF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCcdsz0j2d-kf8UMq1X7-mch_4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9d3500-7aba-4e66-bc50-291bd495bd9e/1/YCcdsz0j2d-kf8UMq1X7-mch_4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9d3500-7aba-4e66-bc50-291bd495bd9e/1/YCcdsz0j2d-kf8UMq1X7-mch_4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:31:18:bc:79:17:48:21:25:99:16:2d:6e:6d:51:de:4c:61:
f9:f5:dc:7f:fd:5d:49:62:bb:1b:68:57:da:9a:a6:bb:12:88:
8f:9f:41:80:54:b4:60:c7:22:a1:2e:97:ed:e6:2d:13:a4:5e:
bd:f3:08:44:24:76:b4:8e:a9:6a:64:9f:1c:c5:d6:ea:c8:51:
34:32:de:ba:94:5e:48:3e:61:f2:49:8f:68:ec:35:7e:e7:dc:
3f:70:9c:0b:40:99:88:0c:24:db:09:a3:37:1c:c3:a9:de:84:
93:ac:a8:c3:a2:14:23:33:cc:b1:6f:00:df:bb:a5:92:8d:e6:
eb:e6:cb:2d:11:64:f1:bc:f7:17:d2:f5:41:4c:23:9e:42:5a:
af:96:12:48:1b:0e:32:3d:c8:a4:fd:22:93:1c:72:cd:00:c4:
85:3c:58:b6:ea:f1:e1:a2:29:6e:8e:fb:72:05:06:32:8a:b7:
c2:d6:90:15:4c:74:d3:48:90:e8:e0:9b:18:4f:86:0f:e5:d5:
d8:ac:2e:8f:b1:d5:4f:71:c3:f7:37:e0:f7:ec:28:2d:52:3e:
54:a4:47:60:c8:0e:98:4d:07:ce:72:46:74:fc:0a:d9:c0:f4:
d7:99:6a:7e:9b:d5:41:11:ef:ad:79:f5:73:73:fc:35:c0:f2:
d2:a3:8f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 22:13:25 2025 by rpki-client on console.sobornost.net