Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.mft
File: yrjSpYc51mIvFaU8wb1U-dsIAcY.mft (raw, json)
Hash identifier: 1/ViBo/0iQaw9lCi3rtymIeQVuOPOGVO38k87nixJcQ=
Subject key identifier: 2F:F3:68:E6:E8:9D:05:69:39:38:C6:78:94:84:35:B2:0B:BC:95:1A
Authority key identifier: CA:B8:D2:A5:87:39:D6:62:2F:15:A5:3C:C1:BD:54:F9:DB:08:01:C6
Certificate issuer: /CN=cab8d2a58739d6622f15a53cc1bd54f9db0801c6
Certificate serial: 0197BEFF4112337CF9729AC133F85DDCDDCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrjSpYc51mIvFaU8wb1U-dsIAcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.mft
Manifest number: 03F0
Signing time: Mon 30 Jun 2025 04:01:28 +0000
Manifest this update: Mon 30 Jun 2025 04:01:28 +0000
Manifest next update: Tue 01 Jul 2025 04:01:28 +0000
Files and hashes: 1: yrjSpYc51mIvFaU8wb1U-dsIAcY.crl (hash: 4bnfWVqGX+zyU2Udk8OZ8rQlzg2T6Ytv31cKr2RMP1s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:be:ff:41:12:33:7c:f9:72:9a:c1:33:f8:5d:dc:dd:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab8d2a58739d6622f15a53cc1bd54f9db0801c6
Validity
Not Before: Jun 30 04:01:28 2025 GMT
Not After : Jul 1 04:01:28 2025 GMT
Subject: CN=2ff368e6e89d05693938c678948435b20bbc951a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c0:c6:42:1a:8a:82:8b:da:d9:b7:23:01:22:
5d:e2:69:cb:96:c5:0c:c7:0d:a8:9e:25:82:aa:fb:
67:f1:2c:6e:ed:4b:64:ee:b9:3e:8d:54:cb:08:e3:
f0:9d:73:b8:68:d1:50:31:b3:8e:3a:b0:42:53:e5:
1c:b0:ac:b3:55:4b:6f:b4:ab:04:37:0a:8a:53:da:
6f:f1:a0:44:68:60:a8:10:92:ec:f2:60:4e:76:e5:
a3:a7:34:3f:62:65:53:32:a0:cb:aa:2f:a5:93:56:
ad:43:21:8c:e1:ee:20:78:67:81:87:3f:c3:9c:77:
e3:4c:02:a7:f9:11:f6:64:79:2b:ca:56:70:81:3c:
2b:f2:da:08:10:af:6c:ef:94:a2:fd:27:3e:53:fd:
fd:08:90:5d:c5:6e:c9:eb:1c:1e:57:ba:cd:cf:f2:
fa:ef:94:1f:f2:7f:5d:ed:3a:75:24:f6:19:ca:be:
44:62:dd:5d:f0:63:27:2d:bf:9b:19:4c:3b:aa:f9:
91:25:e7:dc:58:f2:a5:fc:81:05:6a:6b:af:e6:b5:
d7:1e:66:aa:b4:e4:a4:19:5c:dc:46:50:fc:17:50:
08:19:55:83:a0:14:9c:c4:09:35:50:5f:1d:f4:c6:
64:40:2e:93:fb:4a:5a:2b:aa:3e:ea:e7:62:8d:20:
e2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F3:68:E6:E8:9D:05:69:39:38:C6:78:94:84:35:B2:0B:BC:95:1A
X509v3 Authority Key Identifier:
keyid:CA:B8:D2:A5:87:39:D6:62:2F:15:A5:3C:C1:BD:54:F9:DB:08:01:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrjSpYc51mIvFaU8wb1U-dsIAcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:15:64:c4:e6:f8:0a:17:94:9c:2f:97:48:60:ef:5d:d2:9d:
3e:6f:0e:c7:1c:ac:24:33:ff:85:e2:77:80:8e:84:eb:00:fd:
af:1b:4e:df:93:61:53:b8:51:1d:85:90:51:65:2f:53:5e:c0:
d6:68:39:66:3a:9d:56:f9:71:cf:8b:b6:c0:0d:9a:0d:f0:14:
e8:af:23:84:66:15:04:af:81:12:b7:d9:68:a8:39:a3:8d:ec:
cf:49:93:46:f4:6b:50:00:00:fe:67:6a:8f:d7:55:84:af:7a:
6a:c8:a4:1d:e0:50:01:ef:d7:da:90:f2:61:4f:73:6a:4b:11:
92:66:eb:85:91:55:39:8d:ee:98:cb:5a:ec:67:51:52:06:74:
31:e7:cd:2d:38:e8:77:6a:76:a0:60:c2:ec:76:e3:2f:a7:2c:
87:50:33:21:8d:ea:e7:2a:2a:fe:36:9e:d1:92:97:4e:24:3e:
47:a5:5d:e4:e5:0e:eb:32:60:da:96:b0:b5:dd:32:ab:34:54:
74:c9:fc:c9:16:61:e7:ee:52:ed:3d:74:40:e4:dc:e5:e8:3e:
32:eb:90:36:a1:bb:27:51:89:8f:b3:03:4d:53:45:f4:be:89:
35:45:5d:31:2c:a3:49:58:0c:f8:22:33:f8:c2:18:7f:fa:0a:
9f:65:39:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:57:35 2025 by rpki-client