Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
File: Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft (raw, json)
Hash identifier: 6Z4DGy7eg04/K21GS+5WZ9U4KZcOETTOmS5mQn/YZKo=
Subject key identifier: 22:55:D9:BD:57:2F:67:CB:6D:41:A1:04:86:43:A3:7C:58:B6:41:29
Authority key identifier: 62:E9:3F:08:A4:5D:2B:7C:74:BF:5D:E0:1B:25:22:01:60:2A:EE:E8
Certificate issuer: /CN=62e93f08a45d2b7c74bf5de01b252201602aeee8
Certificate serial: 0194BC0517F775F95A0CB149744C76FC7657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
Manifest number: 0F89
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: 8AEYtyDng2JrczsuFPGKVviyc9s.roa (hash: bu4yeJwv9MMrj8IdBFvelQwTvzrOnjRhUdtSSS/gVBE=)
2: Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl (hash: ClX1W9LrsUxQb+5WhqLPwNd5opiLTmhyzDrXV910TIw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:17:f7:75:f9:5a:0c:b1:49:74:4c:76:fc:76:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e93f08a45d2b7c74bf5de01b252201602aeee8
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=2255d9bd572f67cb6d41a1048643a37c58b64129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2e:d9:86:f9:2c:ab:bd:53:9e:42:2e:75:7b:
ec:e5:59:8b:95:a4:55:fd:fe:39:7c:f4:2d:1f:50:
64:9c:b6:00:c8:06:66:1a:b5:06:cf:c7:ae:c9:95:
2b:ba:04:99:2f:8e:7c:ab:22:89:73:ee:01:ac:70:
f3:0c:8d:ea:dd:d7:66:ed:f2:64:bb:f3:71:f4:1b:
c5:74:50:5d:68:ca:86:17:a2:d5:7d:14:cc:bb:05:
fd:40:88:ab:42:b1:ce:af:11:79:70:ca:cd:c8:8c:
2a:cc:89:1a:1c:db:30:dd:38:ca:8d:ba:c3:99:b9:
1f:bb:fa:e5:45:6a:1d:aa:d8:c3:88:a3:d6:bb:70:
c8:6a:86:48:c1:8c:2d:61:fc:f3:b3:19:c2:98:cc:
d3:60:a0:40:d0:0c:99:66:9c:33:b6:c9:d0:b4:4d:
08:a7:40:6f:2c:1f:d8:f1:87:34:f1:f5:9a:3f:c1:
7c:5a:d5:90:89:8e:fb:3a:dc:9c:51:67:7a:7f:76:
4c:8d:df:23:c0:fc:3b:e4:24:33:41:5f:c9:43:ac:
0d:7a:3a:80:8c:7c:d5:8b:81:39:45:18:6b:76:23:
40:8f:f6:ec:47:35:c5:fe:ad:66:92:47:e1:80:f2:
6e:63:7d:71:a4:e1:b6:45:68:41:7c:04:3f:77:24:
d4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:55:D9:BD:57:2F:67:CB:6D:41:A1:04:86:43:A3:7C:58:B6:41:29
X509v3 Authority Key Identifier:
keyid:62:E9:3F:08:A4:5D:2B:7C:74:BF:5D:E0:1B:25:22:01:60:2A:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f6:42:42:28:80:01:e8:da:f0:b1:71:26:0e:cb:12:43:ed:
33:4a:ab:a9:71:f8:63:91:57:b4:cd:e7:ae:4f:36:e0:01:bc:
9c:2c:7a:84:69:13:f5:e8:96:26:42:c8:a8:f5:aa:f8:e5:03:
5a:d5:c2:40:ce:22:77:41:e9:c4:6b:57:86:8c:a6:a4:88:3d:
06:a8:d7:ae:84:8c:9b:00:1d:52:2e:16:23:08:06:90:97:90:
61:43:dc:96:53:37:e0:8c:d6:ea:a9:f3:fe:3b:f7:ff:f1:af:
91:f0:a6:f3:b8:9f:67:4f:9d:24:06:b5:f8:42:f6:15:6e:2e:
78:e4:90:9d:92:35:e7:c4:6f:66:70:d3:da:56:01:a1:39:86:
f1:d7:7c:52:00:6b:53:1a:5a:06:45:8c:31:20:91:2e:1a:04:
b9:b8:1c:05:20:41:f6:1a:a5:19:d3:9a:4d:d8:54:f9:50:5e:
8e:4c:d1:94:53:60:67:82:00:35:ea:72:56:f8:ee:75:9b:52:
fd:9f:7a:07:86:04:8f:2e:14:9a:28:d2:b8:97:11:9b:8b:98:
23:2e:ce:37:fd:cb:77:2f:00:23:a4:7c:11:d4:4d:8a:cb:de:
5b:4e:1e:1f:e4:69:6d:bf:40:c8:12:76:99:5f:1d:f2:ab:2d:
86:3a:eb:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BRf3dflaDLFJdEx2/HZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZTkzZjA4YTQ1ZDJiN2M3NGJmNWRlMDFiMjUyMjAxNjAy
YWVlZTgwHhcNMjUwMTMxMTEwMDM3WhcNMjUwMjAxMTEwMDM3WjAzMTEwLwYDVQQD
EygyMjU1ZDliZDU3MmY2N2NiNmQ0MWExMDQ4NjQzYTM3YzU4YjY0MTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS7Zhvksq71TnkIudXvs5VmLlaRV
/f45fPQtH1BknLYAyAZmGrUGz8euyZUrugSZL458qyKJc+4BrHDzDI3q3ddm7fJk
u/Nx9BvFdFBdaMqGF6LVfRTMuwX9QIirQrHOrxF5cMrNyIwqzIkaHNsw3TjKjbrD
mbkfu/rlRWodqtjDiKPWu3DIaoZIwYwtYfzzsxnCmMzTYKBA0AyZZpwztsnQtE0I
p0BvLB/Y8Yc08fWaP8F8WtWQiY77OtycUWd6f3ZMjd8jwPw75CQzQV/JQ6wNejqA
jHzVi4E5RRhrdiNAj/bsRzXF/q1mkkfhgPJuY31xpOG2RWhBfAQ/dyTUDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJV2b1XL2fLbUGhBIZDo3xYtkEpMB8GA1UdIwQY
MBaAFGLpPwikXSt8dL9d4BslIgFgKu7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXVrX0NLUmRLM3gwdjEzZ0d5VWlBV0FxN3VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yMzEzNDktN2YwZS00OTc1LWJjNjMt
N2VhNjVjMTJlOGVjLzEvWXVrX0NLUmRLM3gwdjEzZ0d5VWlBV0FxN3VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8yMzEzNDktN2YwZS00OTc1LWJjNjMtN2VhNjVjMTJlOGVj
LzEvWXVrX0NLUmRLM3gwdjEzZ0d5VWlBV0FxN3VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/ZCQiiA
Aeja8LFxJg7LEkPtM0qrqXH4Y5FXtM3nrk824AG8nCx6hGkT9eiWJkLIqPWq+OUD
WtXCQM4id0HpxGtXhoympIg9BqjXroSMmwAdUi4WIwgGkJeQYUPcllM34IzW6qnz
/jv3//GvkfCm87ifZ0+dJAa1+EL2FW4ueOSQnZI158RvZnDT2lYBoTmG8dd8UgBr
UxpaBkWMMSCRLhoEubgcBSBB9hqlGdOaTdhU+VBejkzRlFNgZ4IANepyVvjudZtS
/Z96B4YEjy4UmijSuJcRm4uYIy7ON/3Ldy8AI6R8EdRNisveW04eH+Rpbb9AyBJ2
mV8d8qsthjrrHA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:35:20 2025 by rpki-client