Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
File: YhuOSG7srmEk3hBJT9OROe1KN8s.mft (raw, json)
Hash identifier: 5jyQFFdHjt4E8efbIEjyk4g1lNcgzn6dhxMKw2bp4Wc=
Subject key identifier: 3B:ED:E9:6B:20:D9:A1:21:BF:20:2D:E9:07:94:A1:84:2A:02:39:D2
Authority key identifier: 62:1B:8E:48:6E:EC:AE:61:24:DE:10:49:4F:D3:91:39:ED:4A:37:CB
Certificate issuer: /CN=621b8e486eecae6124de10494fd39139ed4a37cb
Certificate serial: 0194BC04C922994FCC1299E3DC9E8D499C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: YhuOSG7srmEk3hBJT9OROe1KN8s.crl (hash: pAHmAWBr2TUfcuvzNpmhcJPKialFkZBt9C7z90gSxIs=)
2: eKGme1_RE2Cve029wfoTPnjkx8E.roa (hash: 7e5ken09Fa398flHkK+xPpARVfWAIKVd53mQhTUCt6w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c9:22:99:4f:cc:12:99:e3:dc:9e:8d:49:9c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621b8e486eecae6124de10494fd39139ed4a37cb
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=3bede96b20d9a121bf202de90794a1842a0239d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:60:54:bc:41:8c:ef:c6:9b:f4:5c:28:f9:65:
da:9e:df:4b:8c:71:e5:87:c6:d5:4b:d3:2e:21:46:
7f:1d:2c:f5:14:96:0a:64:82:a3:00:cb:ae:c7:de:
61:3a:04:72:b3:88:28:02:8a:e4:86:b3:e8:9f:93:
3e:fb:0e:aa:f1:c5:0e:ec:f2:d2:88:60:d4:3a:d9:
a4:23:28:65:62:63:84:8e:aa:5b:b2:09:37:52:9b:
3a:f9:f7:61:85:a6:5a:33:35:c1:87:c9:7f:be:78:
82:07:5c:56:87:fe:d9:6d:3d:ce:a4:61:ce:5e:55:
f4:0f:0b:df:34:6c:98:15:02:d3:0e:a0:6e:01:b6:
91:4d:05:c1:7a:51:9d:cf:6e:76:6c:19:e8:75:1c:
18:66:23:e4:4c:1a:ae:b9:93:65:25:48:bf:46:97:
d5:01:ec:e9:3d:b6:60:f2:67:cf:17:a9:8e:20:d6:
3b:c2:63:21:7b:d5:7c:6e:ce:97:de:05:5d:7b:6d:
3f:f4:f9:ab:ba:30:8a:39:ed:dc:e2:3f:17:4f:b1:
4e:53:30:b0:87:c3:d5:bf:3e:d5:99:01:35:47:a1:
cd:ce:99:d0:83:81:60:b8:39:2b:93:d8:ec:d7:8a:
57:85:a5:92:ef:ea:f3:70:cf:46:8e:3c:5d:77:d9:
50:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:ED:E9:6B:20:D9:A1:21:BF:20:2D:E9:07:94:A1:84:2A:02:39:D2
X509v3 Authority Key Identifier:
keyid:62:1B:8E:48:6E:EC:AE:61:24:DE:10:49:4F:D3:91:39:ED:4A:37:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d8:ba:45:9a:ea:d9:97:aa:04:db:01:87:12:50:11:45:d4:
ed:ce:79:bc:04:7f:b9:b6:83:47:61:ef:b2:63:37:83:03:24:
9d:de:70:f4:bf:d8:e3:cb:b9:eb:f5:5f:20:1e:a6:72:73:b0:
73:a0:f3:8a:72:a8:9e:90:68:07:75:e9:9c:17:1e:e9:28:69:
46:24:49:ae:cb:56:c5:ca:32:3e:2c:af:d7:7e:01:b8:08:21:
54:29:21:f9:0b:ed:cb:d6:68:9a:2f:b8:e9:d1:43:29:5b:0f:
b0:a8:9a:db:e7:e7:80:d1:d0:fa:86:3a:95:11:f9:7b:8c:7c:
28:a6:59:c9:1e:57:00:15:03:10:c7:da:0c:bb:f9:62:70:3c:
58:09:0f:de:58:d1:f5:9b:42:98:5e:70:25:b5:d7:79:b0:cf:
0b:55:2b:7a:e9:74:35:87:79:e6:72:04:ef:11:79:36:82:5f:
03:67:2a:99:34:0c:7e:48:a2:ba:a4:35:78:27:96:b1:34:2a:
45:c8:c3:b0:c1:4c:96:0a:50:aa:8f:3a:8d:48:c5:a0:db:2e:
c9:f9:6a:1c:66:37:7f:d9:c6:34:b1:15:66:45:67:31:10:4e:
73:60:50:e8:8b:c0:a9:59:29:e3:6b:6e:4e:5f:eb:80:94:15:
a5:57:85:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:54 2025 by rpki-client