Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
File: YmFlv7I92h-YcLJBf0lkhebAinQ.mft (raw, json)
Hash identifier: CICvEFsgr3JOzPIoOj6ku4GZw8XQmZhCypjTJcz0ZVs=
Subject key identifier: 5F:90:23:EA:EB:92:2D:C1:B3:3F:61:96:77:22:CD:9E:03:FA:1E:20
Authority key identifier: 62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74
Certificate issuer: /CN=626165bfb23dda1f9870b2417f496485e6c08a74
Certificate serial: 0194BC3C6A1C815C5D413E8CE99CA3537D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
Manifest number: 01B8
Signing time: Fri 31 Jan 2025 12:01:03 +0000
Manifest this update: Fri 31 Jan 2025 12:01:03 +0000
Manifest next update: Sat 01 Feb 2025 12:01:03 +0000
Files and hashes: 1: YmFlv7I92h-YcLJBf0lkhebAinQ.crl (hash: znwY+lT1rOwhRONsIXAsaXKUfoy4lEfoKafAVfnvKaw=)
2: sqHnWw_DTKSgc5zNQG4iPku5PBw.roa (hash: w6R1JeMOp3KdC2WjMvic0T8urUWBQwEZKMQrdXTts0w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6a:1c:81:5c:5d:41:3e:8c:e9:9c:a3:53:7d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626165bfb23dda1f9870b2417f496485e6c08a74
Validity
Not Before: Jan 31 12:01:03 2025 GMT
Not After : Feb 1 12:01:03 2025 GMT
Subject: CN=5f9023eaeb922dc1b33f61967722cd9e03fa1e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f6:ba:fe:db:83:63:54:3b:7d:4e:00:b0:39:
aa:3e:ec:fc:49:f9:46:12:94:67:4a:44:99:97:05:
e4:32:f7:7d:f4:52:bc:82:12:b2:b2:0b:47:e1:ae:
f8:03:1f:d0:e5:a1:cd:47:b8:4e:42:84:e8:f1:f6:
f4:14:24:2d:a8:e0:4d:23:5b:f1:24:85:38:d4:58:
92:e2:11:47:4c:41:c9:1b:2c:05:4d:94:c2:b7:be:
f4:cf:4f:47:e5:7a:8a:20:c5:f4:83:f2:5b:ba:00:
dc:d7:0b:08:2e:15:51:c3:5b:2e:6e:11:10:62:16:
73:8b:75:d6:bf:eb:19:e1:2d:22:2e:63:48:78:ba:
39:07:8c:b8:5f:0d:90:82:1b:0a:0e:ff:38:83:d6:
57:38:ea:37:09:77:b2:b4:a4:0f:d5:b6:ae:63:53:
63:c9:d9:0f:3a:fc:dd:85:eb:49:19:ba:a1:29:d6:
a6:6c:4e:0d:f1:b6:80:f8:11:e2:81:6e:a4:37:8a:
a2:a9:47:3a:3d:57:74:b3:64:ce:10:82:5b:59:53:
c0:62:fa:b4:ce:bf:ad:ee:97:e6:e6:62:40:d0:23:
9f:92:64:45:6d:93:1b:98:e7:5e:16:33:72:77:17:
f6:17:ed:c6:c2:b6:5a:58:62:b8:f6:cc:a6:4a:61:
a2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:90:23:EA:EB:92:2D:C1:B3:3F:61:96:77:22:CD:9E:03:FA:1E:20
X509v3 Authority Key Identifier:
keyid:62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:eb:a7:fe:d8:42:1d:1c:88:24:8f:5f:5b:6d:92:37:51:10:
c4:fc:ef:cf:59:16:a2:00:3b:e3:fb:8e:6d:73:77:cd:a9:d1:
09:cb:00:8c:cc:1e:9b:d7:70:11:da:82:cc:8b:26:21:e5:8e:
5e:b0:cb:b3:63:f8:2d:06:f9:58:96:22:fd:7c:19:51:3d:0e:
9a:22:6d:4f:15:8e:df:a6:1f:78:33:e1:50:15:8f:4c:40:01:
65:7b:7f:aa:a0:d1:fd:c4:6c:d0:e7:99:70:56:40:c4:45:92:
45:fa:7b:6c:a7:ef:83:85:31:ca:ef:fe:5b:79:cd:39:c9:ab:
29:a4:ae:57:f4:ab:be:ae:cb:54:6a:64:25:6c:9d:78:b1:58:
06:b4:48:ef:b6:df:cd:17:bd:e8:84:ac:c2:ad:9c:62:76:8c:
c4:32:6a:14:94:2b:27:37:34:b7:0b:b9:72:6f:72:7b:32:0d:
39:78:68:6f:97:2f:a2:33:08:1d:3b:9f:d4:04:ad:cd:1c:b6:
d3:9b:2c:f6:99:27:3f:bf:c3:5c:1d:bd:0e:95:b3:09:cc:4e:
eb:3d:2c:e3:e8:d0:a7:fb:86:0c:9a:66:90:97:87:29:79:6f:
1c:90:b5:fe:a1:26:21:d2:73:10:ca:9e:81:bc:a7:ad:a3:18:
d0:80:2e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:08:33 2025 by rpki-client