Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
File: yu5BB041mQr-T1CoTkLrCVhKLxk.mft (raw, json)
Hash identifier: oKduLOkcBhyKJmV8FNX6KIDjUaT2ebyesKwzFnbNiV4=
Subject key identifier: 68:66:0B:96:7E:D4:A9:90:2B:E3:57:C3:D2:74:30:99:34:E7:14:12
Authority key identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
Certificate issuer: /CN=caee41074e35990afe4f50a84e42eb09584a2f19
Certificate serial: 0194BBCE991F197C4B330C9171EF7E7EA588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
Manifest number: 0B10
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: sgBY7n2csmLkZgf9ainTuHIvW2g.roa (hash: DJU1cJjUpjCYx1PJIE+EYgCKTFmb6SUb2ET+8j8meig=)
2: yu5BB041mQr-T1CoTkLrCVhKLxk.crl (hash: Ch1JsXcCYwcCU57GT5CiphJbsOUtc1vXgcM/xLwxd28=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:99:1f:19:7c:4b:33:0c:91:71:ef:7e:7e:a5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caee41074e35990afe4f50a84e42eb09584a2f19
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=68660b967ed4a9902be357c3d274309934e71412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:30:73:80:a2:31:9e:7d:c1:f1:f6:c6:0b:77:
00:2b:ce:a1:0e:c4:2e:79:ff:f6:92:33:bf:a6:27:
79:4a:d8:9b:9d:e0:07:ec:63:a5:e1:23:2a:bf:c4:
4d:d8:5b:c4:e2:e8:19:00:3b:4f:a6:d6:f6:2f:52:
a1:8a:3d:b1:a4:e4:e4:ad:29:02:7e:c6:87:65:36:
d9:67:62:97:27:7e:96:7c:58:ea:96:28:d9:45:b1:
37:e5:dd:cb:b3:be:79:b7:a7:9d:9a:d2:31:22:81:
5f:9d:0a:37:65:59:a5:5d:cb:ec:d6:d6:a7:78:89:
ec:2c:ae:57:8c:13:80:30:55:f8:60:84:92:1e:f5:
45:c2:6e:43:8e:f3:2d:da:9a:38:18:8b:ce:c6:ba:
57:50:7f:23:df:6f:83:44:a8:9d:ea:38:02:fc:77:
68:51:1b:76:b6:1f:c1:33:40:eb:bc:dd:21:d2:11:
d7:a5:5e:42:e0:04:4c:c4:04:37:27:de:67:69:6c:
e1:64:cc:98:55:58:fc:dc:38:a8:6d:c6:39:b9:98:
6f:f9:2f:29:15:47:12:4b:d8:92:b1:38:ee:f5:7a:
09:88:e0:61:52:fd:f6:b6:b0:85:64:34:0b:9b:cb:
9b:44:2a:5b:ae:a0:8f:e4:24:1e:6d:21:d8:06:97:
2a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:66:0B:96:7E:D4:A9:90:2B:E3:57:C3:D2:74:30:99:34:E7:14:12
X509v3 Authority Key Identifier:
keyid:CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:63:5b:72:52:9e:63:ea:7e:55:ff:64:83:0b:5d:26:84:5e:
be:77:b4:84:84:fb:eb:9d:06:28:c0:f6:15:4e:ce:52:08:ec:
4c:33:ee:d0:f3:9e:ea:1d:c2:58:cb:2a:cf:c8:56:f5:da:17:
b2:0a:bf:d5:6f:30:78:94:d2:da:4a:03:20:3e:83:84:a7:2e:
b3:a3:f9:99:e3:a2:36:e8:22:68:ad:1d:dc:db:05:b6:f9:21:
24:65:9d:e8:e7:c1:eb:2d:b1:50:4b:7e:2b:cd:ac:95:d4:ea:
73:f6:29:3e:23:18:41:9d:4c:5f:f0:95:d2:33:22:ca:39:15:
30:f9:78:39:2e:48:1a:e6:0e:30:a3:4a:b4:94:3a:90:aa:76:
b2:b5:87:05:02:18:c3:87:7f:af:31:09:03:fd:8a:32:6b:bc:
6b:16:60:4d:f3:6b:b9:e1:a8:5b:24:95:b8:ae:8f:02:c3:35:
2b:6d:95:41:17:dc:82:c1:26:39:2f:8d:bf:36:4f:49:35:d7:
a8:18:fd:85:5c:66:4f:ce:0f:ca:38:4f:c7:09:cb:3b:fd:9b:
d1:8a:41:74:21:de:cb:29:28:80:01:cc:20:26:50:5a:fa:36:
cb:93:c1:f8:71:5e:42:e2:d0:3c:a0:47:29:7b:b4:70:fa:7c:
25:a1:85:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:52 2025 by rpki-client