Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
File: yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft (raw, json)
Hash identifier: w7TKo+u7EbtsOMIKIOLqhP289C/6sKSmEUA92SCIXeU=
Subject key identifier: 33:46:62:B6:7E:92:EE:21:AE:3A:AC:C5:48:04:E8:9F:49:50:DD:F3
Authority key identifier: CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21
Certificate issuer: /CN=cb268b529393018d4bc9fc54073030a03d929721
Certificate serial: 0194BD17C6CD875EFB09CB42D21978E388A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
Manifest number: 10BF
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl (hash: ek/59GDgfuqZwrGdyo7Z93BnJsz1tuMCCjZ9dWysNWA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c6:cd:87:5e:fb:09:cb:42:d2:19:78:e3:88:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb268b529393018d4bc9fc54073030a03d929721
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=334662b67e92ee21ae3aacc54804e89f4950ddf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:18:fb:67:6b:27:79:a9:4a:77:c6:07:34:2d:
c8:7c:03:fa:a8:9a:dc:fa:c7:5d:e8:49:44:b7:71:
d8:d1:8a:6a:4e:d6:4e:f1:97:0b:ca:59:e2:a7:da:
bb:0a:85:30:e3:bc:18:8f:03:6a:dd:bb:f7:ff:60:
80:11:bd:89:79:40:31:94:44:4f:8c:22:79:15:b1:
c9:42:7b:9b:f8:c7:97:2f:2e:cb:96:94:cc:cb:1a:
2b:1f:a9:ba:aa:ca:b7:aa:0d:5a:bc:9e:4a:a5:9b:
f0:88:63:e8:b5:72:87:ed:b2:ed:37:c7:93:f3:71:
64:80:2f:d1:e0:e5:97:49:a7:fe:8d:ef:08:86:38:
5a:9d:0a:3f:54:3b:6b:74:44:4c:74:a0:00:34:68:
e9:16:1c:bd:6a:d1:58:84:59:8f:7e:de:9e:c7:03:
0e:a9:df:a1:35:38:4d:e8:15:26:76:92:4b:0a:c3:
c3:a2:0d:80:bf:c6:f8:be:d6:29:12:33:7e:0e:cf:
30:10:d3:e9:61:ad:b9:77:fb:2b:9f:40:60:56:61:
96:f4:fe:c8:78:18:91:28:32:dc:97:7d:34:5f:94:
c6:d5:ec:d2:7f:fa:47:3a:08:03:78:b8:8d:44:54:
63:2d:8c:c9:0b:3f:8a:cd:e6:12:39:81:ef:4d:3f:
f0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:46:62:B6:7E:92:EE:21:AE:3A:AC:C5:48:04:E8:9F:49:50:DD:F3
X509v3 Authority Key Identifier:
keyid:CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:7a:ff:19:9e:e9:c5:2a:49:25:96:3c:d4:c4:4c:75:3a:19:
13:16:8f:93:b1:e8:48:6f:a8:51:7a:18:4f:3c:60:8f:01:8f:
07:e7:21:e6:4e:85:92:e6:8d:d7:c1:ec:07:14:c5:21:1e:14:
1f:db:11:f5:4e:d6:bb:8a:19:c1:e2:10:bb:c1:73:00:e2:bb:
f5:58:46:e7:95:99:d8:a0:5e:ac:17:b2:22:e6:04:9c:57:40:
31:46:e8:46:0a:05:81:28:2f:26:c9:10:b4:2f:21:62:88:be:
d3:13:eb:5a:9c:89:60:7f:3f:5d:8a:be:17:81:68:ca:27:a6:
71:1c:37:ac:61:48:70:38:53:01:c0:1d:f7:01:ca:d9:63:2c:
6e:a1:98:bf:4d:15:5b:8e:ea:89:df:60:fb:6f:d7:ed:bc:eb:
5d:06:30:6f:0f:1b:0d:13:33:74:51:86:6d:3d:c2:ad:01:2b:
5e:c1:de:00:d7:06:1e:90:5c:c2:f1:65:85:1b:65:8e:92:e9:
fa:df:ba:fe:ff:4c:31:9a:4f:cf:d3:73:cc:35:28:7b:f6:f7:
56:88:21:d1:72:4e:82:1b:9d:fd:7c:c9:09:12:37:e0:87:9f:
02:1c:21:ee:bd:1f:ec:ad:3c:f6:9f:6b:00:2e:86:f9:19:26:
d6:0a:58:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:51 2025 by rpki-client