Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/4e28c8-04f6-4f4a-b060-3f791fb3c392/1/yVshRCuZuKbxE2EvwPsy2l9siBM.mft
File: yVshRCuZuKbxE2EvwPsy2l9siBM.mft (raw, json)
Hash identifier: AjcYGlFIiSriRLjGdsJnchiunkSIK9BZjxdKwcKSxwU=
Subject key identifier: 68:EF:C5:48:6E:AD:7C:FB:0E:AA:A5:3F:2C:57:F7:F1:71:83:59:6D
Authority key identifier: C9:5B:21:44:2B:99:B8:A6:F1:13:61:2F:C0:FB:32:DA:5F:6C:88:13
Certificate issuer: /CN=c95b21442b99b8a6f113612fc0fb32da5f6c8813
Certificate serial: 018DCB43DF4631E5E0E5A0EC1D47F793DA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVshRCuZuKbxE2EvwPsy2l9siBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/4e28c8-04f6-4f4a-b060-3f791fb3c392/1/yVshRCuZuKbxE2EvwPsy2l9siBM.mft
Manifest number: 1094
Signing time: Wed 21 Feb 2024 10:43:59 +0000
Manifest this update: Wed 21 Feb 2024 10:43:59 +0000
Manifest next update: Thu 22 Feb 2024 10:43:59 +0000
Files and hashes: 1: sYUKRYpdBWCOTWtDpNP9mu5_0x4.roa (hash: lsT3+k6IpnHg62iGneVr50IRXtUvYYGq9as7E9EQQK8=)
2: yVshRCuZuKbxE2EvwPsy2l9siBM.crl (hash: NyqUtj1TMGRNEmfL/VkS+kcrIhAKEF6ZHGyr42/3EWs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cb:43:df:46:31:e5:e0:e5:a0:ec:1d:47:f7:93:da:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c95b21442b99b8a6f113612fc0fb32da5f6c8813
Validity
Not Before: Feb 21 10:43:59 2024 GMT
Not After : Feb 22 10:43:59 2024 GMT
Subject: CN=68efc5486ead7cfb0eaaa53f2c57f7f17183596d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1f:c8:89:35:9d:1a:2a:f0:d2:c9:d5:70:73:
6d:07:7b:76:83:c6:06:d2:8f:47:3d:af:42:a3:32:
67:66:d8:89:70:4c:96:50:bf:03:c0:5f:64:8b:aa:
c8:01:25:3f:91:e9:a0:4f:51:52:e0:20:2e:d0:27:
9c:1b:29:15:16:b3:4b:c1:90:6e:1a:e0:53:91:69:
19:bd:23:3f:fd:fc:4a:ad:f4:50:e8:06:51:5b:7e:
d7:35:c3:ae:c9:e2:6d:f7:38:a9:bc:56:7d:63:e0:
4e:12:22:ce:09:f0:83:48:33:30:a8:7a:cc:55:e7:
dd:0b:44:8b:68:52:47:96:40:21:87:14:79:d6:dc:
bc:4c:e4:7d:34:7e:93:30:ae:05:19:b3:f9:f8:d2:
bb:6c:09:2c:79:61:b4:16:ac:74:6f:59:cb:65:33:
43:b4:86:de:24:8b:62:d5:2d:b0:0e:83:e7:e4:96:
2e:83:3c:e9:7f:1d:15:af:6b:5b:85:75:80:b8:86:
27:fd:c3:f8:6b:b3:99:f8:fe:63:64:59:f4:7b:54:
0a:a9:35:38:11:a5:2e:e6:3b:1d:12:d3:09:32:b9:
65:ec:4d:8b:13:1b:17:0b:b9:ae:3c:50:c5:96:01:
a6:51:c0:e9:19:6f:47:97:d1:d8:af:8f:7b:29:87:
82:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EF:C5:48:6E:AD:7C:FB:0E:AA:A5:3F:2C:57:F7:F1:71:83:59:6D
X509v3 Authority Key Identifier:
keyid:C9:5B:21:44:2B:99:B8:A6:F1:13:61:2F:C0:FB:32:DA:5F:6C:88:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVshRCuZuKbxE2EvwPsy2l9siBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4e28c8-04f6-4f4a-b060-3f791fb3c392/1/yVshRCuZuKbxE2EvwPsy2l9siBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4e28c8-04f6-4f4a-b060-3f791fb3c392/1/yVshRCuZuKbxE2EvwPsy2l9siBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:93:2c:b4:b1:9b:4d:93:24:8b:7b:6d:f9:b9:90:1d:2a:90:
db:42:30:de:45:e7:82:3f:bc:a7:a2:32:66:44:32:91:fd:0c:
06:cd:2b:a7:1e:b4:8f:68:4a:8d:7c:f9:ef:bf:6d:fa:91:51:
33:0e:c9:ac:94:49:b3:24:b0:87:75:c4:3e:72:8d:55:20:e2:
aa:a3:fb:dc:3c:66:55:c7:41:ab:23:64:84:49:6d:c9:e4:99:
06:25:80:a8:18:8e:e9:2a:d1:bb:5b:03:50:db:6f:b0:06:ad:
90:21:ed:d8:03:8b:e4:4b:15:0d:c3:46:36:a2:af:27:c3:3d:
2e:de:51:02:2f:b9:fb:87:0f:fe:62:04:97:a7:c3:b9:b8:dd:
8a:e6:79:4b:29:a8:40:95:c5:b3:58:2d:e9:fa:7d:e8:b6:d3:
5a:2a:82:69:cb:17:2b:93:6e:ca:ba:af:02:3f:c5:e3:c2:d0:
75:23:1c:87:b0:78:fe:88:c9:fd:cf:f4:70:49:63:d7:7f:c0:
e9:47:c2:25:5e:0e:16:0d:f7:09:84:e8:75:ea:98:52:89:be:
6e:fa:0b:e7:2b:be:d5:09:d4:50:cb:71:3b:5b:58:4f:91:d6:
32:ca:01:a4:cd:60:81:e8:51:e4:bd:41:99:be:66:0c:64:da:
c2:2b:72:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:07:01 2025 by rpki-client