Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2ae6a0-0d6b-4843-a48e-7cd80135cc72/1/yC9Ian2d4K9JGoeK07PdRJHCSyg.mft
File: yC9Ian2d4K9JGoeK07PdRJHCSyg.mft (raw, json)
Hash identifier: R/n1gxYW+zpCPeLcVTnZdngMrL0wqs+mD9KusGyiiF0=
Subject key identifier: 70:D0:81:76:7C:8A:F7:F2:1E:3A:FB:78:E6:B3:46:B5:DD:92:85:50
Authority key identifier: C8:2F:48:6A:7D:9D:E0:AF:49:1A:87:8A:D3:B3:DD:44:91:C2:4B:28
Certificate issuer: /CN=c82f486a7d9de0af491a878ad3b3dd4491c24b28
Certificate serial: 0189D3A8CA5DE88B6A5E272E4CF5157A3D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yC9Ian2d4K9JGoeK07PdRJHCSyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2ae6a0-0d6b-4843-a48e-7cd80135cc72/1/yC9Ian2d4K9JGoeK07PdRJHCSyg.mft
Manifest number: 0853
Signing time: Tue 08 Aug 2023 05:40:01 +0000
Manifest this update: Tue 08 Aug 2023 05:40:01 +0000
Manifest next update: Wed 09 Aug 2023 05:40:01 +0000
Files and hashes: 1: jx9UyR31vHQqYZjp-YjWTxheVNo.roa (hash: h7sEh/rsqmOnkEs7H3j5243NDGNzhtuUhKiSTORMY2c=)
2: yC9Ian2d4K9JGoeK07PdRJHCSyg.crl (hash: jOakr6PPPgKeJFGNgTwv21N7qDMrbWG+UtuMkf9ABX4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d3:a8:ca:5d:e8:8b:6a:5e:27:2e:4c:f5:15:7a:3d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82f486a7d9de0af491a878ad3b3dd4491c24b28
Validity
Not Before: Aug 8 05:40:01 2023 GMT
Not After : Aug 9 05:40:01 2023 GMT
Subject: CN=70d081767c8af7f21e3afb78e6b346b5dd928550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:22:6f:9f:eb:5a:33:7f:47:fd:bd:af:1f:
bb:8a:60:7d:f3:e4:27:fc:d7:c9:db:b2:5c:e8:cd:
d9:dc:03:90:f7:62:8c:57:75:cb:d5:18:3b:62:f7:
90:e4:89:9d:30:d2:4e:c7:61:e1:b7:d8:34:63:80:
9d:39:29:a7:c5:fe:cc:b2:aa:8c:fb:60:5d:02:e8:
54:4e:49:f7:ca:57:b8:be:c3:ad:2d:dd:31:c9:67:
68:8c:cd:28:92:75:4a:25:3d:c4:61:06:72:71:e8:
52:6f:bf:5d:53:48:54:14:85:15:92:5c:b7:74:e5:
24:d1:84:45:74:d8:84:8f:eb:28:7b:52:aa:80:1a:
7a:24:99:3e:ca:4d:85:b9:48:05:d4:ce:4d:3c:87:
1d:4e:4a:43:91:a7:1d:6a:09:f3:db:84:77:b1:e3:
5f:70:f6:ad:0c:e7:00:a7:fb:f1:b9:90:f8:70:b0:
90:75:d0:61:93:f9:00:21:c1:70:56:2f:38:aa:29:
f5:41:91:5c:96:0d:51:10:09:d6:20:c7:96:dd:d9:
6d:f4:2a:77:c8:58:f3:83:fe:81:de:f8:56:a6:4e:
da:52:e1:7a:ad:b4:d5:d5:eb:08:15:14:93:f1:b2:
2e:36:ed:0d:b8:f0:6c:fa:c0:ca:91:c6:42:7e:44:
84:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D0:81:76:7C:8A:F7:F2:1E:3A:FB:78:E6:B3:46:B5:DD:92:85:50
X509v3 Authority Key Identifier:
keyid:C8:2F:48:6A:7D:9D:E0:AF:49:1A:87:8A:D3:B3:DD:44:91:C2:4B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yC9Ian2d4K9JGoeK07PdRJHCSyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2ae6a0-0d6b-4843-a48e-7cd80135cc72/1/yC9Ian2d4K9JGoeK07PdRJHCSyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2ae6a0-0d6b-4843-a48e-7cd80135cc72/1/yC9Ian2d4K9JGoeK07PdRJHCSyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ae:af:9b:73:50:e1:07:f2:09:47:f7:61:3a:da:b5:4c:95:
a9:6c:81:a8:fb:78:1c:42:c1:bd:f5:66:a4:c6:51:6f:dd:2b:
a6:6b:35:42:88:67:35:3b:7c:37:ee:17:52:ec:e7:52:8c:04:
c9:75:ba:fb:64:38:7e:c1:05:28:c2:50:fc:a4:14:34:70:70:
7a:a8:ab:0c:c4:cf:36:83:01:0c:05:b6:a4:29:eb:80:5d:8b:
1c:8e:d2:36:5e:2a:4d:25:f8:c2:45:5c:70:35:07:87:8e:5a:
a8:5e:d9:f3:c9:f4:45:b4:8a:e5:bd:3d:af:59:43:6d:4d:10:
b2:3f:36:91:f8:03:ce:97:9d:00:21:bf:15:b7:c6:99:70:ca:
86:55:47:02:6d:b5:7c:27:11:de:7f:33:02:7c:46:df:3b:00:
7d:c1:82:31:b1:27:3a:48:5e:58:78:28:6a:43:53:47:04:22:
ee:a4:96:ad:c7:c7:e0:14:bf:8f:89:1d:e4:bb:1f:a1:56:18:
2d:4c:89:e9:43:49:cf:11:5b:e5:a5:05:73:3a:81:b7:af:14:
2e:a9:c8:db:3e:c3:e6:d4:c7:40:5d:1d:c1:7c:da:86:71:73:
04:9f:d7:9f:a6:48:4f:ce:a0:4f:19:77:cb:c1:df:cb:65:48:
81:45:0e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:20:27 2025 by rpki-client