Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/de9c4e-bb97-47ca-a449-513d846cf7ac/1/yXxrGDkX8miA3HkjgCodDkTXuCI.mft
File: yXxrGDkX8miA3HkjgCodDkTXuCI.mft (raw, json)
Hash identifier: KyGx/59oDEUiqDYJHXxmmilHdh3h5yVUy2YKZXMQOus=
Subject key identifier: 09:36:7C:10:98:F9:C6:63:E5:19:32:AF:7C:F7:47:0B:7A:C9:A7:CA
Authority key identifier: C9:7C:6B:18:39:17:F2:68:80:DC:79:23:80:2A:1D:0E:44:D7:B8:22
Certificate issuer: /CN=c97c6b183917f26880dc7923802a1d0e44d7b822
Certificate serial: 018AF86E75AEA18B1EF3A812B5AB08A26548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXxrGDkX8miA3HkjgCodDkTXuCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/de9c4e-bb97-47ca-a449-513d846cf7ac/1/yXxrGDkX8miA3HkjgCodDkTXuCI.mft
Manifest number: 08A8
Signing time: Wed 04 Oct 2023 02:05:03 +0000
Manifest this update: Wed 04 Oct 2023 02:05:03 +0000
Manifest next update: Thu 05 Oct 2023 02:05:03 +0000
Files and hashes: 1: qaDrjS03heRfBF6-MwzcycLtO7w.roa (hash: 5tTtQjXXtZKjVUHbEuN21TLmLRMFbEet/9vWYCqGGJQ=)
2: yXxrGDkX8miA3HkjgCodDkTXuCI.crl (hash: WISjjqdY+lNtGLxD5805vgc3UGJt6YjQKUDC9tSSwuU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f8:6e:75:ae:a1:8b:1e:f3:a8:12:b5:ab:08:a2:65:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97c6b183917f26880dc7923802a1d0e44d7b822
Validity
Not Before: Oct 4 02:05:03 2023 GMT
Not After : Oct 5 02:05:03 2023 GMT
Subject: CN=09367c1098f9c663e51932af7cf7470b7ac9a7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:a3:db:ea:43:03:34:8b:fa:2e:d3:58:43:
20:c6:a9:4f:57:c1:a5:8a:08:84:ed:d5:b0:d8:d2:
6c:18:62:d8:97:c5:d7:7c:66:2c:cf:54:dc:9e:c7:
6e:5d:b5:1b:85:cc:a5:fa:4b:c1:f5:ed:f6:49:a1:
b6:6f:2c:f5:63:49:d5:5e:e6:92:a0:30:9a:70:f5:
02:24:e2:c8:a2:3a:be:3e:4f:a4:22:0a:40:cd:0b:
1e:6e:27:29:d1:7d:a9:df:72:7e:f4:f1:c4:57:7f:
7b:dd:72:9f:2c:c6:03:a9:d0:ed:a6:6b:d8:c3:58:
2a:c8:aa:73:52:a0:9b:eb:58:bb:3b:99:78:36:61:
d8:cf:78:24:7e:76:12:2d:eb:31:b8:bd:a3:5f:b3:
f6:71:35:d4:20:b5:63:9b:8c:5d:3e:dd:b7:32:83:
95:c9:5d:97:93:fd:7c:de:3b:8b:97:82:06:11:cd:
61:b3:37:6a:56:f6:88:8b:6c:66:ea:99:51:65:df:
66:6e:a1:31:6c:2d:73:63:9f:e0:70:8f:65:92:2c:
bd:18:82:38:ee:ad:60:23:81:f7:fe:9f:71:9f:e8:
28:c1:0f:d8:be:75:0c:12:f7:92:38:2c:4e:f7:8b:
03:35:4d:93:cb:79:16:d0:a8:b7:80:35:b8:e5:64:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:36:7C:10:98:F9:C6:63:E5:19:32:AF:7C:F7:47:0B:7A:C9:A7:CA
X509v3 Authority Key Identifier:
keyid:C9:7C:6B:18:39:17:F2:68:80:DC:79:23:80:2A:1D:0E:44:D7:B8:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXxrGDkX8miA3HkjgCodDkTXuCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/de9c4e-bb97-47ca-a449-513d846cf7ac/1/yXxrGDkX8miA3HkjgCodDkTXuCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/de9c4e-bb97-47ca-a449-513d846cf7ac/1/yXxrGDkX8miA3HkjgCodDkTXuCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:79:48:1d:37:aa:1a:05:74:a1:50:e2:2d:45:11:76:d9:38:
8f:45:d0:10:52:d1:4d:44:50:1e:19:27:c5:4c:90:51:cb:4b:
81:5a:d1:3b:8c:d1:29:80:93:85:d2:8f:00:ba:36:b4:18:b1:
f3:1f:a8:a0:fc:98:b7:e8:56:e1:9e:f1:be:b3:4c:4c:ae:d9:
a3:d3:12:9f:79:47:44:74:a0:da:54:f8:4e:67:0d:9f:05:6b:
d5:7c:dc:b7:4b:1f:a8:1b:bb:4c:f9:c1:66:7d:7d:e3:a2:eb:
9d:54:26:e0:24:61:6a:57:3e:f8:a0:59:c1:d6:04:ef:4d:69:
7c:4c:b6:56:a6:93:ed:f8:d1:72:bb:80:a8:05:bf:11:2f:2f:
8c:d7:62:a3:ce:60:fd:c1:3d:2d:a6:84:ed:61:94:a3:cd:d9:
22:46:79:92:9d:80:78:ea:04:76:e7:c1:db:3b:a8:43:ad:39:
b0:0e:60:a2:13:7e:a5:0c:10:9d:5d:8f:15:b4:66:27:22:19:
b3:0e:45:1d:63:a9:d9:fd:f3:87:3f:25:ed:eb:96:10:ae:ad:
31:1f:86:9a:dc:15:68:58:a7:70:ca:79:b6:ed:0a:89:77:f0:
f1:76:b3:2d:bf:4b:8f:04:95:37:68:84:59:3e:0f:81:f4:a3:
cc:27:d8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:00 2025 by rpki-client