Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/cYq2buOowbNazN26V8DH0UjL5V8.mft
File: cYq2buOowbNazN26V8DH0UjL5V8.mft (raw, json)
Hash identifier: Tnx94qLT/Fqu47aXFVxLcrBQBBx9DPLlGy6JDToF49k=
Subject key identifier: 68:B8:11:D3:C6:34:76:C7:15:96:EB:E0:04:2F:83:0D:DA:C5:D1:1E
Authority key identifier: 71:8A:B6:6E:E3:A8:C1:B3:5A:CC:DD:BA:57:C0:C7:D1:48:CB:E5:5F
Certificate issuer: /CN=718ab66ee3a8c1b35accddba57c0c7d148cbe55f
Certificate serial: 0184BC52735EB6F0626DAB2999B513BE37A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYq2buOowbNazN26V8DH0UjL5V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/cYq2buOowbNazN26V8DH0UjL5V8.mft
Manifest number: 0554
Signing time: Mon 28 Nov 2022 03:40:30 +0000
Manifest this update: Mon 28 Nov 2022 03:40:30 +0000
Manifest next update: Tue 29 Nov 2022 03:40:30 +0000
Files and hashes: 1: P5_NF-qoX6QSi9_8lqyzBU5G4Ok.roa (hash: wo8K51WAGgsX9wjy55OOqSUgAovjqCKT7GcoVDeKmfw=)
2: bWAPf4GfQ6667dWROU3It8HbeeA.roa (hash: uQefa6qWAuaHmAe97LvWBZzIW6EJ0LTGmnboyiuNUQ0=)
3: cYq2buOowbNazN26V8DH0UjL5V8.crl (hash: L/QlHnq2WsTlnlwAyMCahTMq8KztLSXOjpLQDQE0irI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bc:52:73:5e:b6:f0:62:6d:ab:29:99:b5:13:be:37:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718ab66ee3a8c1b35accddba57c0c7d148cbe55f
Validity
Not Before: Nov 28 03:40:30 2022 GMT
Not After : Nov 29 03:40:30 2022 GMT
Subject: CN=68b811d3c63476c71596ebe0042f830ddac5d11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ea:cf:0d:c5:2b:bb:fd:12:2d:59:5d:6e:dc:
20:8b:28:f8:6f:b7:e1:86:bc:d4:0b:24:52:49:4c:
61:c6:77:00:c1:45:99:6a:35:b8:e3:fd:83:37:e0:
e4:fe:9c:a9:93:1e:a4:af:d9:7a:af:2e:90:61:e1:
fc:2e:d1:17:e4:09:88:28:f3:df:40:bc:33:74:6a:
6a:62:f8:63:92:8d:f4:ac:9d:40:79:e8:97:99:0e:
f2:37:04:23:d2:77:aa:5d:fc:f3:29:bc:5b:bf:d1:
f9:a9:60:6b:14:f7:19:05:7b:96:79:47:1b:db:6b:
0f:53:68:8b:9c:f3:1a:0d:70:9e:34:0a:e7:a7:1e:
e1:f4:50:8d:cb:08:3d:72:a7:71:5e:9c:5c:46:2f:
0a:bf:68:58:47:ed:f6:d0:c2:31:c1:ee:1d:aa:57:
f2:e3:da:2c:9d:66:f9:aa:8f:ce:18:87:ee:23:76:
42:4d:30:ad:f5:ff:1e:75:8e:98:94:89:e6:48:3c:
4a:dd:8e:c0:3b:1d:3f:db:98:b7:c6:f1:15:3a:91:
9e:a6:4f:eb:54:8b:cf:d3:e0:57:2c:90:fc:84:91:
ca:c9:3d:fc:34:78:b2:8a:19:41:40:8a:fc:f0:d0:
54:8d:b3:92:b6:18:2f:d2:89:38:82:79:38:be:73:
f5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B8:11:D3:C6:34:76:C7:15:96:EB:E0:04:2F:83:0D:DA:C5:D1:1E
X509v3 Authority Key Identifier:
keyid:71:8A:B6:6E:E3:A8:C1:B3:5A:CC:DD:BA:57:C0:C7:D1:48:CB:E5:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYq2buOowbNazN26V8DH0UjL5V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/cYq2buOowbNazN26V8DH0UjL5V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/cYq2buOowbNazN26V8DH0UjL5V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:91:dd:72:b9:2c:01:fb:ce:b3:7b:56:8d:bd:8a:15:ff:6e:
94:38:78:ae:ab:07:1b:1b:d8:04:99:67:5a:ff:8a:c7:ad:36:
f4:c6:93:c0:3a:3e:51:95:82:80:df:9f:32:76:16:58:09:12:
45:52:26:26:ec:3b:ce:0c:e8:96:14:c1:0b:12:33:9c:28:0d:
7b:7f:09:e6:29:26:a0:25:e7:4e:ec:c5:41:03:bf:2e:34:93:
b2:bc:3d:a4:10:ac:01:d5:89:f7:b3:0c:d4:b4:ab:66:da:73:
4c:b1:d3:f4:d0:23:72:81:21:d0:4e:db:2b:90:c2:52:46:8b:
06:89:5a:17:f9:d3:e7:3a:de:8b:70:a4:15:1b:63:5d:b7:8d:
7b:38:3d:6f:7a:f2:d4:38:26:df:b2:e0:15:c1:13:3a:00:3c:
a4:52:17:71:71:f8:68:2a:13:e3:74:cb:2b:df:ee:8f:65:93:
6f:a4:4c:20:ec:70:e2:c5:6b:14:4a:16:21:c5:f8:61:0b:62:
94:74:aa:f1:b3:64:39:96:e9:da:63:c7:81:c1:17:ce:65:a4:
79:48:ed:30:f5:73:94:ea:af:c2:35:96:ed:be:44:26:43:e0:
d6:12:01:d6:da:0e:f4:da:16:82:8f:58:38:6e:5b:83:c2:28:
e1:9c:9e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:30 2025 by rpki-client