Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
File: YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json)
Hash identifier: 9+K3hykB+PDfxDhODN4SXatxWDvK7UgZ8kFuxB0SmOw=
Subject key identifier: 7C:86:B4:83:88:A3:FE:DA:A3:53:B2:4C:C7:5F:79:80:CD:58:0D:62
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial: 0194BC72EC5566240B06EFB8F110E50655A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:35 +0000
Manifest this update: Fri 31 Jan 2025 13:00:35 +0000
Manifest next update: Sat 01 Feb 2025 13:00:35 +0000
Files and hashes: 1: IwNnMumHuRi32I7ksfRxTLj5SGU.roa (hash: CRwLwpZrZ0WbgGxRhGmhgHh8+Fm0a0d8zmfWAizQF84=)
2: X1s8zvuHJ81hdIgP19R2zatnWy0.roa (hash: zIp2gzAGnioL2V7YTZ/nOIwk4pKLhlEEq3/Z8mzK0KQ=)
3: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: 4INiBPhOHGF++8WB/cE97sBSGKt5mFld76FRr6LUqHw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ec:55:66:24:0b:06:ef:b8:f1:10:e5:06:55:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
Validity
Not Before: Jan 31 13:00:35 2025 GMT
Not After : Feb 1 13:00:35 2025 GMT
Subject: CN=7c86b48388a3fedaa353b24cc75f7980cd580d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ad:43:51:2e:51:52:08:0f:c4:a2:8c:aa:c1:
b1:63:b6:89:18:cb:c9:21:44:9b:ec:5e:7d:d4:1f:
35:8f:28:5b:87:d3:18:cf:f1:e1:b6:36:28:b7:16:
ff:bd:9a:e8:30:f1:bf:13:34:f6:b1:5c:62:80:d6:
70:58:31:ad:f9:0f:84:7d:0c:51:e4:5b:02:51:b5:
37:0d:17:b6:34:6f:1c:17:7f:be:6d:17:49:a7:1b:
68:4d:6b:f0:38:59:b7:96:6e:de:07:a5:23:39:0e:
96:c7:b4:0d:5e:de:c3:1c:08:67:6e:d2:1a:9e:aa:
3a:ec:2b:d7:ae:cc:af:94:fc:97:89:50:0a:95:32:
ce:f8:a1:af:f9:d0:95:f7:ae:ef:3e:e7:1b:e1:7d:
1a:38:54:54:0b:e0:31:e1:8e:ef:da:a1:f6:b1:48:
29:d3:cd:12:3b:40:f4:59:46:79:f5:32:66:fc:f0:
3c:34:2b:10:72:d8:2a:3f:c7:53:2e:79:46:02:0e:
02:1a:95:7e:0a:9f:a3:4c:45:b0:4f:c6:74:8d:e2:
1c:21:62:ae:1e:d6:de:13:6f:85:8e:02:2c:4b:f7:
af:1f:4c:28:5a:57:2d:fd:b6:91:e1:9b:db:b8:57:
40:16:a5:36:8e:67:49:f9:ff:cf:e7:94:56:ba:e6:
66:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:86:B4:83:88:A3:FE:DA:A3:53:B2:4C:C7:5F:79:80:CD:58:0D:62
X509v3 Authority Key Identifier:
keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:78:94:36:2f:9c:0a:f2:e6:a9:35:44:83:cf:64:1a:d3:0d:
9e:97:ee:0d:c9:c0:4c:c4:9d:8e:46:b7:85:ba:dd:6c:10:80:
f0:24:b2:db:73:d2:6b:09:5d:3f:eb:bb:c1:48:3d:9e:d8:18:
94:15:59:eb:99:01:a7:52:2f:45:f4:80:84:e8:ef:f6:0f:fc:
e5:e8:0d:ba:44:f3:69:84:39:48:df:9a:89:05:55:b6:8f:23:
50:c7:16:93:48:c7:3c:0d:8f:01:66:f0:8a:20:14:9e:fa:c8:
64:63:8e:29:c4:e5:61:ca:31:40:1d:09:ef:5a:9e:80:ff:9c:
10:9a:5a:b6:75:cb:22:cc:b4:1c:48:ed:90:e6:3b:3c:f5:e9:
4f:7b:d0:55:3e:18:9d:09:a5:f4:28:72:7f:06:57:51:99:33:
2b:73:52:04:f7:f9:a6:a7:5a:77:dd:d7:50:e4:b6:fe:d7:53:
e5:49:87:b4:ff:a1:b1:32:69:87:1b:bc:37:ca:01:22:0d:f3:
e0:66:2e:9f:a8:3b:42:44:30:60:f9:b9:99:75:64:6b:c3:e9:
44:ec:7f:bb:81:83:45:08:a5:d8:99:ce:d6:9b:15:0c:63:5a:
72:1f:ca:19:4e:ed:40:94:f2:d1:71:fa:3e:4d:f6:f3:07:09:
cd:82:f1:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cuxVZiQLBu+48RDlBlWnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMTE3YTFlNmY2OTljMzIyYjZiOTgzNDk0ZjQyYzIyMDkx
Mjc1NTMwHhcNMjUwMTMxMTMwMDM1WhcNMjUwMjAxMTMwMDM1WjAzMTEwLwYDVQQD
Eyg3Yzg2YjQ4Mzg4YTNmZWRhYTM1M2IyNGNjNzVmNzk4MGNkNTgwZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8K1DUS5RUggPxKKMqsGxY7aJGMvJ
IUSb7F591B81jyhbh9MYz/HhtjYotxb/vZroMPG/EzT2sVxigNZwWDGt+Q+EfQxR
5FsCUbU3DRe2NG8cF3++bRdJpxtoTWvwOFm3lm7eB6UjOQ6Wx7QNXt7DHAhnbtIa
nqo67CvXrsyvlPyXiVAKlTLO+KGv+dCV967vPucb4X0aOFRUC+Ax4Y7v2qH2sUgp
080SO0D0WUZ59TJm/PA8NCsQctgqP8dTLnlGAg4CGpV+Cp+jTEWwT8Z0jeIcIWKu
HtbeE2+FjgIsS/evH0woWlct/baR4ZvbuFdAFqU2jmdJ+f/P55RWuuZmSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyGtIOIo/7ao1OyTMdfeYDNWA1iMB8GA1UdIwQY
MBaAFGIReh5vaZwyK2uYNJT0LCIJEnVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWhGNkhtOXBuRElyYTVnMGxQUXNJZ2tTZFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83MGVlMjEtZDkzZi00YTcxLTg0NzQt
NWJjYzg0NThhYTJjLzEvWWhGNkhtOXBuRElyYTVnMGxQUXNJZ2tTZFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS83MGVlMjEtZDkzZi00YTcxLTg0NzQtNWJjYzg0NThhYTJj
LzEvWWhGNkhtOXBuRElyYTVnMGxQUXNJZ2tTZFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdniUNi+c
CvLmqTVEg89kGtMNnpfuDcnATMSdjka3hbrdbBCA8CSy23PSawldP+u7wUg9ntgY
lBVZ65kBp1IvRfSAhOjv9g/85egNukTzaYQ5SN+aiQVVto8jUMcWk0jHPA2PAWbw
iiAUnvrIZGOOKcTlYcoxQB0J71qegP+cEJpatnXLIsy0HEjtkOY7PPXpT3vQVT4Y
nQml9ChyfwZXUZkzK3NSBPf5pqdad93XUOS2/tdT5UmHtP+hsTJphxu8N8oBIg3z
4GYun6g7QkQwYPm5mXVka8PpROx/u4GDRQil2JnO1psVDGNach/KGU7tQJTy0XH6
Pk328wcJzYLxBw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:55 2025 by rpki-client