Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
File: YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json)
Hash identifier: Fvn6eFyZpWDBW9uOskPv2wPP3uRkW3wlzll7uJppsNw=
Subject key identifier: C0:BB:74:B1:29:02:82:FD:AF:F9:13:18:20:D8:3C:27:F3:5E:D1:68
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 0194BBCDD64B1A894E2B5A75119D8B77C05A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: X_PEzQ4h2-EZtXwGF1yRsO_RZBY.roa (hash: slaceRsemZrT4J4p4MYMe/YtYOfBM+8j+DQ+MF7JOoM=)
2: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: qoIRQunbleI42hZgsgI49wWysZ0a9nk2DeXNl8ZfsB8=)
3: uJcwClz6uJRHIAqaB4c6iwo2p2k.roa (hash: YfPxGf556xtNVvXkpS2EQtFKQegwkF+I1h92ZELHuRk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d6:4b:1a:89:4e:2b:5a:75:11:9d:8b:77:c0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=c0bb74b1290282fdaff9131820d83c27f35ed168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:66:f8:da:fe:5b:50:50:ce:b1:ca:18:9a:9f:
c1:c7:d6:eb:86:28:6b:aa:13:44:0d:69:cf:04:74:
a2:1a:c7:07:9e:6d:d6:30:d7:18:5d:f6:65:01:f1:
4c:ea:08:83:7c:6e:08:bd:ab:fc:0a:be:d4:00:97:
c1:ac:f1:fd:7f:45:45:ca:c7:4d:d4:37:18:d0:be:
82:b2:cc:5c:9c:3c:ad:55:50:11:8b:d7:76:09:ed:
c4:10:0c:3b:e7:75:21:d9:f2:1d:e5:8a:01:cc:c2:
53:83:e5:35:7e:a1:4d:87:17:55:b9:8d:0b:e1:d4:
61:bb:db:54:be:1b:32:df:2a:3a:a2:9b:1e:a0:49:
de:7c:e1:02:21:5d:d5:3f:43:14:13:1d:f2:9c:46:
ac:b0:d0:03:9d:c0:20:96:88:95:be:9d:0f:fb:6f:
87:95:0f:38:4f:6e:0c:dd:3c:5e:f2:5a:29:3c:0e:
14:81:68:87:23:6a:fd:d4:a4:0e:a6:c3:4b:7c:29:
b1:12:fd:4b:86:9e:c3:9e:c3:ac:d1:c0:1d:32:3c:
a9:3f:a5:16:88:4e:a7:87:2a:70:f5:23:4a:f5:bf:
1f:de:7c:ed:e2:d2:c4:1f:3d:2a:b4:b2:08:c2:bf:
46:60:82:9c:dd:bf:c3:20:f4:b7:2e:09:3c:5b:8e:
b2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BB:74:B1:29:02:82:FD:AF:F9:13:18:20:D8:3C:27:F3:5E:D1:68
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b0:cd:0d:a6:3a:cd:a3:62:b7:71:21:d9:aa:a3:d4:73:d1:
30:63:1d:87:8a:74:75:88:52:b1:f3:e1:04:7c:88:55:90:88:
13:e2:61:be:05:5e:8b:e6:94:b3:be:de:aa:de:be:09:29:0f:
96:6c:9a:58:7a:98:06:49:92:74:32:86:f4:df:4c:69:e1:72:
08:c7:01:16:dc:7f:8f:d6:ee:05:4b:b6:f2:4e:4b:f4:b1:9d:
04:17:be:f1:e9:c6:6c:00:38:22:0b:ce:96:be:f2:e0:b7:78:
96:43:60:23:12:d1:87:78:08:fc:f1:89:3e:f8:b7:42:1d:4a:
01:35:75:1b:92:35:a7:2d:31:dd:65:b2:ba:b7:c3:f8:58:a6:
19:e6:a5:aa:cb:b4:ef:f0:aa:ab:1d:50:4c:0a:7d:d0:f0:ef:
f8:5b:a6:03:e9:da:ca:ae:fe:35:dd:e5:3e:a8:66:2f:12:31:
28:5f:5f:53:d9:9a:03:c6:49:52:9b:6c:73:0b:11:28:eb:b4:
f7:ef:33:5c:03:6c:ba:c6:93:ac:dc:92:01:5e:60:c8:80:56:
39:ce:80:8d:2e:27:e0:96:d4:97:96:b6:b2:1b:eb:df:32:19:
8f:31:2b:4e:9e:92:71:c1:42:3a:db:84:e5:4b:d9:20:94:89:
6b:62:49:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zdZLGolOK1p1EZ2Ld8BaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYjk2MTVkZjhjNjU5ZGFjOGNjMDg3YmQwMTFkNGI1ZmYz
NzNlMmEwHhcNMjUwMTMxMTAwMDE2WhcNMjUwMjAxMTAwMDE2WjAzMTEwLwYDVQQD
EyhjMGJiNzRiMTI5MDI4MmZkYWZmOTEzMTgyMGQ4M2MyN2YzNWVkMTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmb42v5bUFDOscoYmp/Bx9brhihr
qhNEDWnPBHSiGscHnm3WMNcYXfZlAfFM6giDfG4Ivav8Cr7UAJfBrPH9f0VFysdN
1DcY0L6CssxcnDytVVARi9d2Ce3EEAw753Uh2fId5YoBzMJTg+U1fqFNhxdVuY0L
4dRhu9tUvhsy3yo6opseoEnefOECIV3VP0MUEx3ynEassNADncAgloiVvp0P+2+H
lQ84T24M3Txe8lopPA4UgWiHI2r91KQOpsNLfCmxEv1Lhp7DnsOs0cAdMjypP6UW
iE6nhypw9SNK9b8f3nzt4tLEHz0qtLIIwr9GYIKc3b/DIPS3Lgk8W46ypQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMC7dLEpAoL9r/kTGCDYPCfzXtFoMB8GA1UdIwQY
MBaAFGC5YV34xlnayMwIe9AR1LX/Nz4qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85YThhZDgtYjZjOS00YzZjLWFjMjct
NjJkODgxYWE5MDZmLzEvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS85YThhZDgtYjZjOS00YzZjLWFjMjctNjJkODgxYWE5MDZm
LzEvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbDNDaY6
zaNit3Eh2aqj1HPRMGMdh4p0dYhSsfPhBHyIVZCIE+JhvgVei+aUs77eqt6+CSkP
lmyaWHqYBkmSdDKG9N9MaeFyCMcBFtx/j9buBUu28k5L9LGdBBe+8enGbAA4IgvO
lr7y4Ld4lkNgIxLRh3gI/PGJPvi3Qh1KATV1G5I1py0x3WWyurfD+FimGealqsu0
7/Cqqx1QTAp90PDv+FumA+nayq7+Nd3lPqhmLxIxKF9fU9maA8ZJUptscwsRKOu0
9+8zXANsusaTrNySAV5gyIBWOc6AjS4n4JbUl5a2shvr3zIZjzErTp6SccFCOtuE
5UvZIJSJa2JJjg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:13 2025 by rpki-client