Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
File: yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft (raw, json)
Hash identifier: 0E3zdSIBoJGlemen9kMKLOyCQSXtUWsEYubGJr4EjqE=
Subject key identifier: 84:79:5E:43:46:A9:8D:F1:6E:61:79:CF:4A:3E:70:F6:A3:12:90:67
Authority key identifier: C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03
Certificate issuer: /CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03
Certificate serial: 0194BBCDD5D7138AFB009634F6061AE5026C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
Manifest number: 0F28
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl (hash: hQ1dzk6sY99/ogeoXIHEELC6OyV6ZzPmtOkmlZOelfw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d5:d7:13:8a:fb:00:96:34:f6:06:1a:e5:02:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=84795e4346a98df16e6179cf4a3e70f6a3129067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:54:c6:74:d1:82:f4:ff:18:10:4a:d4:ed:3b:
06:db:21:d2:bd:ef:18:b4:00:6a:e3:d4:45:e0:bf:
e8:d4:45:16:1f:e0:98:30:c5:22:90:3f:be:07:ed:
77:83:0f:93:65:42:c2:80:c0:b3:93:01:77:e8:e1:
53:5b:22:60:29:ec:4f:59:a9:ce:4f:5f:7d:ad:6e:
34:9a:d3:6d:3e:56:f7:30:d9:f8:00:da:b8:56:d5:
c2:bc:de:f6:88:9c:03:47:77:37:79:de:38:a4:4e:
d1:19:f3:8e:ce:b0:cb:61:8f:58:76:ed:1f:8f:68:
23:13:67:da:b5:9a:57:48:a6:b8:77:8a:0d:ff:21:
36:1f:a1:78:88:1b:8e:9e:6e:97:36:43:61:43:54:
25:b6:fa:89:43:b1:dc:2f:58:48:69:8d:ca:22:e2:
ba:5a:97:81:3f:59:da:ba:51:ef:b9:c3:91:e3:3c:
82:d4:9a:27:33:e9:d4:12:ed:72:74:98:2c:20:9d:
05:44:05:b5:b9:88:6f:e1:38:3c:ae:78:2e:3b:8f:
14:e5:55:a8:8b:f3:c7:2d:b9:f2:c8:bd:59:b6:54:
84:d9:d5:dd:2b:48:be:b3:dd:de:00:59:86:22:34:
ee:b9:d7:dc:54:09:d8:d8:75:fb:65:6f:3e:18:90:
ec:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:79:5E:43:46:A9:8D:F1:6E:61:79:CF:4A:3E:70:F6:A3:12:90:67
X509v3 Authority Key Identifier:
keyid:C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c3:9c:1a:c7:20:24:cf:8a:63:66:12:fc:f5:a1:31:e3:d8:
ed:b9:9b:c8:7e:81:51:ab:34:4d:59:2f:d9:24:28:b9:d1:4f:
a2:81:1b:d1:e4:25:9b:14:16:44:74:28:67:39:a9:08:52:d0:
5d:db:43:e9:22:cb:01:25:3d:c5:95:35:20:2a:11:9d:c0:de:
54:25:7f:aa:ba:23:4e:2d:a1:0e:99:9f:dc:d3:f8:86:5c:af:
81:24:fc:ae:f7:32:99:f1:38:69:9c:86:b7:cd:e2:76:8f:4f:
17:21:df:f6:67:26:c9:4b:99:48:9a:3a:51:5b:16:ee:0e:02:
3f:47:0c:ba:39:84:e6:2a:24:79:c0:71:ce:f0:4c:46:7b:68:
96:13:e6:e5:4a:a7:b5:c6:c7:5f:eb:bd:f6:89:1e:fe:4e:d5:
e1:d2:34:c4:5c:12:56:6c:86:b7:72:6d:5e:83:af:13:33:92:
da:67:b2:63:38:57:bc:b7:fb:4d:e0:12:6c:08:43:87:3e:ba:
7f:ec:fa:be:32:07:56:a0:ed:84:a2:3b:5e:0f:ae:7e:42:a2:
04:54:6e:26:1f:dc:1a:b2:1d:48:07:d2:37:43:8e:52:6b:13:
db:e7:73:f4:6d:e0:9c:8a:18:d6:78:07:b0:68:41:82:d7:5d:
07:02:c6:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zdXXE4r7AJY09gYa5QJsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MDFmYzFmOTE4MThlNDhkNmZkMTBlZDZmOWM1MzlhODg4
NTRiMDMwHhcNMjUwMTMxMTAwMDE2WhcNMjUwMjAxMTAwMDE2WjAzMTEwLwYDVQQD
Eyg4NDc5NWU0MzQ2YTk4ZGYxNmU2MTc5Y2Y0YTNlNzBmNmEzMTI5MDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlTGdNGC9P8YEErU7TsG2yHSve8Y
tABq49RF4L/o1EUWH+CYMMUikD++B+13gw+TZULCgMCzkwF36OFTWyJgKexPWanO
T199rW40mtNtPlb3MNn4ANq4VtXCvN72iJwDR3c3ed44pE7RGfOOzrDLYY9Ydu0f
j2gjE2fatZpXSKa4d4oN/yE2H6F4iBuOnm6XNkNhQ1QltvqJQ7HcL1hIaY3KIuK6
WpeBP1naulHvucOR4zyC1JonM+nUEu1ydJgsIJ0FRAW1uYhv4Tg8rnguO48U5VWo
i/PHLbnyyL1ZtlSE2dXdK0i+s93eAFmGIjTuudfcVAnY2HX7ZW8+GJDs7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIR5XkNGqY3xbmF5z0o+cPajEpBnMB8GA1UdIwQY
MBaAFMkB/B+RgY5I1v0Q7W+cU5qIhUsDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVFIOEg1R0Jqa2pXX1JEdGI1eFRtb2lGU3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82Zjk4M2ItM2U1Ni00YzgyLTlmMzgt
NWYxZDg1NjJiNTJmLzEveVFIOEg1R0Jqa2pXX1JEdGI1eFRtb2lGU3dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy82Zjk4M2ItM2U1Ni00YzgyLTlmMzgtNWYxZDg1NjJiNTJm
LzEveVFIOEg1R0Jqa2pXX1JEdGI1eFRtb2lGU3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsOcGscg
JM+KY2YS/PWhMePY7bmbyH6BUas0TVkv2SQoudFPooEb0eQlmxQWRHQoZzmpCFLQ
XdtD6SLLASU9xZU1ICoRncDeVCV/qrojTi2hDpmf3NP4hlyvgST8rvcymfE4aZyG
t83ido9PFyHf9mcmyUuZSJo6UVsW7g4CP0cMujmE5iokecBxzvBMRntolhPm5Uqn
tcbHX+u99oke/k7V4dI0xFwSVmyGt3JtXoOvEzOS2meyYzhXvLf7TeASbAhDhz66
f+z6vjIHVqDthKI7Xg+ufkKiBFRuJh/cGrIdSAfSN0OOUmsT2+dz9G3gnIoY1ngH
sGhBgtddBwLG6g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:48 2025 by rpki-client