Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
File: YQfi4ugXHTGdobxks2w8mF5kbCo.mft (raw, json)
Hash identifier: ngpcGV42yUDgBNRXA5KiohCnePvGiU7+6QmXvqsXy5I=
Subject key identifier: 7E:E4:55:D9:87:B5:88:A4:9D:61:36:F6:71:BE:99:21:9D:12:E3:95
Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Certificate serial: 0194BC04CFE7C7CA001229AAC5BCE6E86E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: SFseMGJeyLzeU46_EsIrHD1Xq7M.roa (hash: 78hLVdERCfjw9B0gX2xcWm8YDkX6eXN4Gd0jp5WOy+Q=)
2: YQfi4ugXHTGdobxks2w8mF5kbCo.crl (hash: pjDhD0OPkaQx0ohMTc0nANLvNuO+9ZEr0foJAR9SRhU=)
3: hPjtiwCLC1o0j8AvpBmtBQU028U.roa (hash: HOlWkUmkwwPkAjP8XtxdcNr70UoyoWRPwYz3VVAT2tA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:cf:e7:c7:ca:00:12:29:aa:c5:bc:e6:e8:6e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=7ee455d987b588a49d6136f671be99219d12e395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:70:97:3f:70:d0:8e:4a:ac:3b:94:60:12:
81:c2:0d:4b:02:de:44:68:10:2f:5c:4d:96:d6:2a:
65:77:5d:d1:64:57:fd:35:63:13:b0:cb:0c:15:9a:
a0:55:2c:79:83:32:11:76:82:cb:2c:9f:b6:73:b9:
5d:7f:f3:17:e3:c4:d8:d9:3a:5e:a5:8c:a9:22:c0:
0c:7f:59:2e:6b:8b:48:52:b0:85:cf:43:2d:54:88:
64:53:0a:eb:96:0b:48:50:73:52:e6:f0:17:ae:4a:
53:ee:74:9d:86:8e:70:a5:6d:64:c3:8b:4c:91:32:
46:48:6b:40:99:0d:a6:2f:de:7f:32:38:27:52:8a:
a9:eb:d6:56:d0:68:04:8e:95:7f:2d:19:a9:db:bc:
69:6b:b3:c2:81:8e:e6:ca:39:a7:75:2b:87:2a:b8:
71:ef:13:b5:13:5b:d7:c1:7e:78:72:5e:32:4c:d8:
de:32:03:85:c6:05:01:40:6a:ec:06:e7:f2:fc:22:
f3:79:4f:88:72:be:23:bd:d8:7f:be:af:3d:05:34:
97:e8:fd:01:8f:db:cb:fe:fd:36:fb:6b:05:a2:aa:
3a:9d:49:50:34:ca:4e:fd:1d:a0:73:4c:4a:7d:09:
2c:e0:c6:fa:ca:a1:66:7f:e3:01:fe:88:1b:e0:38:
42:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E4:55:D9:87:B5:88:A4:9D:61:36:F6:71:BE:99:21:9D:12:E3:95
X509v3 Authority Key Identifier:
keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:46:a2:c7:8c:7f:4d:3f:1b:b7:49:d8:c5:a4:7d:c9:ba:d8:
c7:fb:ad:2d:95:5a:0a:55:28:29:72:76:7d:18:47:79:19:12:
ea:ed:24:26:d1:e0:29:1e:02:2c:53:00:ff:24:1d:44:ac:d4:
cb:f3:3c:fd:c6:56:a0:a1:53:17:b8:09:01:20:fa:32:71:44:
f5:81:22:2c:30:3c:08:7c:67:d2:4d:60:76:d1:71:ce:6a:f3:
7e:16:ad:cf:17:f7:d1:0d:0f:83:5b:b2:91:28:15:ea:4a:92:
67:48:d2:27:e2:12:92:b7:ae:20:31:dc:37:cc:46:60:50:f3:
ee:3e:cb:67:d7:87:87:e9:75:15:d8:bc:54:43:91:70:b9:70:
51:3b:01:52:c0:61:23:ea:d2:5c:79:c6:e5:df:b2:8c:37:e7:
e4:00:6c:f5:93:cf:7f:3d:a8:80:b4:9e:5a:25:66:ec:8a:08:
57:1c:f1:90:a5:3d:98:b9:ef:c6:71:65:c5:6b:b5:a0:a2:de:
88:34:ec:49:7b:51:9a:1d:1b:dd:29:99:4e:d7:0c:14:1e:9c:
c2:18:0f:a5:00:c0:e6:6a:d4:1b:20:c7:8b:1b:0a:d5:b5:39:
c6:59:39:ea:25:e5:b8:ce:1f:93:fe:b7:20:d7:f4:bf:2a:2c:
27:6a:52:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BM/nx8oAEimqxbzm6G6XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMDdlMmUyZTgxNzFkMzE5ZGExYmM2NGIzNmMzYzk4NWU2
NDZjMmEwHhcNMjUwMTMxMTEwMDE5WhcNMjUwMjAxMTEwMDE5WjAzMTEwLwYDVQQD
Eyg3ZWU0NTVkOTg3YjU4OGE0OWQ2MTM2ZjY3MWJlOTkyMTlkMTJlMzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5xwlz9w0I5KrDuUYBKBwg1LAt5E
aBAvXE2W1ipld13RZFf9NWMTsMsMFZqgVSx5gzIRdoLLLJ+2c7ldf/MX48TY2Tpe
pYypIsAMf1kua4tIUrCFz0MtVIhkUwrrlgtIUHNS5vAXrkpT7nSdho5wpW1kw4tM
kTJGSGtAmQ2mL95/MjgnUoqp69ZW0GgEjpV/LRmp27xpa7PCgY7myjmndSuHKrhx
7xO1E1vXwX54cl4yTNjeMgOFxgUBQGrsBufy/CLzeU+Icr4jvdh/vq89BTSX6P0B
j9vL/v02+2sFoqo6nUlQNMpO/R2gc0xKfQks4Mb6yqFmf+MB/ogb4DhCqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7kVdmHtYiknWE29nG+mSGdEuOVMB8GA1UdIwQY
MBaAFGEH4uLoFx0xnaG8ZLNsPJheZGwqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iMDdlNTgtZjkzYS00ZDVmLWI5MmQt
NjAxNmQ1YzA1ZjMwLzEvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9iMDdlNTgtZjkzYS00ZDVmLWI5MmQtNjAxNmQ1YzA1ZjMw
LzEvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYEaix4x/
TT8bt0nYxaR9ybrYx/utLZVaClUoKXJ2fRhHeRkS6u0kJtHgKR4CLFMA/yQdRKzU
y/M8/cZWoKFTF7gJASD6MnFE9YEiLDA8CHxn0k1gdtFxzmrzfhatzxf30Q0Pg1uy
kSgV6kqSZ0jSJ+ISkreuIDHcN8xGYFDz7j7LZ9eHh+l1Fdi8VEORcLlwUTsBUsBh
I+rSXHnG5d+yjDfn5ABs9ZPPfz2ogLSeWiVm7IoIVxzxkKU9mLnvxnFlxWu1oKLe
iDTsSXtRmh0b3SmZTtcMFB6cwhgPpQDA5mrUGyDHixsK1bU5xlk56iXluM4fk/63
INf0vyosJ2pSXw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:59:43 2025 by rpki-client