Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
File: ynRI_Amz9zINqAV7-o7qm6-c7jk.mft (raw, json)
Hash identifier: BCJQBRzFv32uerSFMvM0V1s3NrOsVDMOsdLXh9HDYZU=
Subject key identifier: 49:DC:6A:AD:96:CE:CD:AD:5D:A9:2E:0E:81:6A:42:70:13:A0:AC:4D
Authority key identifier: CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
Certificate issuer: /CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Certificate serial: 0194BD859A76D478D4A93D1ACBB1C3F52632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: Zz3HiEMl3Xhoe_NeOZYASowUK4I.roa (hash: 0qkYuAOmtXdpU390WKpuoXcdObuMpe6kCjVAADqT7/s=)
2: ynRI_Amz9zINqAV7-o7qm6-c7jk.crl (hash: wqYxHr41+1rev7ZgSOic4LTU9mjGSJHIkUxaKmYYVLM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9a:76:d4:78:d4:a9:3d:1a:cb:b1:c3:f5:26:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=49dc6aad96cecdad5da92e0e816a427013a0ac4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ee:3f:ca:b8:15:41:1f:0a:7e:94:7e:ec:06:
11:69:bd:ca:89:ad:b2:86:9d:f7:5c:14:24:8b:c5:
6b:e3:bf:08:4a:07:d6:c5:c2:dd:4a:64:43:ba:f0:
b5:e1:82:1b:40:1a:c2:20:9a:b7:e2:9a:66:e8:58:
2d:92:00:76:22:d3:41:6d:9a:5b:7e:1c:03:51:57:
cc:ee:8c:a8:84:f1:d9:1f:9c:f5:c9:f7:5f:b2:f9:
64:eb:c2:b7:55:35:59:85:e9:44:9d:ee:62:8c:fa:
93:e0:0a:bd:50:4e:9c:a0:72:a2:65:86:b4:b5:bc:
4a:69:fc:d5:1c:81:ca:4e:49:35:e2:0f:93:ec:a4:
90:da:89:19:46:8c:49:cf:eb:74:49:55:98:69:31:
b5:13:3d:32:12:8c:da:8d:62:0b:a7:e7:03:9b:5e:
d0:30:76:ca:3b:db:10:80:b7:0d:de:02:56:2c:b6:
1b:3c:fb:13:7f:3e:d5:16:ae:43:b3:e4:0b:14:d4:
19:90:80:59:36:8b:47:ef:86:a7:f5:41:6e:69:02:
e4:f6:c8:73:f2:61:54:32:6f:a3:63:d0:33:b0:98:
e4:1f:2f:62:26:78:49:a0:10:5b:e4:ff:0c:00:10:
af:18:b0:b1:bc:38:68:5f:20:f8:a4:9c:b2:82:d1:
c6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DC:6A:AD:96:CE:CD:AD:5D:A9:2E:0E:81:6A:42:70:13:A0:AC:4D
X509v3 Authority Key Identifier:
keyid:CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:af:55:eb:f0:50:fe:4a:16:f5:82:ad:8e:5b:55:a9:f1:a0:
b6:0b:82:c5:c9:5d:ae:4e:b0:56:55:c2:78:b6:1c:12:63:9b:
38:43:8a:91:91:cf:00:82:e4:04:e7:58:02:9a:f7:ca:3d:90:
c7:0e:86:39:1a:46:9a:99:ec:c7:89:3b:b0:cb:c2:ff:35:62:
e5:e5:fa:14:90:8a:67:a0:37:a2:92:6c:bc:b3:68:7b:79:9d:
a8:09:82:a0:ea:04:00:ff:6d:d2:01:18:8d:f5:51:d3:ed:6e:
5d:53:cf:77:19:1e:ae:51:69:5a:10:a3:c3:67:7e:f0:91:b8:
30:3b:9d:0b:30:c0:c9:f6:5f:d2:88:7d:86:86:55:e5:66:c3:
6a:76:11:73:60:45:93:3f:1c:85:67:fc:ea:5f:5d:4e:d1:37:
ac:65:94:12:32:1d:61:ae:04:c1:c5:01:ed:21:ae:5b:ff:7a:
af:22:9e:5c:ac:f4:ea:a6:d0:41:6a:63:32:79:18:2a:a4:6a:
29:65:be:35:c0:ed:1a:0d:5f:02:4b:a7:9d:67:18:57:a9:c5:
82:35:fd:a2:95:70:b6:af:e6:ec:83:92:9c:2e:b5:23:88:1d:
c9:f0:87:c6:40:89:f6:8d:1e:8b:62:d3:2e:94:07:fb:5e:8b:
7f:0e:45:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZp21HjUqT0ay7HD9SYyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNzQ0OGZjMDliM2Y3MzIwZGE4MDU3YmZhOGVlYTliYWY5
Y2VlMzkwHhcNMjUwMTMxMTgwMDM3WhcNMjUwMjAxMTgwMDM3WjAzMTEwLwYDVQQD
Eyg0OWRjNmFhZDk2Y2VjZGFkNWRhOTJlMGU4MTZhNDI3MDEzYTBhYzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+4/yrgVQR8KfpR+7AYRab3Kia2y
hp33XBQki8Vr478ISgfWxcLdSmRDuvC14YIbQBrCIJq34ppm6FgtkgB2ItNBbZpb
fhwDUVfM7oyohPHZH5z1yfdfsvlk68K3VTVZhelEne5ijPqT4Aq9UE6coHKiZYa0
tbxKafzVHIHKTkk14g+T7KSQ2okZRoxJz+t0SVWYaTG1Ez0yEozajWILp+cDm17Q
MHbKO9sQgLcN3gJWLLYbPPsTfz7VFq5Ds+QLFNQZkIBZNotH74an9UFuaQLk9shz
8mFUMm+jY9AzsJjkHy9iJnhJoBBb5P8MABCvGLCxvDhoXyD4pJyygtHGSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEncaq2Wzs2tXakuDoFqQnAToKxNMB8GA1UdIwQY
MBaAFMp0SPwJs/cyDagFe/qO6puvnO45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW5SSV9BbXo5eklOcUFWNy1vN3FtNi1jN2prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80NGNlMDEtZDQ1MS00ZDczLWE2ZTQt
MzgwMmZmNGVjMTU5LzEveW5SSV9BbXo5eklOcUFWNy1vN3FtNi1jN2prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC80NGNlMDEtZDQ1MS00ZDczLWE2ZTQtMzgwMmZmNGVjMTU5
LzEveW5SSV9BbXo5eklOcUFWNy1vN3FtNi1jN2prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy69V6/BQ
/koW9YKtjltVqfGgtguCxcldrk6wVlXCeLYcEmObOEOKkZHPAILkBOdYApr3yj2Q
xw6GORpGmpnsx4k7sMvC/zVi5eX6FJCKZ6A3opJsvLNoe3mdqAmCoOoEAP9t0gEY
jfVR0+1uXVPPdxkerlFpWhCjw2d+8JG4MDudCzDAyfZf0oh9hoZV5WbDanYRc2BF
kz8chWf86l9dTtE3rGWUEjIdYa4EwcUB7SGuW/96ryKeXKz06qbQQWpjMnkYKqRq
KWW+NcDtGg1fAkunnWcYV6nFgjX9opVwtq/m7IOSnC61I4gdyfCHxkCJ9o0ei2LT
LpQH+16Lfw5FPA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:23:42 2025 by rpki-client