Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
File: y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft (raw, json)
Hash identifier: O1trqasX36K8PCkgxz7fkDToLI2vyGJMjp/tSDTf1/4=
Subject key identifier: A1:02:E1:F8:98:70:E0:8C:D1:ED:68:39:4D:C1:E0:40:DF:A2:10:1A
Authority key identifier: CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
Certificate issuer: /CN=cb4d83a67fb35af88de83c1304c6743a51531361
Certificate serial: 0194BC3C303AA5532717080303FF9FA15412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
Manifest number: 06A7
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: UHqtBgSDgvWiKqqXMe1OOteaUSY.roa (hash: CfsdekWehjVXBaU77dZF4ZxuaSUomCVNK9b+NLACtb8=)
2: soLPFB9BaoeGyxe_ows2MqIBmHY.roa (hash: zvz/ucZSe9gs0q+JXgBGOo5yJbgzXAhsnWqzDHocROw=)
3: xHaucpgtSJqvYDWEQH_jghu3SHs.roa (hash: 7WTdK2upF+9XygbepRb7SlbpqhR7M3j31Q2B96zjyEA=)
4: y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl (hash: 9i5U6ZaoQ0f/muCIEsnZSjiOTrnI3s0+wEHrh2tic44=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:30:3a:a5:53:27:17:08:03:03:ff:9f:a1:54:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d83a67fb35af88de83c1304c6743a51531361
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=a102e1f89870e08cd1ed68394dc1e040dfa2101a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:ea:f6:c1:2e:0c:1c:c3:9b:ab:7a:10:ef:
82:31:77:c3:23:d9:c3:3a:4e:07:ce:67:78:5c:ed:
86:59:d1:34:31:6d:c8:63:64:c1:79:16:e0:20:af:
60:c9:b0:e0:bc:03:e9:88:79:55:3e:8f:4f:bd:3d:
42:c0:60:45:53:2f:3f:a4:54:b5:b3:4e:b2:ca:43:
19:9a:77:e5:f0:5b:bc:aa:7b:b2:2f:57:0b:c5:54:
c5:fc:32:58:5e:f3:a8:7e:7e:30:6a:06:72:9e:18:
76:cd:00:5b:83:d5:ef:c3:b3:63:70:48:bd:1d:39:
23:16:ab:0f:60:c7:02:94:7e:84:7c:3c:5c:b0:3a:
6a:8f:87:cf:d5:7e:82:9b:bf:1c:34:63:e7:02:f6:
ac:c1:64:14:85:f6:b6:7e:4d:80:8f:45:fa:7d:b1:
39:b3:b1:a6:c5:a9:5e:43:53:08:5a:66:3e:8e:94:
59:98:ad:7a:ac:19:38:9f:d9:75:3a:09:5e:8b:be:
55:8b:9d:29:1b:e4:3c:d1:c9:9a:1a:87:4d:0a:2f:
9c:fb:b0:f8:58:77:2e:b0:22:f9:80:e8:54:c4:f7:
53:c6:1b:41:fc:04:bc:b7:0e:c6:af:b8:09:82:ff:
b7:0e:6c:79:9a:1d:d1:41:cd:ca:68:d8:df:5f:a8:
82:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:02:E1:F8:98:70:E0:8C:D1:ED:68:39:4D:C1:E0:40:DF:A2:10:1A
X509v3 Authority Key Identifier:
keyid:CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:5c:d5:1a:0e:b8:8a:e1:39:45:4a:98:d5:3d:2e:95:60:d1:
ed:87:af:eb:8b:03:09:b0:ad:d6:d3:b5:bc:08:21:d5:91:fa:
0c:59:26:f2:46:f2:be:31:55:b0:4f:07:d1:78:d9:48:82:15:
a8:9c:12:c7:b8:75:3f:d5:6d:b6:3d:66:c0:4c:e6:4a:b7:8c:
7e:55:cf:11:ef:3b:9d:f1:e3:f2:56:7c:1a:ac:af:5f:26:2b:
08:ca:22:3d:fb:65:77:41:a2:3e:f9:26:bf:7b:13:ed:f7:1e:
db:e0:e5:ec:cd:1d:90:48:40:ad:39:fb:37:57:ed:a0:3c:4f:
09:3c:a8:3e:8f:de:d3:65:ff:eb:fb:a7:11:1f:cb:4f:f7:15:
cf:aa:83:4c:d7:7d:fa:4a:91:96:e9:3c:8c:2d:60:d0:47:1a:
18:e4:50:22:be:3d:92:f0:c3:cb:f0:b9:d7:0f:4b:8b:e1:2d:
cb:60:e4:f5:05:33:56:10:d8:60:93:23:44:9b:5b:f0:3a:50:
4a:cb:69:a9:f2:a5:b9:c8:4b:de:3b:31:4a:ee:f9:6c:93:df:
fb:3b:b2:c1:62:8f:7f:d9:95:29:4c:f7:63:b2:42:a9:ec:a8:
da:df:c1:e0:0c:49:40:7b:37:52:d8:fb:e7:ed:42:81:0d:d1:
b1:00:b2:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PDA6pVMnFwgDA/+foVQSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNGQ4M2E2N2ZiMzVhZjg4ZGU4M2MxMzA0YzY3NDNhNTE1
MzEzNjEwHhcNMjUwMTMxMTIwMDQ4WhcNMjUwMjAxMTIwMDQ4WjAzMTEwLwYDVQQD
EyhhMTAyZTFmODk4NzBlMDhjZDFlZDY4Mzk0ZGMxZTA0MGRmYTIxMDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1Xq9sEuDBzDm6t6EO+CMXfDI9nD
Ok4Hzmd4XO2GWdE0MW3IY2TBeRbgIK9gybDgvAPpiHlVPo9PvT1CwGBFUy8/pFS1
s06yykMZmnfl8Fu8qnuyL1cLxVTF/DJYXvOofn4wagZynhh2zQBbg9Xvw7NjcEi9
HTkjFqsPYMcClH6EfDxcsDpqj4fP1X6Cm78cNGPnAvaswWQUhfa2fk2Aj0X6fbE5
s7GmxaleQ1MIWmY+jpRZmK16rBk4n9l1Oglei75Vi50pG+Q80cmaGodNCi+c+7D4
WHcusCL5gOhUxPdTxhtB/AS8tw7Gr7gJgv+3Dmx5mh3RQc3KaNjfX6iCeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEC4fiYcOCM0e1oOU3B4EDfohAaMB8GA1UdIwQY
MBaAFMtNg6Z/s1r4jeg8EwTGdDpRUxNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83ZTkwYWMtOTBjZi00NTIzLThmOTct
MzE2NjBjMjJkMTllLzEveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83ZTkwYWMtOTBjZi00NTIzLThmOTctMzE2NjBjMjJkMTll
LzEveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsVzVGg64
iuE5RUqY1T0ulWDR7Yev64sDCbCt1tO1vAgh1ZH6DFkm8kbyvjFVsE8H0XjZSIIV
qJwSx7h1P9Vttj1mwEzmSreMflXPEe87nfHj8lZ8GqyvXyYrCMoiPftld0GiPvkm
v3sT7fce2+Dl7M0dkEhArTn7N1ftoDxPCTyoPo/e02X/6/unER/LT/cVz6qDTNd9
+kqRluk8jC1g0EcaGORQIr49kvDDy/C51w9Li+Ety2Dk9QUzVhDYYJMjRJtb8DpQ
SstpqfKluchL3jsxSu75bJPf+zuywWKPf9mVKUz3Y7JCqeyo2t/B4AxJQHs3Utj7
5+1CgQ3RsQCyeA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:48 2025 by rpki-client