Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
File: YIYxT4djXnk7wuPbvtZkBbisZ3E.mft (raw, json)
Hash identifier: iwYwyZM1SVLrnBH45q/adzCFBcsHN4/zRZccgempXeY=
Subject key identifier: 5B:F9:33:D3:6C:8D:B0:D1:EE:73:B4:63:48:81:13:A6:D2:EE:BA:9C
Authority key identifier: 60:86:31:4F:87:63:5E:79:3B:C2:E3:DB:BE:D6:64:05:B8:AC:67:71
Certificate issuer: /CN=6086314f87635e793bc2e3dbbed66405b8ac6771
Certificate serial: 0194BC3C4C1D6D728048FA85DBFD12669DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: YIYxT4djXnk7wuPbvtZkBbisZ3E.crl (hash: rOlnFSKka4WeVaJoq7s29r4BjQdV6dVaj6kuxSAM0gY=)
2: ul5EPC9Jg-xhzDe3-EnpTxgh7Dw.roa (hash: pDodgoORM1hTtwe+JSl0g3mWRdcfDqaXlT1wiKFyqck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4c:1d:6d:72:80:48:fa:85:db:fd:12:66:9d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6086314f87635e793bc2e3dbbed66405b8ac6771
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=5bf933d36c8db0d1ee73b463488113a6d2eeba9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c9:cd:63:67:cf:43:5d:99:88:97:e0:15:62:
f3:5b:ea:77:f0:fe:96:5c:f8:44:16:f9:fc:bd:3a:
5b:6e:78:50:17:d0:06:75:71:7c:6a:f8:bb:bc:e9:
17:6e:5a:61:82:14:20:9a:aa:c0:a7:04:5b:b2:21:
25:34:a8:34:6d:14:88:3e:4c:42:fc:71:62:2c:6a:
f5:e8:90:c6:71:4c:96:99:19:af:38:da:93:15:1b:
27:dc:60:2d:0c:5e:89:75:14:bd:5e:52:a7:16:3c:
40:05:3d:92:32:3a:84:a8:44:af:d9:46:75:db:e9:
23:e0:81:6b:36:b4:66:5d:54:ef:f7:d7:d1:4b:c0:
9e:80:7f:94:f9:d6:1c:65:84:4e:d1:4e:eb:c8:59:
25:e8:da:54:7b:80:ac:df:82:6d:9d:80:6c:4b:8d:
b9:e0:8e:ea:8e:78:ee:11:07:cf:df:0d:89:05:ba:
ae:59:f3:86:8d:cb:75:58:03:66:d0:11:5c:8c:bb:
6f:38:d7:3c:ef:09:b9:96:6b:56:d3:c9:76:27:5d:
30:c1:40:14:45:08:8b:05:85:9d:19:60:1c:43:64:
ca:38:fa:b8:0f:78:40:a6:a6:48:13:9d:e0:40:c2:
61:43:2f:ac:63:55:1d:ee:4e:95:45:61:8f:58:fb:
e3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F9:33:D3:6C:8D:B0:D1:EE:73:B4:63:48:81:13:A6:D2:EE:BA:9C
X509v3 Authority Key Identifier:
keyid:60:86:31:4F:87:63:5E:79:3B:C2:E3:DB:BE:D6:64:05:B8:AC:67:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f9:2c:cf:c8:e8:dd:8b:6e:1a:7f:ee:f5:ba:df:49:16:be:
56:b8:1f:0a:a1:40:e5:10:3e:b1:d7:ea:99:79:70:c8:76:97:
e3:15:b6:90:25:47:16:98:05:9c:27:72:c7:7a:58:56:19:8e:
78:4f:4a:e6:53:24:4f:fe:54:d0:a9:cc:88:e4:13:91:04:d6:
78:c4:f6:91:14:c5:1c:b3:1b:c5:08:b6:18:a4:0b:b6:84:d6:
b0:c9:da:85:29:2e:a8:6c:fa:03:4b:35:36:88:55:f9:57:3b:
47:ed:ed:e5:b7:d5:92:d7:b5:a8:cb:24:89:30:bd:56:f1:94:
48:46:45:7f:16:16:84:c9:3b:0e:d4:e1:8e:40:09:7e:2d:f6:
96:0c:cb:02:18:11:43:96:09:41:d4:ed:d1:30:a6:ab:2a:3e:
46:45:d9:bd:dc:49:64:f9:57:8a:ad:76:b8:ef:e0:84:72:ee:
89:1e:cf:58:b5:d9:4a:09:70:a4:e3:97:20:9f:8f:02:6c:cc:
eb:ff:08:1a:94:26:96:29:8e:d9:e9:4f:00:27:64:93:b1:be:
ee:63:ff:43:3b:07:ca:49:7c:56:96:2e:24:a1:be:15:db:21:
30:2a:5f:f2:96:4b:5d:d3:21:c4:c9:46:42:ef:35:59:3e:ac:
cb:f1:37:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PEwdbXKASPqF2/0SZp2gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwODYzMTRmODc2MzVlNzkzYmMyZTNkYmJlZDY2NDA1Yjhh
YzY3NzEwHhcNMjUwMTMxMTIwMDU1WhcNMjUwMjAxMTIwMDU1WjAzMTEwLwYDVQQD
Eyg1YmY5MzNkMzZjOGRiMGQxZWU3M2I0NjM0ODgxMTNhNmQyZWViYTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8nNY2fPQ12ZiJfgFWLzW+p38P6W
XPhEFvn8vTpbbnhQF9AGdXF8avi7vOkXblphghQgmqrApwRbsiElNKg0bRSIPkxC
/HFiLGr16JDGcUyWmRmvONqTFRsn3GAtDF6JdRS9XlKnFjxABT2SMjqEqESv2UZ1
2+kj4IFrNrRmXVTv99fRS8CegH+U+dYcZYRO0U7ryFkl6NpUe4Cs34JtnYBsS425
4I7qjnjuEQfP3w2JBbquWfOGjct1WANm0BFcjLtvONc87wm5lmtW08l2J10wwUAU
RQiLBYWdGWAcQ2TKOPq4D3hApqZIE53gQMJhQy+sY1Ud7k6VRWGPWPvj8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFv5M9NsjbDR7nO0Y0iBE6bS7rqcMB8GA1UdIwQY
MBaAFGCGMU+HY155O8Lj277WZAW4rGdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUlZeFQ0ZGpYbms3d3VQYnZ0WmtCYmlzWjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZmJjNWYtN2MwNC00MGRhLTlkNWEt
MDI4MDU5OGYxOWUzLzEvWUlZeFQ0ZGpYbms3d3VQYnZ0WmtCYmlzWjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wZmJjNWYtN2MwNC00MGRhLTlkNWEtMDI4MDU5OGYxOWUz
LzEvWUlZeFQ0ZGpYbms3d3VQYnZ0WmtCYmlzWjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPksz8jo
3YtuGn/u9brfSRa+VrgfCqFA5RA+sdfqmXlwyHaX4xW2kCVHFpgFnCdyx3pYVhmO
eE9K5lMkT/5U0KnMiOQTkQTWeMT2kRTFHLMbxQi2GKQLtoTWsMnahSkuqGz6A0s1
NohV+Vc7R+3t5bfVkte1qMskiTC9VvGUSEZFfxYWhMk7DtThjkAJfi32lgzLAhgR
Q5YJQdTt0TCmqyo+RkXZvdxJZPlXiq12uO/ghHLuiR7PWLXZSglwpOOXIJ+PAmzM
6/8IGpQmlimO2elPACdkk7G+7mP/QzsHykl8VpYuJKG+FdshMCpf8pZLXdMhxMlG
Qu81WT6sy/E3CQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:56:07 2025 by rpki-client