Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
File: yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json)
Hash identifier: Gu23eC2Bqm0pHkZuKK4rKODH5rTGeiqTw8tz0ganSWs=
Subject key identifier: 76:24:6C:DA:5F:B4:9B:DC:A4:5D:D4:1A:E3:55:76:C5:9E:A0:EC:1A
Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Certificate serial: 0194BCAA39363846B5ED5C1872BD025C3F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
Manifest number: 0F34
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: u-olTnLwJF6ytkR-o6rX3D_kci8.roa (hash: MR3jrf7iR8t6kjldj/3xqnHlhsr0yJP0AElvCOGrpJI=)
2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: jYTPU7VXbPsKCeK5ODRZvoZ5lkAOa4zvisssrR5Xx2A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:39:36:38:46:b5:ed:5c:18:72:bd:02:5c:3f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=76246cda5fb49bdca45dd41ae35576c59ea0ec1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:93:3d:5e:14:61:1a:e1:09:c0:68:b0:11:
f2:0b:0f:4c:d5:86:09:44:9a:40:57:06:f5:06:06:
da:8b:69:d7:80:83:ca:fe:0e:ee:0e:17:f9:0d:e6:
c9:b3:d0:b7:a0:c9:4b:39:e3:91:0c:f3:8a:96:f4:
2d:92:d9:21:da:05:1f:65:f6:14:56:3a:6b:03:59:
c1:f6:2a:93:ef:f4:55:48:e2:4a:fb:a9:b7:d9:4f:
44:f3:c0:92:3f:45:27:ac:fb:5b:48:c0:05:d9:fb:
cf:01:9a:e0:d8:ca:db:94:1e:7b:39:5f:57:fc:64:
cf:a2:32:ca:41:e4:0f:aa:76:12:f0:f6:e3:ff:86:
f0:38:12:b9:ba:c8:84:bc:6f:b8:9b:be:17:e1:28:
02:6e:13:45:4a:b7:91:77:88:34:e4:7a:b5:1a:cf:
4a:89:12:54:43:50:6a:b6:6b:ba:fa:ba:47:14:9c:
db:ce:b0:56:86:44:85:30:1d:0d:9b:72:df:a0:c0:
64:1c:36:77:06:81:15:46:96:8e:16:56:4f:8f:a1:
2b:c5:03:05:3a:72:e4:47:5b:64:4e:c1:ba:39:31:
06:61:a2:8a:96:65:42:b5:3e:83:12:96:65:c3:b5:
0e:73:9d:d5:68:0a:9f:e4:da:68:e1:dc:ed:97:00:
f9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:24:6C:DA:5F:B4:9B:DC:A4:5D:D4:1A:E3:55:76:C5:9E:A0:EC:1A
X509v3 Authority Key Identifier:
keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:3f:f3:b1:13:da:e3:9e:5c:e5:b1:ed:cc:66:b9:37:16:ab:
a9:73:9c:da:c6:7a:1d:b2:fe:e3:13:58:ed:c2:15:9f:5d:e6:
34:9d:5f:81:4a:2f:31:17:be:dd:9a:12:d2:71:bc:8b:43:1e:
f2:ee:2a:42:b7:1b:cb:ef:46:4c:c2:13:f3:d9:39:fc:8c:33:
e5:ec:b8:ac:cd:9c:3d:01:c5:21:7e:3f:4b:3a:9c:fc:3f:e0:
16:90:93:57:7d:53:10:f9:c4:3d:f4:98:74:79:86:bc:7f:65:
83:58:2d:6b:ed:42:39:e3:2b:52:ff:b7:54:a8:6d:c3:42:bb:
1e:97:ab:3e:f2:2b:5e:cc:25:c1:67:e3:34:24:ab:a1:06:bf:
b5:d4:d4:83:75:57:94:95:07:ed:9d:24:5a:72:8b:d1:0d:27:
2d:71:82:bf:6f:41:8c:fb:bf:d8:33:44:d7:c5:56:cb:a8:9d:
ea:5d:68:a0:46:75:47:ab:11:cd:6f:58:c9:21:14:76:d9:53:
be:55:ac:12:09:65:91:3b:83:d3:41:91:09:da:d1:fe:08:71:
d9:7f:7f:eb:d5:ef:79:ac:12:f0:ac:a9:97:1c:68:0d:ff:77:
a5:a4:6f:29:c8:27:3c:34:b0:f2:c9:c9:cd:86:a5:d9:d6:d0:
e0:c8:31:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qjk2OEa17VwYcr0CXD8SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YTdmZjAxMmNiNzJlYTg0ZDFiODNjMDAyYzMyMDNjYzAy
NGU2YTYwHhcNMjUwMTMxMTQwMDU5WhcNMjUwMjAxMTQwMDU5WjAzMTEwLwYDVQQD
Eyg3NjI0NmNkYTVmYjQ5YmRjYTQ1ZGQ0MWFlMzU1NzZjNTllYTBlYzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwCTPV4UYRrhCcBosBHyCw9M1YYJ
RJpAVwb1Bgbai2nXgIPK/g7uDhf5DebJs9C3oMlLOeORDPOKlvQtktkh2gUfZfYU
VjprA1nB9iqT7/RVSOJK+6m32U9E88CSP0UnrPtbSMAF2fvPAZrg2MrblB57OV9X
/GTPojLKQeQPqnYS8Pbj/4bwOBK5usiEvG+4m74X4SgCbhNFSreRd4g05Hq1Gs9K
iRJUQ1Bqtmu6+rpHFJzbzrBWhkSFMB0Nm3LfoMBkHDZ3BoEVRpaOFlZPj6ErxQMF
OnLkR1tkTsG6OTEGYaKKlmVCtT6DEpZlw7UOc53VaAqf5Npo4dztlwD5LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYkbNpftJvcpF3UGuNVdsWeoOwaMB8GA1UdIwQY
MBaAFMmn/wEsty6oTRuDwALDIDzAJOamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MmZiM2MtNjFhNi00NWNhLWE0N2Ut
ZDJkMTIwOWM0ODI1LzEveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80MmZiM2MtNjFhNi00NWNhLWE0N2UtZDJkMTIwOWM0ODI1
LzEveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuD/zsRPa
455c5bHtzGa5NxarqXOc2sZ6HbL+4xNY7cIVn13mNJ1fgUovMRe+3ZoS0nG8i0Me
8u4qQrcby+9GTMIT89k5/Iwz5ey4rM2cPQHFIX4/Szqc/D/gFpCTV31TEPnEPfSY
dHmGvH9lg1gta+1COeMrUv+3VKhtw0K7HperPvIrXswlwWfjNCSroQa/tdTUg3VX
lJUH7Z0kWnKL0Q0nLXGCv29BjPu/2DNE18VWy6id6l1ooEZ1R6sRzW9YySEUdtlT
vlWsEgllkTuD00GRCdrR/ghx2X9/69XveawS8KyplxxoDf93paRvKcgnPDSw8snJ
zYal2dbQ4Mgxiw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:39 2025 by rpki-client