Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
File: yF0BtEKUbhkkMT1WTzG35C4kVec.mft (raw, json)
Hash identifier: WZGfbo9om97rYoCpG/O92K5dA6pDVppr2Jg238WqRJQ=
Subject key identifier: 3E:D3:08:37:AD:AD:1A:82:72:D4:68:E2:B5:03:BC:02:26:0A:4C:47
Authority key identifier: C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7
Certificate issuer: /CN=c85d01b442946e1924313d564f31b7e42e2455e7
Certificate serial: 0194BD4E5C23E89CBC9C82FE9E39A53FA582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
Manifest number: 08AC
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: DpCybAm9bBRoUpHGAuIQ86Lq5pw.roa (hash: 2p6cZB/6xzzCJ7jeUbBrD5Bf0hcHEh4tn/vPl+35cnU=)
2: yF0BtEKUbhkkMT1WTzG35C4kVec.crl (hash: BY+PBZ8Chp/qoAVIZYv7Rjx+5UY9TqUTbMPkd+uUT1E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5c:23:e8:9c:bc:9c:82:fe:9e:39:a5:3f:a5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85d01b442946e1924313d564f31b7e42e2455e7
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=3ed30837adad1a8272d468e2b503bc02260a4c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:27:23:32:7a:9c:ed:53:64:79:31:74:e0:cc:
c7:e2:cd:e2:57:93:0f:69:d6:37:11:b2:77:77:5a:
3a:1e:5b:34:77:1a:e3:07:30:a5:9e:c8:c2:34:40:
cd:e9:e1:b0:55:65:81:f2:76:43:e3:9a:98:c2:18:
46:af:81:fc:45:42:8a:2d:bf:8e:53:18:1e:4e:10:
a6:60:ac:b9:6f:12:c0:04:21:b4:53:f2:e3:a4:8e:
95:77:46:aa:b5:fe:73:22:d0:f2:52:73:0b:e9:07:
f2:38:dd:37:ce:5e:72:ea:62:6d:76:dc:b7:b3:d6:
6e:56:44:85:4a:ef:ad:8c:32:07:44:ea:f5:67:c7:
5e:f6:78:e2:a4:5c:b2:dc:df:a9:75:e4:cb:76:93:
c2:86:58:d4:80:48:17:37:22:68:85:7d:8d:d3:80:
70:7b:ae:39:86:e4:45:83:d2:00:31:0a:76:45:c9:
3a:a9:bd:40:4d:3f:e1:84:91:14:c2:03:a3:82:da:
29:cd:98:4e:2d:50:6c:f3:c9:59:5b:58:21:0f:c8:
27:f4:20:37:b8:c4:3e:d8:92:a2:42:30:7b:65:2b:
fc:68:44:21:46:6f:85:b2:db:1a:37:16:be:c0:2d:
95:0d:1c:7d:48:44:11:92:56:9b:6b:83:0e:6f:28:
54:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D3:08:37:AD:AD:1A:82:72:D4:68:E2:B5:03:BC:02:26:0A:4C:47
X509v3 Authority Key Identifier:
keyid:C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:01:74:2c:7d:e1:12:6c:0f:a4:7c:f0:cc:e5:d7:31:03:2c:
d3:c4:77:2e:84:b2:a7:aa:85:ad:f3:57:e7:b4:ea:f1:b5:88:
87:17:10:56:97:d0:47:3f:33:6b:93:01:ea:7d:88:41:fb:82:
f5:e8:91:6b:65:e3:1f:78:aa:9b:a5:62:f8:01:d8:f7:de:f6:
7f:5c:a0:9c:60:78:92:f5:8e:87:52:eb:b4:c8:b2:cc:6b:17:
45:31:62:66:d1:e9:03:1e:b5:19:c3:88:32:89:69:67:a7:8c:
f5:5e:e8:d6:07:f5:bb:20:3c:62:f9:4e:ab:81:87:e5:d4:17:
52:72:4c:77:4c:ff:70:0e:6a:85:11:08:2b:15:5c:4b:9e:d2:
9d:6b:2e:37:ab:0c:40:1c:cf:a6:9f:65:d6:82:69:8f:38:38:
a2:b7:fb:d3:c4:d4:58:20:64:f9:34:65:9f:26:59:f1:f0:ff:
87:19:96:1e:6b:0d:60:c7:3e:8b:9a:26:84:39:e3:02:60:7b:
42:ce:5d:69:14:a9:70:11:ee:40:9d:67:53:b4:ad:31:dd:1a:
61:b5:70:fd:9e:91:20:9f:a9:e7:2b:88:03:93:e2:dd:8c:cc:
bd:b4:d3:97:34:79:50:d5:4a:26:a8:8c:9f:cf:71:15:2c:6e:
ab:a8:3f:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tlwj6Jy8nIL+njmlP6WCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NWQwMWI0NDI5NDZlMTkyNDMxM2Q1NjRmMzFiN2U0MmUy
NDU1ZTcwHhcNMjUwMTMxMTcwMDE2WhcNMjUwMjAxMTcwMDE2WjAzMTEwLwYDVQQD
EygzZWQzMDgzN2FkYWQxYTgyNzJkNDY4ZTJiNTAzYmMwMjI2MGE0YzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCcjMnqc7VNkeTF04MzH4s3iV5MP
adY3EbJ3d1o6Hls0dxrjBzClnsjCNEDN6eGwVWWB8nZD45qYwhhGr4H8RUKKLb+O
UxgeThCmYKy5bxLABCG0U/LjpI6Vd0aqtf5zItDyUnML6QfyON03zl5y6mJtdty3
s9ZuVkSFSu+tjDIHROr1Z8de9njipFyy3N+pdeTLdpPChljUgEgXNyJohX2N04Bw
e645huRFg9IAMQp2Rck6qb1ATT/hhJEUwgOjgtopzZhOLVBs88lZW1ghD8gn9CA3
uMQ+2JKiQjB7ZSv8aEQhRm+FstsaNxa+wC2VDRx9SEQRklaba4MObyhUmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7TCDetrRqCctRo4rUDvAImCkxHMB8GA1UdIwQY
MBaAFMhdAbRClG4ZJDE9Vk8xt+QuJFXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUYwQnRFS1ViaGtrTVQxV1R6RzM1QzRrVmVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC81NTA4NzMtZDA2My00MjBkLWEwNTEt
MTZiOTdiOWE4ODVlLzEveUYwQnRFS1ViaGtrTVQxV1R6RzM1QzRrVmVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC81NTA4NzMtZDA2My00MjBkLWEwNTEtMTZiOTdiOWE4ODVl
LzEveUYwQnRFS1ViaGtrTVQxV1R6RzM1QzRrVmVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgF0LH3h
EmwPpHzwzOXXMQMs08R3LoSyp6qFrfNX57Tq8bWIhxcQVpfQRz8za5MB6n2IQfuC
9eiRa2XjH3iqm6Vi+AHY9972f1ygnGB4kvWOh1LrtMiyzGsXRTFiZtHpAx61GcOI
MolpZ6eM9V7o1gf1uyA8YvlOq4GH5dQXUnJMd0z/cA5qhREIKxVcS57SnWsuN6sM
QBzPpp9l1oJpjzg4orf708TUWCBk+TRlnyZZ8fD/hxmWHmsNYMc+i5omhDnjAmB7
Qs5daRSpcBHuQJ1nU7StMd0aYbVw/Z6RIJ+p5yuIA5Pi3YzMvbTTlzR5UNVKJqiM
n89xFSxuq6g/Jw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:24 2025 by rpki-client