Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
File: YjUmrZ--xXT6TsPZuttUM_2qyns.mft (raw, json)
Hash identifier: smSbrWSBdaVT8PNljGIryihsvMxH5VZIkpK/ktNPmYw=
Subject key identifier: B8:AC:6E:F9:34:A2:BF:78:4A:9E:DA:56:E8:4B:2F:51:5B:6E:16:B3
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 0194BC72B6E9D087A39ECA49A670223201A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
Manifest number: 0A38
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: YjUmrZ--xXT6TsPZuttUM_2qyns.crl (hash: Nbul0XpfTn9mOr3I7vqdNCZrQS1xO7SUInoou6lZK0M=)
2: kVcJYJ6Q63B4lKtQ5vKu6QeoxFU.roa (hash: zBFFe6GTU3Rj12iW+TDrkgjiFgVWN+v43RC3XAW3nrQ=)
3: xBRxdmpfvYOwV2CG-TGZUb7lV80.roa (hash: BYeaby5+zBYzTYQvAAICT6cMk4h5pLzaoyyqUhm5i9M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b6:e9:d0:87:a3:9e:ca:49:a6:70:22:32:01:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=b8ac6ef934a2bf784a9eda56e84b2f515b6e16b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e5:48:e7:5c:a0:78:22:82:fe:9d:a9:c8:86:
d8:e0:db:f1:ce:21:23:68:4a:5b:2e:ab:06:4b:a2:
1e:b9:f9:af:3a:19:63:31:42:52:74:42:99:b8:65:
c8:0b:72:68:98:40:1d:64:0d:b2:3a:05:d9:fc:91:
4f:ef:50:ab:1d:8c:6e:e4:4f:8d:f8:19:8a:9e:1a:
29:68:c7:3a:d0:b0:5c:9e:ba:f9:92:e6:1b:ef:1a:
eb:a6:11:19:f6:7d:30:4b:f6:c0:2c:d6:c3:0c:38:
e9:96:2e:1f:53:01:57:df:65:ea:5a:ba:45:0b:af:
d4:9c:e6:36:56:29:6d:c4:ad:92:25:a2:94:4d:6b:
43:13:e8:e1:3d:bb:e0:6c:cf:2c:cd:09:79:7e:b2:
fc:27:33:7e:5a:c5:32:d9:85:65:cb:fe:ea:3c:9c:
dc:db:77:72:07:b2:f6:94:ea:77:83:63:d7:1c:73:
10:d9:b3:3d:f1:bf:d5:22:a1:dc:19:d2:ab:8c:97:
8c:d5:0f:5e:1b:9b:5a:39:df:9a:32:23:cf:91:7f:
1d:fd:62:64:c1:34:37:22:cb:bf:49:19:43:03:12:
1b:1d:fc:3e:40:1a:69:cb:81:22:9c:d4:82:5d:0e:
e0:14:06:7b:3c:69:bd:53:ba:cf:a4:01:6e:70:c3:
73:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AC:6E:F9:34:A2:BF:78:4A:9E:DA:56:E8:4B:2F:51:5B:6E:16:B3
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:37:01:f7:b1:ba:64:64:1a:8a:ca:ca:91:8a:fa:5e:c1:b2:
c7:9f:05:4b:ba:fb:4f:fc:12:19:23:53:44:d0:38:4c:de:de:
c1:f3:af:67:21:5b:2b:f3:f3:80:1b:e2:40:c2:97:07:c7:95:
8d:1b:c8:f9:e9:6b:d9:b5:cb:1b:bb:ee:87:bc:54:c2:6d:09:
4c:e7:e3:d9:be:a7:09:b1:68:45:07:62:a8:4f:8d:51:f6:27:
6c:b0:47:9d:32:c7:5d:76:0e:0e:e8:ec:e1:68:b9:49:d1:36:
06:b0:f3:dc:9a:e0:aa:89:4f:ec:8e:9c:ae:90:9e:0f:b1:1b:
4d:52:29:63:c7:2f:52:23:45:0c:24:d2:2c:c9:1c:03:e0:78:
1d:f2:2d:74:0b:ce:60:dd:44:f3:28:74:ff:0b:40:de:c1:b6:
96:c5:30:19:fa:48:69:b3:9b:27:93:c8:2b:a2:bd:00:fa:97:
d7:dc:03:90:c2:15:75:f6:5b:b1:e8:27:2a:73:95:27:92:0a:
52:81:63:9e:1d:53:01:08:14:78:d8:e1:c6:65:1b:2c:c4:f7:
e3:54:38:21:aa:ca:be:45:ea:a7:35:36:15:e1:e1:0d:6f:d6:
cb:0e:b0:32:3d:0e:39:ed:39:7a:5b:61:a0:e2:c6:81:c5:ba:
6b:9b:ff:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8crbp0IejnspJpnAiMgGmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMzUyNmFkOWZiZWM1NzRmYTRlYzNkOWJhZGI1NDMzZmRh
YWNhN2IwHhcNMjUwMTMxMTMwMDIyWhcNMjUwMjAxMTMwMDIyWjAzMTEwLwYDVQQD
EyhiOGFjNmVmOTM0YTJiZjc4NGE5ZWRhNTZlODRiMmY1MTViNmUxNmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieVI51ygeCKC/p2pyIbY4NvxziEj
aEpbLqsGS6IeufmvOhljMUJSdEKZuGXIC3JomEAdZA2yOgXZ/JFP71CrHYxu5E+N
+BmKnhopaMc60LBcnrr5kuYb7xrrphEZ9n0wS/bALNbDDDjpli4fUwFX32XqWrpF
C6/UnOY2ViltxK2SJaKUTWtDE+jhPbvgbM8szQl5frL8JzN+WsUy2YVly/7qPJzc
23dyB7L2lOp3g2PXHHMQ2bM98b/VIqHcGdKrjJeM1Q9eG5taOd+aMiPPkX8d/WJk
wTQ3Isu/SRlDAxIbHfw+QBppy4EinNSCXQ7gFAZ7PGm9U7rPpAFucMNzvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLisbvk0or94Sp7aVuhLL1FbbhazMB8GA1UdIwQY
MBaAFGI1Jq2fvsV0+k7D2brbVDP9qsp7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZDhmYzktYjIxYi00ZGI1LTk1Y2Yt
ODFjOGNlNzUwMTI0LzEvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xZDhmYzktYjIxYi00ZGI1LTk1Y2YtODFjOGNlNzUwMTI0
LzEvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDcB97G6
ZGQaisrKkYr6XsGyx58FS7r7T/wSGSNTRNA4TN7ewfOvZyFbK/PzgBviQMKXB8eV
jRvI+elr2bXLG7vuh7xUwm0JTOfj2b6nCbFoRQdiqE+NUfYnbLBHnTLHXXYODujs
4Wi5SdE2BrDz3JrgqolP7I6crpCeD7EbTVIpY8cvUiNFDCTSLMkcA+B4HfItdAvO
YN1E8yh0/wtA3sG2lsUwGfpIabObJ5PIK6K9APqX19wDkMIVdfZbsegnKnOVJ5IK
UoFjnh1TAQgUeNjhxmUbLMT341Q4IarKvkXqpzU2FeHhDW/Wyw6wMj0OOe05elth
oOLGgcW6a5v/fg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:59:03 2025 by rpki-client