Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bc8b3a-db3d-42d6-91c0-af8cda25566a/1/yWZA6u8DHLJL6zZewNq-smFzxCE.mft
File: yWZA6u8DHLJL6zZewNq-smFzxCE.mft (raw, json)
Hash identifier: JrUx1c2f3Xg17VzOYf0gFZqAgbIug70gN/pKzvcJb8A=
Subject key identifier: DB:D2:A2:96:DF:41:2B:3B:3C:0E:85:2F:BD:3F:36:4E:13:2B:1C:B4
Authority key identifier: C9:66:40:EA:EF:03:1C:B2:4B:EB:36:5E:C0:DA:BE:B2:61:73:C4:21
Certificate issuer: /CN=c96640eaef031cb24beb365ec0dabeb26173c421
Certificate serial: 0194BC3C21FBB7F9C2695164EFE3B03B6F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWZA6u8DHLJL6zZewNq-smFzxCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bc8b3a-db3d-42d6-91c0-af8cda25566a/1/yWZA6u8DHLJL6zZewNq-smFzxCE.mft
Manifest number: 0467
Signing time: Fri 31 Jan 2025 12:00:44 +0000
Manifest this update: Fri 31 Jan 2025 12:00:44 +0000
Manifest next update: Sat 01 Feb 2025 12:00:44 +0000
Files and hashes: 1: 1-mIPKSkYpNmtmyhyy0uPMVsgS5g.roa (hash: b/OsREBlmDZGABmcrKbSYERpj4mDG9P/9Adhd+if/0s=)
2: yWZA6u8DHLJL6zZewNq-smFzxCE.crl (hash: jz+cjyZqfGk+51w5gPtIjTlCCkPKBViXWvRzfNcknLY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:21:fb:b7:f9:c2:69:51:64:ef:e3:b0:3b:6f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c96640eaef031cb24beb365ec0dabeb26173c421
Validity
Not Before: Jan 31 12:00:44 2025 GMT
Not After : Feb 1 12:00:44 2025 GMT
Subject: CN=dbd2a296df412b3b3c0e852fbd3f364e132b1cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:ed:9b:f4:d1:4b:89:bd:7d:01:a1:00:99:
ca:9f:7a:16:22:93:cd:95:56:9e:b6:eb:e9:6e:7d:
1f:0e:0f:7b:d0:a1:73:e8:11:69:63:c0:6c:c4:dc:
4f:68:4e:06:4c:52:00:c6:76:e6:02:1d:d6:c8:c5:
2f:7c:01:5e:8c:f4:29:58:5b:8e:65:94:2b:68:3f:
b2:ae:e3:4a:b0:8e:97:4e:b5:d8:d6:6f:20:c0:41:
9e:cb:26:42:35:dc:7d:f5:44:78:45:2b:44:af:df:
23:91:54:6a:e4:cf:b5:48:2b:e6:80:63:26:b7:22:
99:b0:cc:7e:da:6d:3a:c0:ce:51:6d:37:ff:f5:f5:
03:36:fd:e1:25:51:24:6b:49:ef:f7:b8:70:c2:98:
0d:a7:b0:e4:33:e4:e5:68:45:4f:cd:95:6d:28:2f:
f9:88:4e:6f:2d:03:dc:f1:30:13:08:11:3e:12:ae:
c3:30:75:91:2a:8f:ea:6e:c7:e0:d6:61:0d:aa:6b:
08:f7:11:42:81:f1:44:c8:70:7f:7c:66:76:7e:63:
25:0a:5c:5e:9e:1e:15:86:63:74:70:4c:e4:65:a7:
2e:e9:83:41:25:c4:a9:13:85:74:20:ad:f5:2a:c6:
8c:96:b3:d1:41:75:15:ec:18:0a:ad:12:b2:a2:c8:
7e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D2:A2:96:DF:41:2B:3B:3C:0E:85:2F:BD:3F:36:4E:13:2B:1C:B4
X509v3 Authority Key Identifier:
keyid:C9:66:40:EA:EF:03:1C:B2:4B:EB:36:5E:C0:DA:BE:B2:61:73:C4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWZA6u8DHLJL6zZewNq-smFzxCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bc8b3a-db3d-42d6-91c0-af8cda25566a/1/yWZA6u8DHLJL6zZewNq-smFzxCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bc8b3a-db3d-42d6-91c0-af8cda25566a/1/yWZA6u8DHLJL6zZewNq-smFzxCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:87:fc:49:e4:cf:58:c6:e7:a7:6e:50:e0:01:b4:26:63:81:
4c:f8:fc:14:6a:c3:8d:f7:12:14:48:72:45:87:99:b1:00:73:
71:50:db:9b:60:dd:a3:ad:40:7f:b4:84:91:e3:09:ff:a7:33:
b5:4c:e6:f2:30:f5:b7:c4:36:cb:9b:fb:3a:10:64:63:d7:53:
16:c0:08:eb:75:ca:1b:c0:4a:57:e7:f0:a1:bc:c5:73:bf:bd:
86:1f:57:78:4a:e8:dd:64:8d:48:d6:53:ec:ae:f0:3b:85:a8:
8f:0d:0d:67:31:36:da:0d:50:cb:d6:49:9d:51:0f:52:68:29:
9d:de:36:04:2a:f7:91:6e:b3:74:30:15:b0:c2:79:e8:d5:80:
67:c3:2b:c1:ee:ae:9b:20:0b:8a:b9:1d:58:54:54:d8:4d:59:
8e:95:14:94:03:b5:10:19:51:0a:ab:4b:73:00:a0:7d:28:fd:
3f:47:09:1e:67:3c:8f:a4:f6:08:74:4f:49:25:52:61:dc:a2:
50:d2:15:87:fd:3d:55:5d:d3:d8:31:06:18:a2:7b:00:b9:04:
d3:a2:96:73:55:85:4a:1b:3f:6c:13:4c:12:ee:1b:a7:62:6a:
cf:60:10:66:a9:16:0e:2e:c8:79:62:12:b4:4b:b9:9f:e9:18:
a9:86:71:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PCH7t/nCaVFk7+OwO28UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NjY0MGVhZWYwMzFjYjI0YmViMzY1ZWMwZGFiZWIyNjE3
M2M0MjEwHhcNMjUwMTMxMTIwMDQ0WhcNMjUwMjAxMTIwMDQ0WjAzMTEwLwYDVQQD
EyhkYmQyYTI5NmRmNDEyYjNiM2MwZTg1MmZiZDNmMzY0ZTEzMmIxY2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0Htm/TRS4m9fQGhAJnKn3oWIpPN
lVaetuvpbn0fDg970KFz6BFpY8BsxNxPaE4GTFIAxnbmAh3WyMUvfAFejPQpWFuO
ZZQraD+yruNKsI6XTrXY1m8gwEGeyyZCNdx99UR4RStEr98jkVRq5M+1SCvmgGMm
tyKZsMx+2m06wM5RbTf/9fUDNv3hJVEka0nv97hwwpgNp7DkM+TlaEVPzZVtKC/5
iE5vLQPc8TATCBE+Eq7DMHWRKo/qbsfg1mENqmsI9xFCgfFEyHB/fGZ2fmMlClxe
nh4VhmN0cEzkZacu6YNBJcSpE4V0IK31KsaMlrPRQXUV7BgKrRKyosh+YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvSopbfQSs7PA6FL70/Nk4TKxy0MB8GA1UdIwQY
MBaAFMlmQOrvAxyyS+s2XsDavrJhc8QhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVdaQTZ1OERITEpMNnpaZXdOcS1zbUZ6eENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9iYzhiM2EtZGIzZC00MmQ2LTkxYzAt
YWY4Y2RhMjU1NjZhLzEveVdaQTZ1OERITEpMNnpaZXdOcS1zbUZ6eENFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9iYzhiM2EtZGIzZC00MmQ2LTkxYzAtYWY4Y2RhMjU1NjZh
LzEveVdaQTZ1OERITEpMNnpaZXdOcS1zbUZ6eENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARof8SeTP
WMbnp25Q4AG0JmOBTPj8FGrDjfcSFEhyRYeZsQBzcVDbm2Ddo61Af7SEkeMJ/6cz
tUzm8jD1t8Q2y5v7OhBkY9dTFsAI63XKG8BKV+fwobzFc7+9hh9XeEro3WSNSNZT
7K7wO4Wojw0NZzE22g1Qy9ZJnVEPUmgpnd42BCr3kW6zdDAVsMJ56NWAZ8Mrwe6u
myALirkdWFRU2E1ZjpUUlAO1EBlRCqtLcwCgfSj9P0cJHmc8j6T2CHRPSSVSYdyi
UNIVh/09VV3T2DEGGKJ7ALkE06KWc1WFShs/bBNMEu4bp2Jqz2AQZqkWDi7IeWIS
tEu5n+kYqYZxZg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:11 2025 by rpki-client