Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
File: YepnO-KLST26RBhw-1Dlmg0cF8U.mft (raw, json)
Hash identifier: 3gmPTi3IUhVypNHtL/0nMT6MSz2LnJ23xLeGrGNmgcA=
Subject key identifier: D0:C7:CA:8F:41:C9:EA:27:E4:08:04:38:FF:12:8F:9C:1B:61:48:32
Authority key identifier: 61:EA:67:3B:E2:8B:49:3D:BA:44:18:70:FB:50:E5:9A:0D:1C:17:C5
Certificate issuer: /CN=61ea673be28b493dba441870fb50e59a0d1c17c5
Certificate serial: 0194BCE06D560D4A5BB6D0DCF3E4710E27B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: YepnO-KLST26RBhw-1Dlmg0cF8U.crl (hash: LULePvAcoLTwUS44+moiTqb/EmEDNF5nmdBBwz1FcUA=)
2: syKB6zisduN4C3cAJozjgCCO0PY.roa (hash: 0Vdx4RjEX6ZtXLCLRmfeUBESEOKss3f6Va2BIWn7LcE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6d:56:0d:4a:5b:b6:d0:dc:f3:e4:71:0e:27:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ea673be28b493dba441870fb50e59a0d1c17c5
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=d0c7ca8f41c9ea27e4080438ff128f9c1b614832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:89:28:ca:77:c4:b4:fb:b9:a0:53:55:28:b6:
9f:fe:84:95:45:d1:ac:8c:de:a8:5a:52:6c:d7:81:
4a:d3:8c:5a:68:35:a4:73:1f:9d:9f:94:6f:95:4d:
99:fa:b2:59:3a:0c:7a:4a:40:ef:81:ce:88:1f:2a:
20:d4:03:87:3f:c1:a2:c4:29:c7:33:a0:ba:a6:39:
a8:61:25:ff:76:eb:59:94:4a:32:b4:0c:5a:99:c0:
72:2e:5d:1c:8e:06:27:6c:56:49:73:8e:da:3e:18:
06:30:5f:05:e5:47:ef:dd:8d:37:64:f9:ea:21:d5:
99:78:84:ab:2e:e4:8b:d0:ed:ab:70:e6:46:e8:1e:
f7:27:41:31:6e:67:99:47:44:2c:c9:b3:d6:5e:33:
39:94:f0:31:d3:e9:2f:38:f6:5c:a9:0d:eb:8a:c9:
df:85:4a:6b:98:84:f6:0f:ad:5f:06:d0:c7:96:74:
6c:11:3a:9e:21:a1:14:6c:03:12:a3:07:bb:69:25:
32:63:34:a8:50:02:74:c2:fc:8a:1e:71:2d:42:04:
78:ee:c1:1e:09:1e:61:2e:45:1d:32:fd:50:c1:f1:
b7:13:89:df:b8:68:29:b1:54:53:e1:a7:fe:61:5c:
29:99:b6:6d:10:bd:69:44:1b:44:04:8e:a5:a9:96:
84:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C7:CA:8F:41:C9:EA:27:E4:08:04:38:FF:12:8F:9C:1B:61:48:32
X509v3 Authority Key Identifier:
keyid:61:EA:67:3B:E2:8B:49:3D:BA:44:18:70:FB:50:E5:9A:0D:1C:17:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:55:2e:f1:81:1a:13:57:ab:cb:2a:7e:19:a2:8a:30:16:ff:
f7:d6:91:a3:8f:9c:b1:c6:bd:87:53:5c:7d:56:17:32:d5:40:
cf:3f:1b:d0:f8:9b:a3:09:1a:ce:ce:a0:4e:7a:51:aa:26:a0:
24:8e:0a:a7:ab:67:be:05:c9:9a:fe:11:94:90:ed:fc:72:f5:
49:d5:a0:9f:1f:99:7b:b7:86:9f:5e:d3:af:5d:4c:f2:54:84:
d7:9d:5d:db:c9:66:dc:64:38:ba:4b:bb:9f:18:bd:0c:37:26:
11:3e:02:61:0f:e7:9a:a2:7d:20:03:ea:50:80:bb:fc:05:34:
46:21:84:5c:52:25:fc:e8:ee:f1:5e:f9:f8:b9:dd:66:2c:bf:
37:33:67:fb:50:72:47:d7:68:91:13:92:3d:07:9a:33:97:a4:
f5:d4:c1:e6:8b:4a:be:67:3b:82:fc:ea:52:f7:9e:16:5c:1d:
49:b3:6a:de:75:92:9b:02:6e:77:ef:65:2a:24:bd:89:77:a5:
fc:47:1b:d2:10:bb:58:83:67:33:ae:9f:c0:3d:2e:11:e9:6c:
ad:04:97:25:6a:91:0f:8a:fa:2c:b9:d1:52:76:38:20:b2:f2:
02:ef:49:6e:c8:2d:96:ed:c5:3d:70:fd:92:5e:e8:01:30:68:
7e:da:3a:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84G1WDUpbttDc8+RxDiezMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZWE2NzNiZTI4YjQ5M2RiYTQ0MTg3MGZiNTBlNTlhMGQx
YzE3YzUwHhcNMjUwMTMxMTUwMDEyWhcNMjUwMjAxMTUwMDEyWjAzMTEwLwYDVQQD
EyhkMGM3Y2E4ZjQxYzllYTI3ZTQwODA0MzhmZjEyOGY5YzFiNjE0ODMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7okoynfEtPu5oFNVKLaf/oSVRdGs
jN6oWlJs14FK04xaaDWkcx+dn5RvlU2Z+rJZOgx6SkDvgc6IHyog1AOHP8GixCnH
M6C6pjmoYSX/dutZlEoytAxamcByLl0cjgYnbFZJc47aPhgGMF8F5Ufv3Y03ZPnq
IdWZeISrLuSL0O2rcOZG6B73J0ExbmeZR0QsybPWXjM5lPAx0+kvOPZcqQ3risnf
hUprmIT2D61fBtDHlnRsETqeIaEUbAMSowe7aSUyYzSoUAJ0wvyKHnEtQgR47sEe
CR5hLkUdMv1QwfG3E4nfuGgpsVRT4af+YVwpmbZtEL1pRBtEBI6lqZaE9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDHyo9Byeon5AgEOP8Sj5wbYUgyMB8GA1UdIwQY
MBaAFGHqZzvii0k9ukQYcPtQ5ZoNHBfFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWVwbk8tS0xTVDI2UkJody0xRGxtZzBjRjhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80MmMxYmYtODlmZi00ODJmLTlmMTQt
NDk4ZGQxZDMwN2QwLzEvWWVwbk8tS0xTVDI2UkJody0xRGxtZzBjRjhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80MmMxYmYtODlmZi00ODJmLTlmMTQtNDk4ZGQxZDMwN2Qw
LzEvWWVwbk8tS0xTVDI2UkJody0xRGxtZzBjRjhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1Uu8YEa
E1eryyp+GaKKMBb/99aRo4+csca9h1NcfVYXMtVAzz8b0Pibowkazs6gTnpRqiag
JI4Kp6tnvgXJmv4RlJDt/HL1SdWgnx+Ze7eGn17Tr11M8lSE151d28lm3GQ4uku7
nxi9DDcmET4CYQ/nmqJ9IAPqUIC7/AU0RiGEXFIl/Oju8V75+LndZiy/NzNn+1By
R9dokROSPQeaM5ek9dTB5otKvmc7gvzqUveeFlwdSbNq3nWSmwJud+9lKiS9iXel
/Ecb0hC7WINnM66fwD0uEelsrQSXJWqRD4r6LLnRUnY4ILLyAu9Jbsgtlu3FPXD9
kl7oATBofto6qw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:30 2025 by rpki-client