Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
File: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft (raw, json)
Hash identifier: MB5OBV3d8wz67j+3Y3vkgGCZjNOLmX5/PLeLNC/3ins=
Subject key identifier: 5B:3E:1F:07:93:1B:36:F9:E0:96:E4:EF:67:BC:72:1D:03:DF:EE:80
Authority key identifier: CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7
Certificate issuer: /CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
Certificate serial: 0194BC04D1A8ECF05444975A47E65739C276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
Manifest number: 01D0
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: VeB2JYEPPZXx0utNRLtg6FNWYsY.roa (hash: gSEi8VHhU2GnejHtbzAY1q6WOPbiaaKQKVxj7a98mY8=)
2: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl (hash: EdBnS2C0lcexzXyAk2PHDqAYKEtcF9cMhjIneEU8pks=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d1:a8:ec:f0:54:44:97:5a:47:e6:57:39:c2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=5b3e1f07931b36f9e096e4ef67bc721d03dfee80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:63:25:0f:49:d4:74:ae:cc:41:26:39:a5:
23:f2:31:65:a7:22:cf:2b:70:3d:6c:37:2a:12:6a:
62:c2:60:e6:d6:c8:13:7c:2a:da:11:8f:75:81:47:
db:ba:a7:55:e2:af:6b:2a:18:a3:26:0b:60:12:0a:
35:9f:c6:66:2b:72:0a:05:a4:66:2c:86:3c:a8:07:
52:97:25:38:f8:ee:3c:15:c9:15:9f:94:27:f9:a5:
a6:26:a3:e5:c5:18:17:12:16:c5:d2:f2:03:2e:40:
d7:73:62:70:e1:b1:78:1c:9d:d8:81:2d:bb:e1:38:
6f:f3:69:22:e4:de:9c:81:4f:7c:16:48:5f:2b:1e:
fd:20:fc:75:1b:07:8d:67:f5:48:87:23:50:3b:82:
a0:b6:bb:eb:34:11:7d:7b:9d:27:26:47:00:88:0c:
a7:91:2b:17:ea:db:57:8a:e3:c2:d7:2e:06:fb:c8:
b8:c7:9e:b2:44:54:bb:37:dd:09:1d:5e:b0:7d:c3:
1a:82:b3:93:aa:a7:45:b3:5b:17:d5:74:b0:63:43:
56:2a:2c:b9:73:c1:cd:3a:dd:ef:36:e3:a1:94:44:
fe:d9:17:b1:4a:21:c0:db:f4:70:68:17:f3:72:b2:
fd:50:2a:c6:b5:7d:b9:85:de:bc:89:90:5e:c4:86:
cf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3E:1F:07:93:1B:36:F9:E0:96:E4:EF:67:BC:72:1D:03:DF:EE:80
X509v3 Authority Key Identifier:
keyid:CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c1:d7:83:ac:08:59:0d:90:63:f7:f6:ad:94:0e:b2:be:d0:
0d:ac:ed:37:ae:1c:45:17:13:2c:e5:6b:eb:15:09:db:18:0c:
07:79:e4:0f:12:12:bf:e4:6a:9c:5a:8e:7f:32:27:a6:0c:4a:
46:ab:07:2d:dc:4d:22:dd:1f:3e:c6:4b:2b:29:1f:c8:3f:f1:
7c:14:ba:57:56:97:48:4f:fb:a9:b9:e9:34:99:2b:be:9a:84:
34:de:7c:1d:43:75:9f:c6:21:4d:79:89:e5:9e:97:85:15:75:
46:2b:45:8a:b4:20:39:46:d2:d0:7c:a5:e8:75:d7:39:81:97:
c0:f4:d7:27:c7:d4:f7:0a:ff:78:9d:0e:d5:0e:d1:7d:bf:a3:
36:fd:63:05:40:10:b5:d2:f9:0b:2c:e1:46:f9:a0:55:54:fc:
93:f3:dd:5f:e2:98:08:72:0b:ab:7f:68:4a:75:68:80:85:be:
11:fb:ac:6e:d8:74:ee:be:fa:97:1d:53:2c:26:46:5f:ca:d2:
65:24:79:75:eb:37:ab:17:e3:0b:54:19:bd:51:ca:26:7d:3c:
f7:64:7a:66:6e:cf:fc:d1:2d:fd:0c:ca:b9:a2:03:d9:02:e0:
3d:dd:a7:9f:3d:81:c3:ad:23:72:ea:d2:dd:33:c2:3a:0d:8a:
8b:14:80:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BNGo7PBURJdaR+ZXOcJ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMTJkOGJhMmUwODk0ZGQwNmNhMTQzYTU1MTcyMzRlNTg0
YWY4YzcwHhcNMjUwMTMxMTEwMDE5WhcNMjUwMjAxMTEwMDE5WjAzMTEwLwYDVQQD
Eyg1YjNlMWYwNzkzMWIzNmY5ZTA5NmU0ZWY2N2JjNzIxZDAzZGZlZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZFjJQ9J1HSuzEEmOaUj8jFlpyLP
K3A9bDcqEmpiwmDm1sgTfCraEY91gUfbuqdV4q9rKhijJgtgEgo1n8ZmK3IKBaRm
LIY8qAdSlyU4+O48FckVn5Qn+aWmJqPlxRgXEhbF0vIDLkDXc2Jw4bF4HJ3YgS27
4Thv82ki5N6cgU98FkhfKx79IPx1GweNZ/VIhyNQO4KgtrvrNBF9e50nJkcAiAyn
kSsX6ttXiuPC1y4G+8i4x56yRFS7N90JHV6wfcMagrOTqqdFs1sX1XSwY0NWKiy5
c8HNOt3vNuOhlET+2RexSiHA2/RwaBfzcrL9UCrGtX25hd68iZBexIbPXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFs+HweTGzb54Jbk72e8ch0D3+6AMB8GA1UdIwQY
MBaAFMsS2LouCJTdBsoUOlUXI05YSvjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXhMWXVpNElsTjBHeWhRNlZSY2pUbGhLLU1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi80ZDE2OTYtMzM0MS00ZGRiLThlMjMt
MzRlMjI3OWJlNzY1LzEveXhMWXVpNElsTjBHeWhRNlZSY2pUbGhLLU1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi80ZDE2OTYtMzM0MS00ZGRiLThlMjMtMzRlMjI3OWJlNzY1
LzEveXhMWXVpNElsTjBHeWhRNlZSY2pUbGhLLU1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAsHXg6wI
WQ2QY/f2rZQOsr7QDaztN64cRRcTLOVr6xUJ2xgMB3nkDxISv+RqnFqOfzInpgxK
RqsHLdxNIt0fPsZLKykfyD/xfBS6V1aXSE/7qbnpNJkrvpqENN58HUN1n8YhTXmJ
5Z6XhRV1RitFirQgOUbS0Hyl6HXXOYGXwPTXJ8fU9wr/eJ0O1Q7Rfb+jNv1jBUAQ
tdL5CyzhRvmgVVT8k/PdX+KYCHILq39oSnVogIW+Efusbth07r76lx1TLCZGX8rS
ZSR5des3qxfjC1QZvVHKJn0892R6Zm7P/NEt/QzKuaID2QLgPd2nnz2Bw60jcurS
3TPCOg2KixSAVQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:20:20 2025 by rpki-client