Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
File: yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft (raw, json)
Hash identifier: nGNagbk964DzsO1DL0vXO6DZuM1Nl5MM0DNL6h47g1E=
Subject key identifier: 2B:41:92:D6:D8:03:62:06:C3:50:D5:9E:DF:1F:03:A4:4C:02:D8:08
Authority key identifier: CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
Certificate issuer: /CN=cb36180ab4542d6eee66d9f99030df71236ce264
Certificate serial: 0194BD17D1B958350A77928896F6DE0AE5FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
Manifest number: 1271
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: Iq8sBOoYl2FdEDuOs7ZjqubA0mo.roa (hash: cKH71Gw8ENbKfDC7hsHD0Ixm5ykhTLruun3w+xwHV3U=)
2: yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl (hash: 7m6JRBjL2npyAG6BrIUA6kCIjihwr7fo/ocIoYyhOYo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d1:b9:58:35:0a:77:92:88:96:f6:de:0a:e5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb36180ab4542d6eee66d9f99030df71236ce264
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=2b4192d6d8036206c350d59edf1f03a44c02d808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1d:2d:42:c3:c1:9e:a8:7b:a3:d3:fc:6d:5f:
b6:2a:e2:cb:d4:31:bb:35:8b:a4:ee:9e:2f:35:4d:
36:ab:08:27:1e:81:e5:7b:2b:2d:02:02:b1:46:5f:
27:da:61:8b:b3:0e:84:64:cc:da:d5:5e:ec:36:97:
20:e2:ca:95:a3:19:35:f5:75:2c:0e:b1:7d:3a:91:
b8:11:d9:35:86:7f:71:8e:8a:fd:8b:32:95:49:a6:
00:99:5e:14:0e:db:07:62:8d:5b:55:ee:0e:ca:e6:
cd:fa:92:41:20:0b:29:72:82:60:82:be:0c:20:02:
66:8b:f7:d7:9a:b5:76:84:f7:40:d1:d4:24:09:76:
7f:19:0e:f7:9a:d3:cd:6c:eb:b8:c9:fa:88:e2:41:
cc:fe:d3:34:b4:00:b4:d6:b2:f6:12:87:16:a7:80:
d0:7d:f3:48:f5:c4:14:0d:4a:57:1e:5c:60:51:e6:
a1:87:98:9a:c9:ae:38:dd:ca:16:b3:06:90:af:57:
ec:9a:07:d9:61:f5:e7:cd:01:7e:9b:1f:18:04:77:
53:50:37:a1:8a:2e:71:11:8e:30:a3:88:a4:c2:4b:
c3:a2:ce:2b:63:89:04:7d:08:b6:2b:95:cd:f6:d5:
f5:11:52:00:5e:4f:a8:d8:b5:f9:25:62:18:a6:04:
1b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:41:92:D6:D8:03:62:06:C3:50:D5:9E:DF:1F:03:A4:4C:02:D8:08
X509v3 Authority Key Identifier:
keyid:CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e3:85:25:6d:0e:44:16:7a:b2:86:bd:d7:0d:25:2c:2b:f7:
7e:1b:46:94:84:5d:41:9f:fa:50:d8:78:8d:58:db:58:dc:28:
02:10:3e:2c:32:13:d7:bc:6d:e7:36:80:78:27:9d:6a:68:4b:
c6:42:d1:e2:0d:bc:ff:2b:19:48:54:98:c6:95:a2:b7:34:cd:
55:b6:d4:23:f3:04:54:24:36:67:23:bc:49:68:50:ce:49:19:
82:8a:99:ff:8d:c4:06:da:c8:aa:ad:ac:29:a9:f2:6e:71:e0:
1c:99:23:65:40:8d:e0:34:27:f3:b5:9f:ac:30:dd:f0:87:c3:
39:78:38:c4:33:6c:79:80:40:52:1c:d3:78:ec:be:cf:0f:a7:
a7:cc:61:e3:1e:45:eb:c0:81:10:ae:13:49:16:96:b6:4b:83:
8d:11:c9:80:d4:c4:90:f0:f6:43:2c:1d:a2:be:cd:9c:5a:47:
d4:31:f1:4d:0b:62:e5:13:b7:56:ac:c1:66:72:26:2a:df:52:
57:99:36:99:ca:5a:78:ef:1c:ff:5b:10:f9:55:60:2b:da:3f:
74:8d:51:f9:1e:9e:c2:a1:4e:11:9f:39:1c:c0:07:3a:9e:3c:
36:60:4a:13:50:e7:53:76:3b:de:f1:30:2e:02:f0:e8:8e:d2:
79:dc:64:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F9G5WDUKd5KIlvbeCuX9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzYxODBhYjQ1NDJkNmVlZTY2ZDlmOTkwMzBkZjcxMjM2
Y2UyNjQwHhcNMjUwMTMxMTYwMDQyWhcNMjUwMjAxMTYwMDQyWjAzMTEwLwYDVQQD
EygyYjQxOTJkNmQ4MDM2MjA2YzM1MGQ1OWVkZjFmMDNhNDRjMDJkODA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0x0tQsPBnqh7o9P8bV+2KuLL1DG7
NYuk7p4vNU02qwgnHoHleystAgKxRl8n2mGLsw6EZMza1V7sNpcg4sqVoxk19XUs
DrF9OpG4Edk1hn9xjor9izKVSaYAmV4UDtsHYo1bVe4OyubN+pJBIAspcoJggr4M
IAJmi/fXmrV2hPdA0dQkCXZ/GQ73mtPNbOu4yfqI4kHM/tM0tAC01rL2EocWp4DQ
ffNI9cQUDUpXHlxgUeahh5iaya443coWswaQr1fsmgfZYfXnzQF+mx8YBHdTUDeh
ii5xEY4wo4ikwkvDos4rY4kEfQi2K5XN9tX1EVIAXk+o2LX5JWIYpgQbvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtBktbYA2IGw1DVnt8fA6RMAtgIMB8GA1UdIwQY
MBaAFMs2GAq0VC1u7mbZ+ZAw33EjbOJkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpZWUNyUlVMVzd1WnRuNWtERGZjU05zNG1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wNzk3ZDQtOGIyYy00MGFjLTljYWIt
NjY3ZGIxZGMxYjg2LzEveXpZWUNyUlVMVzd1WnRuNWtERGZjU05zNG1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8wNzk3ZDQtOGIyYy00MGFjLTljYWItNjY3ZGIxZGMxYjg2
LzEveXpZWUNyUlVMVzd1WnRuNWtERGZjU05zNG1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuOFJW0O
RBZ6soa91w0lLCv3fhtGlIRdQZ/6UNh4jVjbWNwoAhA+LDIT17xt5zaAeCedamhL
xkLR4g28/ysZSFSYxpWitzTNVbbUI/MEVCQ2ZyO8SWhQzkkZgoqZ/43EBtrIqq2s
KanybnHgHJkjZUCN4DQn87WfrDDd8IfDOXg4xDNseYBAUhzTeOy+zw+np8xh4x5F
68CBEK4TSRaWtkuDjRHJgNTEkPD2Qywdor7NnFpH1DHxTQti5RO3VqzBZnImKt9S
V5k2mcpaeO8c/1sQ+VVgK9o/dI1R+R6ewqFOEZ85HMAHOp48NmBKE1DnU3Y73vEw
LgLw6I7SedxkYQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:10 2025 by rpki-client