Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
File: ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft (raw, json)
Hash identifier: s2El6vovVUWKlaA+n/NG1koaKR/zpxIlc9XWbw7UGRI=
Subject key identifier: B0:0D:31:DA:86:2A:09:C4:28:2C:7D:D2:29:9E:DC:A0:47:CB:F4:44
Authority key identifier: CA:51:54:15:89:05:D1:D4:4C:45:88:DF:D2:58:02:F3:24:A9:3D:61
Certificate issuer: /CN=ca5154158905d1d44c4588dfd25802f324a93d61
Certificate serial: 0194BCE09A3F6E35620024CFC44491A311BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
Manifest number: 0281
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: AVYBUHDR8cllHf1Clp-tHJ3mnJM.roa (hash: AnG8BWUfPxV5o1EC1SevW/uoDYd+aQAPwe1f/26+nZM=)
2: ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl (hash: RSR8ReAyP8ZA08IhagO4VPmovQmgs/w+U3aImt420/U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9a:3f:6e:35:62:00:24:cf:c4:44:91:a3:11:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5154158905d1d44c4588dfd25802f324a93d61
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=b00d31da862a09c4282c7dd2299edca047cbf444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7a:41:17:cd:ff:0c:3b:10:3d:9b:66:23:aa:
d1:b3:bc:1e:e2:d6:54:48:0f:0d:0b:02:c6:fb:32:
82:d9:0a:5d:1a:a1:77:91:73:fc:0e:62:e1:9c:a4:
ad:e9:06:f7:d2:05:a5:46:7f:7c:45:21:ad:5b:94:
df:7f:2a:07:50:71:77:cf:ed:5b:2e:61:c0:79:a9:
1e:dd:d0:17:5d:b3:5a:b0:ff:ec:07:9f:ae:5e:03:
d6:67:07:4b:05:65:41:2a:f5:b7:5a:3e:e9:ee:13:
40:69:7a:7a:6d:3c:af:0d:b6:72:e0:ae:dc:57:85:
67:9f:02:c2:fe:9c:13:65:0e:1f:a0:ff:d1:c9:9e:
a3:97:b3:73:18:7f:b8:70:cb:fb:23:d5:3d:ef:e6:
87:37:6f:4f:67:d3:83:56:1e:34:43:0f:70:fb:ba:
d1:41:7e:d2:c9:cb:06:0c:79:3a:e3:66:43:b4:b1:
26:fb:71:81:e8:4c:fd:f4:d1:b3:fc:81:67:02:cc:
b5:2f:4b:c7:ad:77:ba:b5:a6:4f:7f:93:94:c7:7d:
7e:82:97:d6:03:27:3f:04:5f:a3:f9:2e:2b:be:6a:
30:03:1e:3a:80:d8:ba:7c:f9:18:6b:c9:1f:9d:97:
19:a6:d2:b2:72:16:3b:9c:ee:98:0c:c4:e1:79:b8:
1f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0D:31:DA:86:2A:09:C4:28:2C:7D:D2:29:9E:DC:A0:47:CB:F4:44
X509v3 Authority Key Identifier:
keyid:CA:51:54:15:89:05:D1:D4:4C:45:88:DF:D2:58:02:F3:24:A9:3D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e6:42:c8:ee:46:d2:0e:e2:7c:1a:10:56:2e:57:6c:4f:a0:
9e:79:04:0d:24:b7:80:7e:03:7d:c4:29:ec:2b:f4:21:f2:73:
12:a8:41:89:a6:e6:8e:3d:cf:99:26:83:c1:8f:81:19:b6:c1:
2d:9b:3e:dd:84:04:e6:56:96:ce:0d:3a:c2:b1:65:d7:33:d6:
58:f4:da:18:38:4f:1f:e5:a5:4a:08:df:a3:65:ba:45:a6:59:
dc:a4:58:d0:29:81:26:f4:5a:8c:e5:27:74:ef:8d:e8:3c:91:
37:ff:34:16:18:da:1f:3d:de:4a:3a:48:11:60:dc:aa:e7:69:
c7:f6:4d:23:e7:f3:3f:3d:d7:c2:be:cf:01:d1:ee:d3:bc:0e:
4d:4b:dd:79:d3:8f:cb:27:8c:c1:cc:67:43:9c:16:6a:3e:8f:
a4:59:fa:a7:7f:46:51:bf:55:bd:49:d3:a8:dc:c0:ce:dc:cd:
10:5c:d9:26:20:c2:b2:74:6b:06:b2:0f:bc:0e:b5:90:9e:76:
12:f6:5e:99:35:20:64:49:75:47:b7:de:19:31:89:41:a0:4e:
9b:65:ca:dc:e1:d6:55:8e:cf:01:f2:f1:37:54:a6:b4:aa:93:
6c:65:97:e6:83:02:a7:c3:fa:12:d0:94:62:bd:a3:41:c1:d1:
ff:32:e7:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Jo/bjViACTPxESRoxG7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNTE1NDE1ODkwNWQxZDQ0YzQ1ODhkZmQyNTgwMmYzMjRh
OTNkNjEwHhcNMjUwMTMxMTUwMDIzWhcNMjUwMjAxMTUwMDIzWjAzMTEwLwYDVQQD
EyhiMDBkMzFkYTg2MmEwOWM0MjgyYzdkZDIyOTllZGNhMDQ3Y2JmNDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonpBF83/DDsQPZtmI6rRs7we4tZU
SA8NCwLG+zKC2QpdGqF3kXP8DmLhnKSt6Qb30gWlRn98RSGtW5TffyoHUHF3z+1b
LmHAeake3dAXXbNasP/sB5+uXgPWZwdLBWVBKvW3Wj7p7hNAaXp6bTyvDbZy4K7c
V4VnnwLC/pwTZQ4foP/RyZ6jl7NzGH+4cMv7I9U97+aHN29PZ9ODVh40Qw9w+7rR
QX7SycsGDHk642ZDtLEm+3GB6Ez99NGz/IFnAsy1L0vHrXe6taZPf5OUx31+gpfW
Ayc/BF+j+S4rvmowAx46gNi6fPkYa8kfnZcZptKychY7nO6YDMThebgfTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLANMdqGKgnEKCx90ime3KBHy/REMB8GA1UdIwQY
MBaAFMpRVBWJBdHUTEWI39JYAvMkqT1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWxGVUZZa0YwZFJNUllqZjBsZ0M4eVNwUFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mNTU4YWEtNTVlZi00NTBmLThiOTct
MTAwOTBkMWU3ZDk0LzEveWxGVUZZa0YwZFJNUllqZjBsZ0M4eVNwUFdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9mNTU4YWEtNTVlZi00NTBmLThiOTctMTAwOTBkMWU3ZDk0
LzEveWxGVUZZa0YwZFJNUllqZjBsZ0M4eVNwUFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABuZCyO5G
0g7ifBoQVi5XbE+gnnkEDSS3gH4DfcQp7Cv0IfJzEqhBiabmjj3PmSaDwY+BGbbB
LZs+3YQE5laWzg06wrFl1zPWWPTaGDhPH+WlSgjfo2W6RaZZ3KRY0CmBJvRajOUn
dO+N6DyRN/80FhjaHz3eSjpIEWDcqudpx/ZNI+fzPz3Xwr7PAdHu07wOTUvdedOP
yyeMwcxnQ5wWaj6PpFn6p39GUb9VvUnTqNzAztzNEFzZJiDCsnRrBrIPvA61kJ52
EvZemTUgZEl1R7feGTGJQaBOm2XK3OHWVY7PAfLxN1SmtKqTbGWX5oMCp8P6EtCU
Yr2jQcHR/zLn+g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:24:48 2025 by rpki-client