Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
File: YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json)
Hash identifier: rRkJaAqiybgYRZZWN4/n0zpUWTYToQKeXhOH0uX0AsQ=
Subject key identifier: 51:05:42:58:36:87:98:5F:4B:88:22:E3:2F:90:4F:A2:7A:A2:AF:C4
Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Certificate serial: 0194BBCEC996D01F85711F2DF883FFF8F984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
Manifest number: 0C84
Signing time: Fri 31 Jan 2025 10:01:18 +0000
Manifest this update: Fri 31 Jan 2025 10:01:18 +0000
Manifest next update: Sat 01 Feb 2025 10:01:18 +0000
Files and hashes: 1: Vfen33v1zrF1U4W1eWwhHEsbqGA.roa (hash: w3PxgtpxD6a285bTjcEiEC6QMtVVhaLBfzodaIOYwng=)
2: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: Q7DWsVzHUWh8W4BPXJQpQUDeF4+/IqhezOE0banHbqM=)
3: zDAAlCK7aNqx_xV31r_7I0TLQt8.roa (hash: wCsE2W/8Vmk86XbGn3m0t7wCPnTYvf+LtPGnsGB75Q8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c9:96:d0:1f:85:71:1f:2d:f8:83:ff:f8:f9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Validity
Not Before: Jan 31 10:01:18 2025 GMT
Not After : Feb 1 10:01:18 2025 GMT
Subject: CN=510542583687985f4b8822e32f904fa27aa2afc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bb:93:e4:26:76:bb:37:7d:e3:32:ef:5e:04:
7d:d1:22:5a:ba:26:99:cb:72:ba:95:34:db:27:ec:
e7:32:07:71:9d:50:0a:a9:5d:09:b1:31:26:cc:26:
e7:9b:86:dc:4b:f2:70:f7:00:47:10:23:94:53:ae:
5f:59:4a:d8:2b:cb:51:24:31:0f:a3:0f:46:00:42:
5a:01:ed:3a:20:04:d1:a5:14:46:9f:7c:e0:09:ea:
f7:a4:b6:a2:36:76:9c:a0:42:6d:c7:ed:2d:98:c5:
f7:e4:07:ce:ef:9f:b5:38:fd:24:9f:c6:8f:6f:e9:
ad:9a:1f:9c:bc:17:b7:7c:a9:50:a0:da:b4:78:14:
98:ce:9f:d0:39:65:e8:9d:04:50:87:e8:2e:98:27:
96:1a:b5:13:ca:0b:92:8e:e1:2d:0c:7a:8a:7a:9f:
bd:f6:cd:64:75:4a:64:6d:4e:76:c0:45:27:8c:40:
4a:00:9d:f3:4e:55:bf:db:2c:fb:2b:11:10:93:14:
64:4e:49:81:f3:84:8e:b7:78:69:c2:dc:68:30:b8:
4f:8c:00:d6:8c:8a:f5:c8:81:c5:8d:68:55:f8:8a:
df:54:13:e2:1f:8b:f9:46:da:85:19:bb:c8:fe:d9:
eb:55:81:b4:85:f5:b1:38:bd:43:88:29:ac:0c:45:
ba:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:05:42:58:36:87:98:5F:4B:88:22:E3:2F:90:4F:A2:7A:A2:AF:C4
X509v3 Authority Key Identifier:
keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7b:16:d4:59:22:f1:be:eb:44:26:e4:96:9b:35:07:c0:ea:
12:20:f6:40:95:ca:7a:17:71:9f:f1:f7:f4:9a:aa:88:1f:2b:
b2:28:d7:5a:f7:a3:6a:72:93:b1:ae:42:c5:f2:9b:3a:15:a0:
28:11:0d:4b:a3:3b:97:9b:4c:44:f8:1e:9f:f0:0b:8d:bc:e0:
4d:af:79:af:67:34:84:14:71:0a:c4:29:92:45:f0:74:62:6e:
1c:51:50:0d:7c:32:43:5b:cb:7d:17:a7:f4:a8:0e:d0:cf:ea:
48:66:ad:c3:9c:e5:ea:0d:2e:79:04:3f:25:39:13:c8:af:06:
17:4b:6c:d8:e7:df:21:3a:fe:21:da:e2:bd:5e:62:9d:4b:07:
91:86:e2:2b:a8:12:49:99:6e:5f:26:05:0e:05:6b:40:cf:df:
d0:4f:a8:b2:04:4a:e1:de:47:bc:aa:83:19:81:fa:8e:72:57:
79:b9:ee:f6:9b:f2:10:0c:c9:e4:0a:b3:f4:06:34:17:ca:b7:
09:f1:94:2e:d8:62:86:a2:0a:08:1c:2a:9d:39:c8:b0:bd:31:
d4:eb:46:b6:20:86:00:cc:5a:c7:a5:e1:a6:9f:44:7a:d9:7a:
79:1c:5c:4b:10:8a:f2:8a:2f:ee:9e:bb:d8:37:f7:4a:91:de:
9e:27:7b:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zsmW0B+FcR8t+IP/+PmEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNDEwNzJlZTFhMWIxYzA2ODQxMmRmYjAzNTVkMjc1OTkz
MmM1ZjUwHhcNMjUwMTMxMTAwMTE4WhcNMjUwMjAxMTAwMTE4WjAzMTEwLwYDVQQD
Eyg1MTA1NDI1ODM2ODc5ODVmNGI4ODIyZTMyZjkwNGZhMjdhYTJhZmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7uT5CZ2uzd94zLvXgR90SJauiaZ
y3K6lTTbJ+znMgdxnVAKqV0JsTEmzCbnm4bcS/Jw9wBHECOUU65fWUrYK8tRJDEP
ow9GAEJaAe06IATRpRRGn3zgCer3pLaiNnacoEJtx+0tmMX35AfO75+1OP0kn8aP
b+mtmh+cvBe3fKlQoNq0eBSYzp/QOWXonQRQh+gumCeWGrUTyguSjuEtDHqKep+9
9s1kdUpkbU52wEUnjEBKAJ3zTlW/2yz7KxEQkxRkTkmB84SOt3hpwtxoMLhPjADW
jIr1yIHFjWhV+IrfVBPiH4v5RtqFGbvI/tnrVYG0hfWxOL1DiCmsDEW6nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEFQlg2h5hfS4gi4y+QT6J6oq/EMB8GA1UdIwQY
MBaAFGBBBy7hobHAaEEt+wNV0nWZMsX1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUVFSEx1R2hzY0JvUVMzN0ExWFNkWmt5eGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84ZGZhMzAtMmE4NS00YjQ2LTk1MzMt
NGQ1Zjc2MzdlZmNlLzEvWUVFSEx1R2hzY0JvUVMzN0ExWFNkWmt5eGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84ZGZhMzAtMmE4NS00YjQ2LTk1MzMtNGQ1Zjc2MzdlZmNl
LzEvWUVFSEx1R2hzY0JvUVMzN0ExWFNkWmt5eGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHsW1Fki
8b7rRCbklps1B8DqEiD2QJXKehdxn/H39JqqiB8rsijXWvejanKTsa5CxfKbOhWg
KBENS6M7l5tMRPgen/ALjbzgTa95r2c0hBRxCsQpkkXwdGJuHFFQDXwyQ1vLfRen
9KgO0M/qSGatw5zl6g0ueQQ/JTkTyK8GF0ts2OffITr+IdrivV5inUsHkYbiK6gS
SZluXyYFDgVrQM/f0E+osgRK4d5HvKqDGYH6jnJXebnu9pvyEAzJ5Aqz9AY0F8q3
CfGULthihqIKCBwqnTnIsL0x1OtGtiCGAMxax6Xhpp9Eetl6eRxcSxCK8oov7p67
2Df3SpHenid7FQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:37:51 2025 by rpki-client