Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
File: YtA4iKQF5huH0XBvkzs2aob7QpU.mft (raw, json)
Hash identifier: QGSgiCS8wSCltbDG3mUI7xqBQNOa2i4GNFN/TipmEb8=
Subject key identifier: 50:33:18:1C:82:C2:DF:CE:92:0A:C3:6C:D6:DE:07:D4:BD:77:1F:AE
Authority key identifier: 62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
Certificate issuer: /CN=62d03888a405e61b87d1706f933b366a86fb4295
Certificate serial: 0194BC3C42EB9D85BDE9BEB70C7D57B01D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
Manifest number: 0412
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: YtA4iKQF5huH0XBvkzs2aob7QpU.crl (hash: siHivkzEVzIP8ExF6cf6QR0ySzFk7nyjfqJrat/DcEo=)
2: zCw-9AZjP26xMi8ifkh6cllXO9s.roa (hash: D1nIK1UZwod09XQftoKXhB7rZyXrZ+n2IZxVQbyl2wc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:42:eb:9d:85:bd:e9:be:b7:0c:7d:57:b0:1d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d03888a405e61b87d1706f933b366a86fb4295
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=5033181c82c2dfce920ac36cd6de07d4bd771fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c5:7a:2a:78:ad:df:5d:68:59:2a:35:54:07:
22:5a:bc:66:c9:b2:0b:b4:36:46:80:1a:6e:55:dc:
1c:ec:08:ba:85:a8:d5:76:fa:40:b2:4f:8f:ec:e2:
a5:be:22:6d:6d:a1:38:4d:4b:2e:de:18:9b:92:24:
cb:0b:06:cc:c3:57:41:b1:14:66:44:9b:e3:e4:8a:
d3:a1:36:4d:50:3e:1f:5f:4a:16:84:60:5c:c0:2b:
14:a0:f6:f8:f9:5e:62:ac:9e:ca:3d:00:c7:4d:f2:
c4:c3:ca:cb:63:7b:0b:f4:bb:bf:22:d5:3e:5f:a5:
ae:c0:0b:c2:0a:b2:d2:fb:7a:60:bc:71:3e:01:50:
3f:45:25:82:84:2b:1e:43:43:bb:4c:4a:85:8a:e2:
30:ac:c8:33:eb:58:b3:f6:97:84:ec:0f:f5:d0:70:
f0:5f:97:37:f0:31:e9:a4:e9:f3:04:ef:76:cd:14:
6f:66:e7:43:a2:fa:e8:4f:5b:bc:06:79:2f:c7:14:
d6:a0:46:89:94:11:55:28:44:ee:5b:e9:39:66:5f:
d5:c7:cb:d5:90:45:b6:a0:c3:30:66:26:f9:f3:e1:
6b:1d:ed:a9:87:89:0e:ec:df:3d:08:6c:f8:af:61:
1a:d3:e9:b4:85:52:f1:c2:cc:61:6f:ca:bb:8b:1c:
f4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:33:18:1C:82:C2:DF:CE:92:0A:C3:6C:D6:DE:07:D4:BD:77:1F:AE
X509v3 Authority Key Identifier:
keyid:62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:3a:da:f7:6d:60:ba:15:bd:43:4e:fa:22:a3:16:a6:15:ae:
c7:15:b1:03:d0:e0:ba:1c:a3:66:1e:86:ac:ec:8d:f6:26:f1:
1e:df:fe:e8:a2:46:71:5e:ac:5b:8a:34:ac:85:1f:ed:90:fd:
12:cb:73:1c:78:43:ba:cc:2c:9a:50:62:14:10:3a:6e:0a:2f:
66:a4:5f:c4:7c:a2:3b:37:d5:df:af:36:8e:35:43:f6:ed:9f:
5e:e0:53:77:3b:a9:69:03:37:8a:dc:41:74:df:bb:a5:45:37:
b5:2b:1e:a7:c3:26:19:94:4d:f8:d0:2c:6a:82:e5:9a:21:93:
11:a3:06:6d:e6:59:6b:7e:f2:47:a2:e6:c0:6d:1b:9c:1a:a2:
7e:ea:92:ba:f9:76:ad:a0:48:37:af:02:63:b8:4c:1b:04:20:
26:6a:c2:b4:3e:40:81:cf:ba:a9:e0:3c:9a:8c:c9:4b:9e:2b:
70:08:94:23:28:66:3c:6a:1b:de:28:7e:cf:53:ea:e3:94:8f:
72:ec:43:50:ab:a4:4a:c0:b3:10:e6:df:cf:e0:d2:b8:9e:4e:
19:7c:ce:cc:38:a2:fb:f5:87:ff:30:fc:87:93:57:53:59:69:
1b:7b:90:e7:87:ab:de:25:55:41:05:ed:47:59:ef:b0:db:d1:
6a:17:a6:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PELrnYW96b63DH1XsB16MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZDAzODg4YTQwNWU2MWI4N2QxNzA2ZjkzM2IzNjZhODZm
YjQyOTUwHhcNMjUwMTMxMTIwMDUzWhcNMjUwMjAxMTIwMDUzWjAzMTEwLwYDVQQD
Eyg1MDMzMTgxYzgyYzJkZmNlOTIwYWMzNmNkNmRlMDdkNGJkNzcxZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8V6Knit311oWSo1VAciWrxmybIL
tDZGgBpuVdwc7Ai6hajVdvpAsk+P7OKlviJtbaE4TUsu3hibkiTLCwbMw1dBsRRm
RJvj5IrToTZNUD4fX0oWhGBcwCsUoPb4+V5irJ7KPQDHTfLEw8rLY3sL9Lu/ItU+
X6WuwAvCCrLS+3pgvHE+AVA/RSWChCseQ0O7TEqFiuIwrMgz61iz9peE7A/10HDw
X5c38DHppOnzBO92zRRvZudDovroT1u8BnkvxxTWoEaJlBFVKETuW+k5Zl/Vx8vV
kEW2oMMwZib58+FrHe2ph4kO7N89CGz4r2Ea0+m0hVLxwsxhb8q7ixz0KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAzGByCwt/OkgrDbNbeB9S9dx+uMB8GA1UdIwQY
MBaAFGLQOIikBeYbh9Fwb5M7NmqG+0KVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iZjUxZmYtNWMzNi00NWIyLTkxYzUt
NGQ2ODVhY2E4Mjc5LzEvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9iZjUxZmYtNWMzNi00NWIyLTkxYzUtNGQ2ODVhY2E4Mjc5
LzEvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsTra921g
uhW9Q076IqMWphWuxxWxA9DguhyjZh6GrOyN9ibxHt/+6KJGcV6sW4o0rIUf7ZD9
EstzHHhDuswsmlBiFBA6bgovZqRfxHyiOzfV3682jjVD9u2fXuBTdzupaQM3itxB
dN+7pUU3tSsep8MmGZRN+NAsaoLlmiGTEaMGbeZZa37yR6LmwG0bnBqifuqSuvl2
raBIN68CY7hMGwQgJmrCtD5Agc+6qeA8mozJS54rcAiUIyhmPGob3ih+z1Pq45SP
cuxDUKukSsCzEObfz+DSuJ5OGXzOzDii+/WH/zD8h5NXU1lpG3uQ54er3iVVQQXt
R1nvsNvRahemQg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 11:50:46 2025 by rpki-client