Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
File: yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft (raw, json)
Hash identifier: VoLS0yscTIP3jiNJ/tOx3SOu/jELPDZYzZ/0PqULEW0=
Subject key identifier: 08:A9:02:46:17:C3:42:1F:EB:26:EA:03:E7:F7:4E:68:92:80:28:99
Authority key identifier: CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
Certificate issuer: /CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Certificate serial: 0194BC72C3001E70C7F5351E0449E8EE46AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
Manifest number: 0B5F
Signing time: Fri 31 Jan 2025 13:00:25 +0000
Manifest this update: Fri 31 Jan 2025 13:00:25 +0000
Manifest next update: Sat 01 Feb 2025 13:00:25 +0000
Files and hashes: 1: nbnIAVJNAnZgU5AVCE_qus_GC7w.roa (hash: kRfWet6eSf4dnBlKBrx1NbKgX3QvN7s8AHAHv5b5NzM=)
2: yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl (hash: 5m+zlhy1fVwfzS9qxdJBVLepv4DcsTaRtMzXEx7c7FI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c3:00:1e:70:c7:f5:35:1e:04:49:e8:ee:46:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Validity
Not Before: Jan 31 13:00:25 2025 GMT
Not After : Feb 1 13:00:25 2025 GMT
Subject: CN=08a9024617c3421feb26ea03e7f74e6892802899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:91:7d:7d:ca:62:66:ad:6f:ef:7d:36:34:d2:
b4:5f:12:33:13:95:55:9b:ee:47:84:17:3a:14:73:
e5:4a:0c:85:34:40:05:c9:22:a1:7e:d0:d2:69:b0:
21:20:ff:a1:2b:5c:0e:28:fb:b5:8a:e7:75:36:ca:
0e:21:5f:ba:e2:7c:8f:f9:51:91:20:36:2a:28:6d:
54:5d:a5:b5:e3:55:6d:32:45:12:98:e9:08:fb:2a:
01:ce:8f:59:8f:82:7f:b1:21:d2:e5:ea:47:28:1d:
29:55:75:b1:67:00:18:dc:b9:ad:d7:41:6a:28:16:
99:be:2f:2a:c8:a8:dd:c7:09:2f:e7:29:90:bc:e3:
21:66:d2:2e:b6:60:79:30:68:fa:d7:00:da:67:c7:
7e:05:e2:39:d8:d7:2f:dd:19:8a:1e:8a:d9:47:04:
43:ac:88:22:66:b3:d4:3d:89:0d:e9:02:10:3f:ed:
77:24:76:de:bf:2e:97:ea:7e:be:e2:69:b5:78:d9:
f2:2f:c8:94:2a:04:5e:ea:10:b4:68:88:ab:65:48:
58:02:11:73:1a:c6:08:fc:9d:81:6f:c3:41:b3:18:
ee:97:f7:e0:82:09:d4:ad:fb:e0:fe:e7:dd:c4:15:
7f:e9:a7:44:96:96:7f:ff:2b:60:de:e9:13:52:1e:
0e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A9:02:46:17:C3:42:1F:EB:26:EA:03:E7:F7:4E:68:92:80:28:99
X509v3 Authority Key Identifier:
keyid:CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:33:46:50:40:1c:da:c6:30:75:be:7d:f3:4a:b8:19:47:80:
de:83:0e:2f:5f:fe:24:77:23:07:e8:73:60:1f:d0:38:18:70:
51:f2:d3:55:d0:2e:76:ed:69:36:de:09:be:f0:b4:87:ac:85:
f7:cc:d2:5f:d7:01:fb:68:97:7d:ef:b9:df:5b:b5:26:54:2c:
fb:eb:f1:a0:d8:df:76:ea:74:92:9c:14:cb:6d:45:16:8d:08:
46:44:e4:60:f2:f8:5a:be:e1:74:e7:8c:d3:68:66:42:a8:0b:
2a:83:2b:1e:e6:2e:23:1a:6a:c8:22:db:35:eb:2c:56:87:0d:
66:ee:5d:b6:c0:be:c2:ab:6e:24:5c:ce:bc:1c:ab:00:16:f7:
f5:fe:a6:a4:09:d7:aa:dc:79:bd:90:68:92:45:c6:45:8e:44:
9b:a6:ed:13:59:51:fb:6e:8e:85:1d:d5:91:a0:a6:d3:86:a6:
fc:a5:28:c6:91:30:9a:fb:70:16:4b:9c:b1:e9:ac:d3:bf:c2:
13:dc:0e:6c:ec:44:ec:16:2c:bb:7c:9a:3a:34:fe:b8:e2:11:
bc:65:7c:71:1c:43:53:bc:4f:4b:68:39:70:ab:88:4b:db:36:
3b:20:ba:5b:d5:e2:ad:64:27:33:b0:f6:b8:44:e7:30:3e:d0:
a9:64:52:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8csMAHnDH9TUeBEno7kavMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMWQ3ZWZkNmJhY2Y0MmYxNDVkZjRkNTI4YjBhODMyMGZm
YzM3YjkwHhcNMjUwMTMxMTMwMDI1WhcNMjUwMjAxMTMwMDI1WjAzMTEwLwYDVQQD
EygwOGE5MDI0NjE3YzM0MjFmZWIyNmVhMDNlN2Y3NGU2ODkyODAyODk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZF9fcpiZq1v7302NNK0XxIzE5VV
m+5HhBc6FHPlSgyFNEAFySKhftDSabAhIP+hK1wOKPu1iud1NsoOIV+64nyP+VGR
IDYqKG1UXaW141VtMkUSmOkI+yoBzo9Zj4J/sSHS5epHKB0pVXWxZwAY3Lmt10Fq
KBaZvi8qyKjdxwkv5ymQvOMhZtIutmB5MGj61wDaZ8d+BeI52Ncv3RmKHorZRwRD
rIgiZrPUPYkN6QIQP+13JHbevy6X6n6+4mm1eNnyL8iUKgRe6hC0aIirZUhYAhFz
GsYI/J2Bb8NBsxjul/fgggnUrfvg/ufdxBV/6adElpZ//ytg3ukTUh4OxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAipAkYXw0If6ybqA+f3TmiSgCiZMB8GA1UdIwQY
MBaAFMsdfv1rrPQvFF301SiwqDIP/De5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXgxLV9XdXM5QzhVWGZUVktMQ29NZ184TjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iYWQzYjUtYmQ5Zi00NDYxLWJhODct
OTlmNjgzMjA2Mzg4LzEveXgxLV9XdXM5QzhVWGZUVktMQ29NZ184TjdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9iYWQzYjUtYmQ5Zi00NDYxLWJhODctOTlmNjgzMjA2Mzg4
LzEveXgxLV9XdXM5QzhVWGZUVktMQ29NZ184TjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjNGUEAc
2sYwdb5980q4GUeA3oMOL1/+JHcjB+hzYB/QOBhwUfLTVdAudu1pNt4JvvC0h6yF
98zSX9cB+2iXfe+531u1JlQs++vxoNjfdup0kpwUy21FFo0IRkTkYPL4Wr7hdOeM
02hmQqgLKoMrHuYuIxpqyCLbNessVocNZu5dtsC+wqtuJFzOvByrABb39f6mpAnX
qtx5vZBokkXGRY5Em6btE1lR+26OhR3VkaCm04am/KUoxpEwmvtwFkucsems07/C
E9wObOxE7BYsu3yaOjT+uOIRvGV8cRxDU7xPS2g5cKuIS9s2OyC6W9XirWQnM7D2
uETnMD7QqWRSHw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:53:01 2025 by rpki-client