Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
File: YPhMundKnCGimGbUjl3PB1nNSqk.mft (raw, json)
Hash identifier: 9nTGPo7e3CXS8sA7c6MzIyzHGPl+sQyM8BX/RGAhPFE=
Subject key identifier: D8:D5:3D:B6:53:3D:A0:73:A0:56:E0:1C:EB:B7:59:C6:A3:5C:F5:7A
Authority key identifier: 60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
Certificate issuer: /CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Certificate serial: 0194BBCE55A1DAB3C0D329D8657A46B0F808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
Manifest number: 0E6A
Signing time: Fri 31 Jan 2025 10:00:49 +0000
Manifest this update: Fri 31 Jan 2025 10:00:49 +0000
Manifest next update: Sat 01 Feb 2025 10:00:49 +0000
Files and hashes: 1: YPhMundKnCGimGbUjl3PB1nNSqk.crl (hash: OLb7nZe0pzYl7+wFkrqKvv1xyptkY3fjfdt3ppP4oLw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:55:a1:da:b3:c0:d3:29:d8:65:7a:46:b0:f8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Validity
Not Before: Jan 31 10:00:49 2025 GMT
Not After : Feb 1 10:00:49 2025 GMT
Subject: CN=d8d53db6533da073a056e01cebb759c6a35cf57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:58:d7:cc:42:23:02:5a:9f:fd:44:6c:5a:34:
74:fe:d6:f9:eb:df:b2:04:58:b6:a1:e9:13:2f:5c:
e1:70:73:98:30:ee:7e:f4:f4:fe:5f:24:57:a2:a4:
3a:8d:63:5c:17:6e:88:24:ae:78:7a:99:a5:bf:17:
28:53:f3:c9:84:40:91:fe:af:04:ef:2b:47:29:f0:
56:c1:48:ba:28:a3:0a:7f:cc:4e:73:cd:d6:27:15:
23:eb:1f:e5:f8:db:23:c5:6a:a5:55:45:ba:62:89:
20:4b:06:3f:2f:ee:d2:16:b3:7c:49:4d:a0:1b:75:
d5:57:0b:cd:c0:ae:66:90:00:ce:39:a8:3a:52:b6:
e2:76:de:a7:57:80:ff:e2:bb:86:d8:53:ee:82:ca:
d7:cc:2e:52:ec:2d:17:3a:33:65:5d:f8:b3:a0:7e:
73:17:b4:db:13:fc:4c:2d:fb:4b:7e:db:45:be:22:
17:14:1f:50:d4:fb:87:7f:29:d6:01:e1:2d:08:77:
ca:77:63:e4:0c:bf:dc:13:18:00:9e:da:cf:9d:cd:
13:cd:c6:1d:ad:1d:bf:bc:73:9e:6a:e5:b7:dd:fe:
5a:b2:75:15:32:4b:52:b0:48:2c:1e:21:83:b3:92:
c4:87:08:c7:dc:84:47:8e:18:85:c2:ba:86:25:c9:
c3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D5:3D:B6:53:3D:A0:73:A0:56:E0:1C:EB:B7:59:C6:A3:5C:F5:7A
X509v3 Authority Key Identifier:
keyid:60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:8d:1d:a3:e3:18:b1:f2:d9:51:d4:cb:f7:a1:31:e9:93:0b:
bb:2c:4c:00:13:12:ad:b5:f3:10:49:7d:66:c1:14:3b:4c:90:
9d:bb:87:3d:09:f8:fd:4d:96:1f:46:da:7f:6c:8a:71:43:c4:
df:7a:68:51:f8:0f:96:af:9f:79:6f:e6:28:c9:ab:cf:a2:fc:
a7:77:a9:ed:a8:de:e5:d5:1a:c9:68:07:01:65:97:9c:71:a2:
94:98:93:12:3d:c1:0a:a1:d1:4f:b4:83:29:ab:c9:01:48:84:
ce:05:5b:8e:16:9f:dc:58:5c:fc:b2:41:67:35:35:c2:38:63:
d4:f5:ca:ac:9b:6b:e5:d6:7f:fa:78:aa:58:92:77:f9:f5:bd:
5e:b5:da:f5:c3:d5:ce:7a:37:8c:51:04:f6:46:ee:a9:d0:a3:
9d:fe:7c:9f:ac:e7:b0:4e:82:75:0d:ba:73:49:67:84:52:7d:
b3:2f:a9:1c:37:ec:8b:c8:4b:62:fe:b7:9c:8e:69:1f:b9:36:
e3:5b:c7:8d:c6:bd:15:74:74:d5:48:55:74:fe:73:89:72:5d:
e9:01:f2:34:59:b6:35:fd:06:09:f9:bd:64:a7:b0:6c:6f:c6:
39:7c:0e:2f:1c:bd:67:9d:48:b6:53:65:fb:26:9e:ab:8b:2c:
f6:58:b5:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zlWh2rPA0ynYZXpGsPgIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZjg0Y2JhNzc0YTljMjFhMjk4NjZkNDhlNWRjZjA3NTlj
ZDRhYTkwHhcNMjUwMTMxMTAwMDQ5WhcNMjUwMjAxMTAwMDQ5WjAzMTEwLwYDVQQD
EyhkOGQ1M2RiNjUzM2RhMDczYTA1NmUwMWNlYmI3NTljNmEzNWNmNTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51jXzEIjAlqf/URsWjR0/tb569+y
BFi2oekTL1zhcHOYMO5+9PT+XyRXoqQ6jWNcF26IJK54epmlvxcoU/PJhECR/q8E
7ytHKfBWwUi6KKMKf8xOc83WJxUj6x/l+NsjxWqlVUW6YokgSwY/L+7SFrN8SU2g
G3XVVwvNwK5mkADOOag6Urbidt6nV4D/4ruG2FPugsrXzC5S7C0XOjNlXfizoH5z
F7TbE/xMLftLfttFviIXFB9Q1PuHfynWAeEtCHfKd2PkDL/cExgAntrPnc0TzcYd
rR2/vHOeauW33f5asnUVMktSsEgsHiGDs5LEhwjH3IRHjhiFwrqGJcnDQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjVPbZTPaBzoFbgHOu3WcajXPV6MB8GA1UdIwQY
MBaAFGD4TLp3Spwhophm1I5dzwdZzUqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVBoTXVuZEtuQ0dpbUdiVWpsM1BCMW5OU3FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wMDAzZjctYjE0YS00ODhlLThhMGYt
ZWI3YWE2MmYzNTZiLzEvWVBoTXVuZEtuQ0dpbUdiVWpsM1BCMW5OU3FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8wMDAzZjctYjE0YS00ODhlLThhMGYtZWI3YWE2MmYzNTZi
LzEvWVBoTXVuZEtuQ0dpbUdiVWpsM1BCMW5OU3FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAko0do+MY
sfLZUdTL96Ex6ZMLuyxMABMSrbXzEEl9ZsEUO0yQnbuHPQn4/U2WH0baf2yKcUPE
33poUfgPlq+feW/mKMmrz6L8p3ep7aje5dUayWgHAWWXnHGilJiTEj3BCqHRT7SD
KavJAUiEzgVbjhaf3Fhc/LJBZzU1wjhj1PXKrJtr5dZ/+niqWJJ3+fW9XrXa9cPV
zno3jFEE9kbuqdCjnf58n6znsE6CdQ26c0lnhFJ9sy+pHDfsi8hLYv63nI5pH7k2
41vHjca9FXR01UhVdP5ziXJd6QHyNFm2Nf0GCfm9ZKewbG/GOXwOLxy9Z51ItlNl
+yaeq4ss9li1Uw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:44 2025 by rpki-client