Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b95b83-9ac9-4849-acd5-f2755c7976bf/1/yN4cEONpZBxLMY2Jh7xareeIuR4.mft
File: yN4cEONpZBxLMY2Jh7xareeIuR4.mft (raw, json)
Hash identifier: buLJGBvc0m8qYOtROJvldNvxJcKMBjLfhjXr2TOQMAU=
Subject key identifier: 0B:8C:BD:02:90:EE:63:29:CE:46:6C:1F:76:13:D2:D1:66:86:67:EE
Authority key identifier: C8:DE:1C:10:E3:69:64:1C:4B:31:8D:89:87:BC:5A:AD:E7:88:B9:1E
Certificate issuer: /CN=c8de1c10e369641c4b318d8987bc5aade788b91e
Certificate serial: 0BB3069F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yN4cEONpZBxLMY2Jh7xareeIuR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b95b83-9ac9-4849-acd5-f2755c7976bf/1/yN4cEONpZBxLMY2Jh7xareeIuR4.mft
Manifest number: 091F
Signing time: Thu 28 Apr 2022 04:45:19 +0000
Manifest this update: Thu 28 Apr 2022 04:45:19 +0000
Manifest next update: Fri 29 Apr 2022 04:45:19 +0000
Files and hashes: 1: 1-CVyat7tvHTbRjQFnGxI8777IK8.roa (hash: f81l941qkVBbiQrYIbwBole6LRL7j7kdLJTrHrNkPgs=)
2: yN4cEONpZBxLMY2Jh7xareeIuR4.crl (hash: EXI3jq8bCdVHKRyOjw0/22gTlIrGlY0YvBCyF9ycLcc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196282015 (0xbb3069f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8de1c10e369641c4b318d8987bc5aade788b91e
Validity
Not Before: Apr 28 04:45:19 2022 GMT
Not After : Apr 29 04:45:19 2022 GMT
Subject: CN=0b8cbd0290ee6329ce466c1f7613d2d1668667ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:bf:b5:3f:db:43:a1:7b:90:5d:b9:69:fa:5a:
aa:8e:46:fa:9a:d3:65:39:c2:55:e5:d2:30:e8:9c:
67:c6:da:07:48:39:ec:ef:72:03:55:bb:b1:f3:d4:
45:5b:f3:ba:30:59:1d:1f:a3:a1:d5:3a:b1:9a:92:
aa:a2:bd:a4:f1:0d:3b:0e:81:49:23:f9:22:d1:d4:
94:d9:ea:4e:15:e9:05:b7:f2:f0:95:a4:aa:4e:1f:
81:bb:88:5f:0f:11:1a:c6:bf:11:27:b9:99:43:f3:
00:76:48:bd:15:3d:50:a0:ce:ac:4c:31:3d:b8:4b:
99:26:1f:d0:37:12:e8:d3:be:9d:26:da:33:86:c6:
1b:d4:09:c3:f4:8c:7d:43:de:c3:10:04:bc:ff:1f:
e8:2f:a3:67:32:cd:ff:92:fb:80:b6:23:ea:ca:79:
00:65:a8:88:19:77:72:8a:c7:91:6f:d3:9b:6d:37:
0f:73:9e:b2:a7:9b:71:db:88:85:65:de:6d:83:3e:
a7:1c:80:03:56:c7:46:08:97:ae:28:cf:b8:fc:65:
72:6b:ed:fa:8b:64:fa:7f:9c:db:89:3d:b6:95:67:
b7:fc:c2:7f:2b:a0:01:00:69:d4:3f:4c:8d:eb:1c:
0a:52:de:9c:3d:d9:33:a6:01:ef:34:0d:c5:ee:c4:
e1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8C:BD:02:90:EE:63:29:CE:46:6C:1F:76:13:D2:D1:66:86:67:EE
X509v3 Authority Key Identifier:
keyid:C8:DE:1C:10:E3:69:64:1C:4B:31:8D:89:87:BC:5A:AD:E7:88:B9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yN4cEONpZBxLMY2Jh7xareeIuR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b95b83-9ac9-4849-acd5-f2755c7976bf/1/yN4cEONpZBxLMY2Jh7xareeIuR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b95b83-9ac9-4849-acd5-f2755c7976bf/1/yN4cEONpZBxLMY2Jh7xareeIuR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1c:0d:41:5b:3c:48:b4:71:ce:6d:25:f7:16:cb:1a:ec:e0:
89:6e:bf:fd:c2:aa:f1:4c:38:95:e4:fd:47:19:d1:90:2c:5a:
85:81:ec:87:2a:ed:a7:a4:d5:47:87:7d:10:af:c0:d2:c5:39:
8d:11:63:79:4c:93:4d:7e:a7:14:5c:9d:d4:a2:f4:ca:f8:ed:
c8:a7:2b:6d:64:1e:2a:cf:22:2b:13:0f:8d:8b:6c:58:4c:57:
53:e0:15:d0:68:1b:62:e8:a5:55:72:1f:70:0f:f1:da:5d:71:
db:3f:b0:8c:93:ac:c7:8f:f0:32:34:65:93:9c:35:ad:cb:aa:
46:79:ff:3d:45:8f:47:ee:cc:3a:77:99:68:1f:fc:f4:3a:af:
1c:a3:9c:b1:d7:f0:23:d4:20:cb:06:bb:0f:63:e1:c0:1a:df:
75:fe:db:13:b7:43:fb:83:45:b5:0b:66:42:5a:08:c3:1c:bf:
c5:4b:bb:89:05:5b:48:4a:7b:cd:4b:83:61:58:fa:b3:73:47:
04:92:e4:ac:01:66:da:b1:c9:c8:28:bc:a5:0d:f4:16:91:a3:
63:e3:8d:21:45:9b:37:35:f8:6a:bb:21:1a:64:55:13:28:e8:
c0:47:57:f4:0a:2d:82:cf:24:95:c1:1c:4b:4a:8f:df:ce:aa:
d6:25:67:df
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEC7MGnzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
OGRlMWMxMGUzNjk2NDFjNGIzMThkODk4N2JjNWFhZGU3ODhiOTFlMB4XDTIyMDQy
ODA0NDUxOVoXDTIyMDQyOTA0NDUxOVowMzExMC8GA1UEAxMoMGI4Y2JkMDI5MGVl
NjMyOWNlNDY2YzFmNzYxM2QyZDE2Njg2NjdlZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIC/tT/bQ6F7kF25afpaqo5G+prTZTnCVeXSMOicZ8baB0g5
7O9yA1W7sfPURVvzujBZHR+jodU6sZqSqqK9pPENOw6BSSP5ItHUlNnqThXpBbfy
8JWkqk4fgbuIXw8RGsa/ESe5mUPzAHZIvRU9UKDOrEwxPbhLmSYf0DcS6NO+nSba
M4bGG9QJw/SMfUPewxAEvP8f6C+jZzLN/5L7gLYj6sp5AGWoiBl3corHkW/Tm203
D3OesqebcduIhWXebYM+pxyAA1bHRgiXrijPuPxlcmvt+otk+n+c24k9tpVnt/zC
fyugAQBp1D9MjescClLenD3ZM6YB7zQNxe7E4TsCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBQLjL0CkO5jKc5GbB92E9LRZoZn7jAfBgNVHSMEGDAWgBTI3hwQ42lkHEsx
jYmHvFqt54i5HjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3lONGNFT05wWkJ4TE1ZMkpoN3hhcmVlSXVSNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDgvYjk1YjgzLTlhYzktNDg0OS1hY2Q1LWYyNzU1Yzc5NzZiZi8x
L3lONGNFT05wWkJ4TE1ZMkpoN3hhcmVlSXVSNC5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgv
Yjk1YjgzLTlhYzktNDg0OS1hY2Q1LWYyNzU1Yzc5NzZiZi8xL3lONGNFT05wWkJ4
TE1ZMkpoN3hhcmVlSXVSNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABwcDUFbPEi0cc5tJfcWyxrs4Ilu
v/3CqvFMOJXk/UcZ0ZAsWoWB7Icq7aek1UeHfRCvwNLFOY0RY3lMk01+pxRcndSi
9Mr47cinK21kHirPIisTD42LbFhMV1PgFdBoG2LopVVyH3AP8dpdcds/sIyTrMeP
8DI0ZZOcNa3LqkZ5/z1Fj0fuzDp3mWgf/PQ6rxyjnLHX8CPUIMsGuw9j4cAa33X+
2xO3Q/uDRbULZkJaCMMcv8VLu4kFW0hKe81Lg2FY+rNzRwSS5KwBZtqxycgovKUN
9BaRo2PjjSFFmzc1+Gq7IRpkVRMo6MBHV/QKLYLPJJXBHEtKj9/OqtYlZ98=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:54 2025 by rpki-client