Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
File: yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json)
Hash identifier: mxNzRLi2ESXpJGvoelq9beMDCKvZkXObN3p7RGMoJN4=
Subject key identifier: 5D:65:23:D4:0D:15:5D:FD:3A:11:9B:B5:3B:30:D6:26:AD:0F:5A:EB
Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Certificate serial: 0195E0470912B457779AFF0C329C05F025E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
Manifest number: 0FCB
Signing time: Sat 29 Mar 2025 05:01:46 +0000
Manifest this update: Sat 29 Mar 2025 05:01:46 +0000
Manifest next update: Sun 30 Mar 2025 05:01:46 +0000
Files and hashes: 1: u-olTnLwJF6ytkR-o6rX3D_kci8.roa (hash: MR3jrf7iR8t6kjldj/3xqnHlhsr0yJP0AElvCOGrpJI=)
2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: QPdqOGL8e7/dqQI30Idgd6EOoLcb0B5N/raRV+G4umQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:47:09:12:b4:57:77:9a:ff:0c:32:9c:05:f0:25:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Validity
Not Before: Mar 29 05:01:46 2025 GMT
Not After : Mar 30 05:01:46 2025 GMT
Subject: CN=5d6523d40d155dfd3a119bb53b30d626ad0f5aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:42:e0:17:e8:a6:a3:d7:44:71:b6:e0:65:
59:bf:7e:e2:10:02:83:22:08:e7:3b:36:99:b2:4d:
75:d3:25:22:9e:be:80:91:a7:0b:2d:fd:3a:cf:f3:
d0:07:6d:eb:98:92:eb:c4:94:f3:0d:0d:9d:53:cb:
3c:d2:02:e5:dc:98:81:c0:a7:cb:b0:1b:b9:a6:79:
0f:95:e8:08:47:79:09:7b:da:66:0d:d1:4f:cc:a5:
9d:29:eb:74:2e:8c:07:0e:84:e1:b6:e0:9d:07:a2:
80:ab:58:bf:1b:da:1d:6c:65:98:f4:53:ea:34:0b:
8c:29:22:7e:01:77:65:53:c0:86:f9:5f:cc:89:3d:
14:85:ed:93:3b:bc:f4:0a:b9:9a:b8:d2:f9:fc:51:
72:b5:a6:b3:3a:bb:e9:be:45:8d:3c:84:ca:9c:25:
58:ec:8c:33:13:52:1b:27:3b:0a:4b:a8:a0:cd:32:
d3:85:37:2f:7f:75:74:89:8c:ec:e0:f9:b6:3a:a6:
59:14:ef:bd:3a:41:ca:b6:e3:a5:93:b2:bc:85:8d:
fc:63:de:4f:0c:f3:e4:69:99:73:96:01:e8:41:a8:
22:11:c1:d5:24:70:f9:32:f9:b5:1e:7d:a3:d0:83:
fb:e2:67:03:ea:f2:0a:9f:7c:f5:b1:56:30:4d:c1:
3e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:65:23:D4:0D:15:5D:FD:3A:11:9B:B5:3B:30:D6:26:AD:0F:5A:EB
X509v3 Authority Key Identifier:
keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d9:aa:0e:4a:65:23:46:89:e4:0d:c3:0c:c5:8a:3f:b0:be:
55:a5:e6:c8:e4:d7:ba:9b:3c:86:81:b9:73:dc:01:bc:3f:03:
cf:f6:04:10:58:b4:ae:66:23:e1:a7:3a:65:94:d3:8a:de:31:
36:1f:cf:35:87:85:93:2f:33:54:29:e0:f8:f1:39:23:93:d8:
ff:9a:02:e4:03:cf:ff:ae:39:3f:9b:7c:10:05:80:88:db:ab:
a7:31:c4:8f:38:51:53:9c:5f:14:c1:2b:4b:64:bc:cf:3c:a3:
43:dd:fb:55:05:f5:de:ce:e2:83:3d:c8:2e:fd:e8:67:54:8e:
37:75:bd:94:42:15:c6:1e:00:c4:c2:a5:32:53:84:e1:46:58:
7b:ba:9b:db:ea:4b:4b:67:db:d6:a9:5c:ad:0f:47:42:09:e0:
c1:42:3d:c5:cd:52:c6:ea:dd:be:f2:9e:85:57:b3:69:df:a2:
3c:35:99:c6:7b:77:23:b5:a5:d4:36:59:8f:58:b0:48:97:6f:
33:c6:8f:4c:57:ac:33:18:06:c3:35:f8:23:50:2f:f7:0a:2c:
2f:bc:62:68:6b:90:ba:81:0c:f9:4d:f1:69:13:4f:3e:ad:ae:
56:9c:90:61:d6:d0:f6:9a:ae:81:27:43:1c:11:77:01:40:61:
7d:61:79:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:14 2025 by rpki-client