Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/100ea7-3afa-40c5-a2c3-37c652f0f348/1/ypor56K5uaRz2ryFeLREp7LolS4.mft
File: ypor56K5uaRz2ryFeLREp7LolS4.mft (raw, json)
Hash identifier: jq0EK0ieStNwM819lFmRLRQCGHdhbc5DDpIYrOC212U=
Subject key identifier: 88:CB:A9:48:2C:A3:CD:4C:AE:24:DF:D7:96:B9:36:F5:C4:7D:12:80
Authority key identifier: CA:9A:2B:E7:A2:B9:B9:A4:73:DA:BC:85:78:B4:44:A7:B2:E8:95:2E
Certificate issuer: /CN=ca9a2be7a2b9b9a473dabc8578b444a7b2e8952e
Certificate serial: 0193D2C68F89B9218B8DB8FDE89D9FD6A120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypor56K5uaRz2ryFeLREp7LolS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/100ea7-3afa-40c5-a2c3-37c652f0f348/1/ypor56K5uaRz2ryFeLREp7LolS4.mft
Manifest number: 0D5B
Signing time: Tue 17 Dec 2024 04:00:48 +0000
Manifest this update: Tue 17 Dec 2024 04:00:48 +0000
Manifest next update: Wed 18 Dec 2024 04:00:48 +0000
Files and hashes: 1: nwGHMhoWkJPP2Nvl2QOLCfCd6m0.roa (hash: o9jT//YhsPWCHZ1joIfWpeW+V4r4JgvRmkoDzUHJWyk=)
2: ypor56K5uaRz2ryFeLREp7LolS4.crl (hash: y+w80s6wTlG8NHQLABJTwIa1xHbIStzSKin39l4Rn14=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d2:c6:8f:89:b9:21:8b:8d:b8:fd:e8:9d:9f:d6:a1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9a2be7a2b9b9a473dabc8578b444a7b2e8952e
Validity
Not Before: Dec 17 04:00:48 2024 GMT
Not After : Dec 18 04:00:48 2024 GMT
Subject: CN=88cba9482ca3cd4cae24dfd796b936f5c47d1280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a1:60:d9:5d:d2:25:bc:e1:78:4b:bb:08:ce:
4f:3f:8a:f7:f6:a5:d5:26:ac:1a:88:17:de:b3:5c:
eb:eb:c6:f5:73:70:c7:08:aa:b3:4e:cc:b1:97:0a:
f7:35:69:bc:1c:58:24:79:2b:0a:dc:0b:2a:e9:0a:
67:54:5a:df:12:4c:89:bb:c4:b0:84:47:ba:79:3a:
b6:0f:d2:ca:62:28:1b:fe:8b:cb:74:11:6f:f4:49:
1e:dd:2b:0c:34:db:04:f0:4d:a2:ce:02:47:b7:86:
0f:cd:4f:61:cf:12:bc:a3:3c:55:41:fe:e6:7a:21:
8c:48:f8:53:5d:b8:02:e3:84:ea:f8:80:6d:02:c5:
c9:d7:64:80:4e:94:69:e0:a5:b8:e9:27:24:44:b3:
67:15:d0:58:f7:e5:40:e9:c9:12:2f:0b:64:26:6a:
8a:ba:e6:25:df:ea:b0:07:02:34:0d:10:43:1d:ef:
8c:44:5f:ac:ee:eb:15:e8:e1:f9:df:25:4e:c9:9f:
67:66:bd:1e:a1:58:66:f7:8d:64:74:29:3c:c5:e9:
3b:e6:8b:3b:37:f2:f0:31:69:4f:50:8a:fc:83:88:
18:3f:bc:b3:17:b5:ea:bf:1a:bb:20:3d:9c:9d:e7:
f5:5d:17:9a:d4:19:89:56:7e:88:b5:c5:85:46:20:
18:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CB:A9:48:2C:A3:CD:4C:AE:24:DF:D7:96:B9:36:F5:C4:7D:12:80
X509v3 Authority Key Identifier:
keyid:CA:9A:2B:E7:A2:B9:B9:A4:73:DA:BC:85:78:B4:44:A7:B2:E8:95:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypor56K5uaRz2ryFeLREp7LolS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/100ea7-3afa-40c5-a2c3-37c652f0f348/1/ypor56K5uaRz2ryFeLREp7LolS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/100ea7-3afa-40c5-a2c3-37c652f0f348/1/ypor56K5uaRz2ryFeLREp7LolS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:82:a5:21:ac:83:84:88:8f:d2:ca:61:a8:15:53:6e:de:ca:
ed:10:e7:62:46:26:a9:dc:e5:d2:f1:9d:0e:77:df:fa:0d:eb:
25:01:05:3b:a0:80:74:ec:b2:74:2a:bd:1a:1c:98:93:4c:b4:
24:62:71:60:1a:1f:59:ed:bc:93:93:71:44:66:52:36:2c:1b:
9d:f5:6c:42:69:aa:c0:da:f3:92:bd:8a:40:06:1a:06:9c:cd:
bb:17:9a:0d:39:62:3d:79:38:8d:c0:43:bb:3b:eb:c9:96:06:
62:be:ab:87:46:ac:f7:b5:1a:66:54:84:f2:0a:24:23:a9:73:
31:d5:52:cc:55:8e:7a:54:4a:fe:38:79:82:f9:05:07:52:90:
46:95:08:d4:41:a5:64:97:17:8b:7a:19:23:04:63:31:3f:bd:
a7:70:7f:b9:f6:9f:a3:cd:6e:a9:4c:c7:5e:25:65:05:33:63:
19:70:22:a6:40:ce:81:c8:ab:4b:14:51:4e:38:c9:cb:c3:15:
c5:69:3c:e8:65:c9:48:03:e8:8f:54:dd:4f:db:83:89:74:da:
51:40:4b:1f:52:60:e1:b1:61:ea:35:14:e8:1d:63:e2:4e:24:
50:50:b4:e7:93:b0:3c:33:a8:0e:c6:0a:5d:82:89:85:71:69:
68:72:fc:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZPSxo+JuSGLjbj96J2f1qEgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOWEyYmU3YTJiOWI5YTQ3M2RhYmM4NTc4YjQ0NGE3YjJl
ODk1MmUwHhcNMjQxMjE3MDQwMDQ4WhcNMjQxMjE4MDQwMDQ4WjAzMTEwLwYDVQQD
Eyg4OGNiYTk0ODJjYTNjZDRjYWUyNGRmZDc5NmI5MzZmNWM0N2QxMjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKFg2V3SJbzheEu7CM5PP4r39qXV
JqwaiBfes1zr68b1c3DHCKqzTsyxlwr3NWm8HFgkeSsK3Asq6QpnVFrfEkyJu8Sw
hEe6eTq2D9LKYigb/ovLdBFv9Eke3SsMNNsE8E2izgJHt4YPzU9hzxK8ozxVQf7m
eiGMSPhTXbgC44Tq+IBtAsXJ12SATpRp4KW46SckRLNnFdBY9+VA6ckSLwtkJmqK
uuYl3+qwBwI0DRBDHe+MRF+s7usV6OH53yVOyZ9nZr0eoVhm941kdCk8xek75os7
N/LwMWlPUIr8g4gYP7yzF7Xqvxq7ID2cnef1XRea1BmJVn6ItcWFRiAYwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjLqUgso81MriTf15a5NvXEfRKAMB8GA1UdIwQY
MBaAFMqaK+eiubmkc9q8hXi0RKey6JUuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXBvcjU2SzV1YVJ6MnJ5RmVMUkVwN0xvbFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8xMDBlYTctM2FmYS00MGM1LWEyYzMt
MzdjNjUyZjBmMzQ4LzEveXBvcjU2SzV1YVJ6MnJ5RmVMUkVwN0xvbFM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8xMDBlYTctM2FmYS00MGM1LWEyYzMtMzdjNjUyZjBmMzQ4
LzEveXBvcjU2SzV1YVJ6MnJ5RmVMUkVwN0xvbFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIKlIayD
hIiP0sphqBVTbt7K7RDnYkYmqdzl0vGdDnff+g3rJQEFO6CAdOyydCq9GhyYk0y0
JGJxYBofWe28k5NxRGZSNiwbnfVsQmmqwNrzkr2KQAYaBpzNuxeaDTliPXk4jcBD
uzvryZYGYr6rh0as97UaZlSE8gokI6lzMdVSzFWOelRK/jh5gvkFB1KQRpUI1EGl
ZJcXi3oZIwRjMT+9p3B/ufafo81uqUzHXiVlBTNjGXAipkDOgcirSxRRTjjJy8MV
xWk86GXJSAPoj1TdT9uDiXTaUUBLH1Jg4bFh6jUU6B1j4k4kUFC055OwPDOoDsYK
XYKJhXFpaHL8Rw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 10:20:42 2025 by rpki-client