Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dfa9ee-8924-4b95-a9dd-0b1802184b09/1/yk0UHzr3GovPhSynYfy03sAVeOQ.mft
File: yk0UHzr3GovPhSynYfy03sAVeOQ.mft (raw, json)
Hash identifier: 5IxaOcqXIoJ6tZiJW0qTJMcSjW7jmMj/mAHPmORuXP4=
Subject key identifier: 49:68:4F:AF:E7:79:1B:37:2C:BB:C9:1B:AB:A2:E7:EE:6B:3A:FE:2A
Authority key identifier: CA:4D:14:1F:3A:F7:1A:8B:CF:85:2C:A7:61:FC:B4:DE:C0:15:78:E4
Certificate issuer: /CN=ca4d141f3af71a8bcf852ca761fcb4dec01578e4
Certificate serial: 0192ACCDC79905490F31FE6627FB165357C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yk0UHzr3GovPhSynYfy03sAVeOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dfa9ee-8924-4b95-a9dd-0b1802184b09/1/yk0UHzr3GovPhSynYfy03sAVeOQ.mft
Manifest number: 0185
Signing time: Mon 21 Oct 2024 02:00:19 +0000
Manifest this update: Mon 21 Oct 2024 02:00:19 +0000
Manifest next update: Tue 22 Oct 2024 02:00:19 +0000
Files and hashes: 1: IsYV5KFjV1eMtUFF78omQ671c-4.roa (hash: l3eeBhvF3ltPJ6fCJ5QTHsALNO/HMhtGk+nuwqJsHzc=)
2: yk0UHzr3GovPhSynYfy03sAVeOQ.crl (hash: KU+3+y7k0lq8hfIdyIv5hsR1AqoW1GpcFUOq0JfKNm0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ac:cd:c7:99:05:49:0f:31:fe:66:27:fb:16:53:57:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca4d141f3af71a8bcf852ca761fcb4dec01578e4
Validity
Not Before: Oct 21 02:00:19 2024 GMT
Not After : Oct 22 02:00:19 2024 GMT
Subject: CN=49684fafe7791b372cbbc91baba2e7ee6b3afe2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:36:4e:a6:23:9d:7e:61:01:a5:51:5f:0e:
f8:05:e9:1e:b6:61:9b:12:0d:27:72:e8:1b:1c:2f:
e2:4f:69:1f:36:ab:e8:74:b9:fe:9d:8a:ef:2f:b6:
da:c7:65:7b:e6:51:29:8f:85:b8:64:8d:48:33:a1:
c6:fc:e1:83:bd:e4:81:e5:77:e4:47:c0:f9:f9:ca:
a9:a3:1d:c2:77:63:fe:66:3e:40:e1:49:80:3e:78:
26:78:31:e9:6e:d3:db:5c:ff:7b:db:64:c6:1b:d8:
ec:b0:0e:4e:aa:c0:c3:41:6d:9e:ce:7a:8c:83:68:
4a:25:17:4d:db:0d:29:5a:37:0b:82:b5:c9:8b:e7:
57:86:0f:7c:71:37:cd:d9:24:c3:2d:01:dc:0c:6b:
3a:23:dd:a9:87:49:eb:aa:e7:a8:5a:40:92:c5:8b:
61:89:57:75:8a:1a:ec:b1:a3:5a:2e:ec:3f:90:a6:
77:35:cf:06:ee:37:83:f0:2c:aa:51:28:ff:1a:74:
79:26:cd:8d:db:18:88:dc:30:af:d8:c6:24:aa:e2:
f9:2f:16:78:6b:c0:27:97:31:aa:8d:42:20:19:52:
03:d5:0b:be:8b:28:26:32:d0:18:b6:1c:75:51:27:
0c:74:54:53:b1:62:01:c6:09:a4:e8:b7:29:8c:52:
7c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:68:4F:AF:E7:79:1B:37:2C:BB:C9:1B:AB:A2:E7:EE:6B:3A:FE:2A
X509v3 Authority Key Identifier:
keyid:CA:4D:14:1F:3A:F7:1A:8B:CF:85:2C:A7:61:FC:B4:DE:C0:15:78:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yk0UHzr3GovPhSynYfy03sAVeOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dfa9ee-8924-4b95-a9dd-0b1802184b09/1/yk0UHzr3GovPhSynYfy03sAVeOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dfa9ee-8924-4b95-a9dd-0b1802184b09/1/yk0UHzr3GovPhSynYfy03sAVeOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:37:bb:61:00:f3:24:41:3a:ca:40:78:ee:61:b4:f0:b9:d0:
04:f2:be:d8:4d:9b:cc:d4:cd:fa:10:bf:df:28:42:28:c6:33:
a7:66:1d:b7:e0:bf:a4:92:c7:36:00:d8:bc:23:fe:41:2d:ff:
5a:a4:69:bc:ca:5d:56:18:16:f0:93:37:64:92:f1:26:d7:62:
4f:c4:26:7a:e7:fd:78:9d:0a:0a:ae:09:3c:96:ff:32:e7:f0:
28:9e:99:1a:58:51:15:3a:6d:83:e4:8a:ae:0d:9e:61:bc:fb:
02:79:ec:02:42:26:53:b7:82:a2:4c:48:6e:93:c9:62:b5:25:
56:75:67:bd:6b:92:c1:77:6c:d4:70:e1:ad:d8:33:d2:b5:25:
cc:9c:d5:75:eb:bb:ee:95:6d:a0:ea:95:db:c8:8a:99:16:ca:
66:34:a9:19:06:0f:f5:ce:e4:ee:c6:d7:c4:c6:ab:59:1a:bb:
86:2d:b1:65:87:a8:cf:56:ad:29:e6:01:ce:00:29:ca:d9:f5:
1d:7b:36:2a:d1:69:ad:f6:35:5a:fd:17:f8:d1:20:28:64:c2:
d1:14:67:62:63:c5:13:3d:d9:6d:1c:d1:ef:1f:45:6d:7d:48:
4b:0c:5e:96:0f:76:7b:d6:0d:72:c6:6b:33:c2:26:f8:de:9f:
5a:3c:ed:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZKszceZBUkPMf5mJ/sWU1fEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNGQxNDFmM2FmNzFhOGJjZjg1MmNhNzYxZmNiNGRlYzAx
NTc4ZTQwHhcNMjQxMDIxMDIwMDE5WhcNMjQxMDIyMDIwMDE5WjAzMTEwLwYDVQQD
Eyg0OTY4NGZhZmU3NzkxYjM3MmNiYmM5MWJhYmEyZTdlZTZiM2FmZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf82TqYjnX5hAaVRXw74BeketmGb
Eg0ncugbHC/iT2kfNqvodLn+nYrvL7bax2V75lEpj4W4ZI1IM6HG/OGDveSB5Xfk
R8D5+cqpox3Cd2P+Zj5A4UmAPngmeDHpbtPbXP9722TGG9jssA5OqsDDQW2eznqM
g2hKJRdN2w0pWjcLgrXJi+dXhg98cTfN2STDLQHcDGs6I92ph0nrqueoWkCSxYth
iVd1ihrssaNaLuw/kKZ3Nc8G7jeD8CyqUSj/GnR5Js2N2xiI3DCv2MYkquL5LxZ4
a8AnlzGqjUIgGVID1Qu+iygmMtAYthx1UScMdFRTsWIBxgmk6LcpjFJ8HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEloT6/neRs3LLvJG6ui5+5rOv4qMB8GA1UdIwQY
MBaAFMpNFB869xqLz4Usp2H8tN7AFXjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWswVUh6cjNHb3ZQaFN5bllmeTAzc0FWZU9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kZmE5ZWUtODkyNC00Yjk1LWE5ZGQt
MGIxODAyMTg0YjA5LzEveWswVUh6cjNHb3ZQaFN5bllmeTAzc0FWZU9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9kZmE5ZWUtODkyNC00Yjk1LWE5ZGQtMGIxODAyMTg0YjA5
LzEveWswVUh6cjNHb3ZQaFN5bllmeTAzc0FWZU9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmze7YQDz
JEE6ykB47mG08LnQBPK+2E2bzNTN+hC/3yhCKMYzp2Ydt+C/pJLHNgDYvCP+QS3/
WqRpvMpdVhgW8JM3ZJLxJtdiT8Qmeuf9eJ0KCq4JPJb/MufwKJ6ZGlhRFTptg+SK
rg2eYbz7AnnsAkImU7eCokxIbpPJYrUlVnVnvWuSwXds1HDhrdgz0rUlzJzVdeu7
7pVtoOqV28iKmRbKZjSpGQYP9c7k7sbXxMarWRq7hi2xZYeoz1atKeYBzgApytn1
HXs2KtFprfY1Wv0X+NEgKGTC0RRnYmPFEz3ZbRzR7x9FbX1ISwxelg92e9YNcsZr
M8Im+N6fWjztxg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:17:42 2025 by rpki-client