Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
File: y-lwmA1WXMdK2ylKpox7BvUTKJA.mft (raw, json)
Hash identifier: HAVVZG6ilWx8Aou0JZRFgAgjsoXqoPhn5aS8s+kglok=
Subject key identifier: 4C:EB:AC:A4:E0:27:FF:D2:1B:F1:F9:FC:AD:E6:FB:3C:2C:9D:36:E4
Authority key identifier: CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
Certificate issuer: /CN=cbe970980d565cc74adb294aa68c7b06f5132890
Certificate serial: 0194BD4EB64CD796DBD70B2F9A212C1CA2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
Manifest number: 0736
Signing time: Fri 31 Jan 2025 17:00:39 +0000
Manifest this update: Fri 31 Jan 2025 17:00:39 +0000
Manifest next update: Sat 01 Feb 2025 17:00:39 +0000
Files and hashes: 1: w3_nPHf7a07mKfqvAI84MjCWgdc.roa (hash: zETLR/82/cCeh7r1wtGHL+Bc+UNE2hnrIZTGYx5oKPQ=)
2: y-lwmA1WXMdK2ylKpox7BvUTKJA.crl (hash: 4m/PtGHlyLKjOk0XEjts994bnq+CzLDV63ydDlbgJOY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b6:4c:d7:96:db:d7:0b:2f:9a:21:2c:1c:a2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe970980d565cc74adb294aa68c7b06f5132890
Validity
Not Before: Jan 31 17:00:39 2025 GMT
Not After : Feb 1 17:00:39 2025 GMT
Subject: CN=4cebaca4e027ffd21bf1f9fcade6fb3c2c9d36e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:76:5a:e2:c0:fb:36:fa:11:2c:0b:fd:cf:
61:9a:03:f6:43:63:6c:b3:ab:05:cb:1d:64:9a:13:
ca:d5:53:d3:78:95:f9:d8:6e:5e:b9:c0:7c:9a:c7:
fd:23:bf:ed:f0:dc:66:6e:a1:60:08:bd:e1:86:d6:
00:a3:b8:3f:6d:20:75:85:69:27:74:25:21:58:65:
65:d5:1c:48:71:8c:96:8c:b1:32:7a:60:be:a2:19:
47:ef:5b:b5:e6:4e:a2:b6:71:e7:30:a0:9c:3c:79:
a2:dc:31:8c:23:08:21:ca:f9:62:81:a5:c8:25:f1:
c8:3f:9c:7b:2f:19:93:09:d2:44:ce:f2:0f:15:b1:
cf:4e:92:90:d7:30:b9:dc:fd:b2:ad:88:9b:4d:a8:
3c:f1:08:12:5e:f0:1c:15:5d:fb:bf:05:9d:02:d6:
66:88:12:e1:a5:5f:4f:b5:92:0f:94:a8:66:54:55:
33:d4:26:ee:46:f4:bd:f7:c0:44:ac:37:30:a9:74:
f8:66:43:07:15:42:86:ce:f0:72:07:05:e4:fc:50:
e8:33:dd:95:bb:1e:71:39:66:9d:80:59:2c:69:93:
ad:d5:78:1c:7d:eb:25:4f:38:4a:d9:ed:67:13:07:
bf:12:a9:06:c4:2d:48:04:0c:18:25:3f:56:58:f0:
0a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EB:AC:A4:E0:27:FF:D2:1B:F1:F9:FC:AD:E6:FB:3C:2C:9D:36:E4
X509v3 Authority Key Identifier:
keyid:CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ed:d1:fe:ea:8f:94:21:2c:f3:26:02:57:23:f9:d3:bb:be:
ba:81:d3:80:7a:4f:96:a4:ed:cf:40:ca:ff:ed:14:a3:55:38:
32:86:c7:cc:ad:c8:68:a2:af:ca:84:6d:71:2a:99:28:87:74:
2c:ad:cb:83:1b:9e:93:ef:8c:a0:2f:92:6b:1e:ee:2b:a6:dc:
40:ef:63:46:05:37:1c:d6:d6:2e:f2:72:7a:78:f4:27:f5:11:
27:0f:2a:01:7e:6c:a0:27:59:02:cb:7a:73:87:77:48:fa:3b:
d2:60:44:6b:e3:b9:30:65:5c:c0:91:c7:b4:4d:0c:eb:ff:1a:
1e:02:1e:f1:7e:35:48:b4:76:c2:7a:86:5a:0f:10:60:eb:a5:
30:7d:24:c2:36:e5:21:e0:54:d2:cd:d4:b5:3a:00:7a:38:a8:
86:0b:12:59:3b:f6:d6:bc:24:56:94:7a:47:9f:5d:88:d5:ab:
31:0c:31:c3:07:5a:1d:e0:19:3b:85:e7:85:de:4f:b8:60:c6:
26:52:c5:24:3b:a7:e9:08:a0:07:44:48:de:32:5a:f5:54:43:
16:e3:b2:60:4d:29:9c:2c:35:3e:c9:e5:a5:e7:82:e0:e1:bf:
67:fc:88:e7:ed:85:5c:b8:d0:79:4e:1a:0f:c5:95:8b:11:c0:
01:90:75:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TrZM15bb1wsvmiEsHKLgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZTk3MDk4MGQ1NjVjYzc0YWRiMjk0YWE2OGM3YjA2ZjUx
MzI4OTAwHhcNMjUwMTMxMTcwMDM5WhcNMjUwMjAxMTcwMDM5WjAzMTEwLwYDVQQD
Eyg0Y2ViYWNhNGUwMjdmZmQyMWJmMWY5ZmNhZGU2ZmIzYzJjOWQzNmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpt2WuLA+zb6ESwL/c9hmgP2Q2Ns
s6sFyx1kmhPK1VPTeJX52G5eucB8msf9I7/t8NxmbqFgCL3hhtYAo7g/bSB1hWkn
dCUhWGVl1RxIcYyWjLEyemC+ohlH71u15k6itnHnMKCcPHmi3DGMIwghyvligaXI
JfHIP5x7LxmTCdJEzvIPFbHPTpKQ1zC53P2yrYibTag88QgSXvAcFV37vwWdAtZm
iBLhpV9PtZIPlKhmVFUz1CbuRvS998BErDcwqXT4ZkMHFUKGzvByBwXk/FDoM92V
ux5xOWadgFksaZOt1XgcfeslTzhK2e1nEwe/EqkGxC1IBAwYJT9WWPAKlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzrrKTgJ//SG/H5/K3m+zwsnTbkMB8GA1UdIwQY
MBaAFMvpcJgNVlzHStspSqaMewb1EyiQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveS1sd21BMVdYTWRLMnlsS3BveDdCdlVUS0pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zZGNmN2ItMTcwMy00NTlmLWFjMGIt
NzU2YTA4YTRhZGRhLzEveS1sd21BMVdYTWRLMnlsS3BveDdCdlVUS0pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8zZGNmN2ItMTcwMy00NTlmLWFjMGItNzU2YTA4YTRhZGRh
LzEveS1sd21BMVdYTWRLMnlsS3BveDdCdlVUS0pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+3R/uqP
lCEs8yYCVyP507u+uoHTgHpPlqTtz0DK/+0Uo1U4MobHzK3IaKKvyoRtcSqZKId0
LK3Lgxuek++MoC+Sax7uK6bcQO9jRgU3HNbWLvJyenj0J/URJw8qAX5soCdZAst6
c4d3SPo70mBEa+O5MGVcwJHHtE0M6/8aHgIe8X41SLR2wnqGWg8QYOulMH0kwjbl
IeBU0s3UtToAejiohgsSWTv21rwkVpR6R59diNWrMQwxwwdaHeAZO4Xnhd5PuGDG
JlLFJDun6QigB0RI3jJa9VRDFuOyYE0pnCw1PsnlpeeC4OG/Z/yI5+2FXLjQeU4a
D8WVixHAAZB1+A==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:19:06 2025 by rpki-client