Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
File: mY6csn89GrzEzGHDwbv9xyYo5Xs.mft (raw, json)
Hash identifier: F/5uYKfDcYmS2WgfA/HMuhub7bBYrBV6Y3dh5SlYwvM=
Subject key identifier: 72:1A:B6:4A:E7:10:90:92:7C:AC:1D:81:8A:6A:A6:43:E1:E6:D1:E4
Authority key identifier: 99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B
Certificate issuer: /CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b
Certificate serial: 0194BD859A6E79E2F861DE4B76AEF3A6CF70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: UCapjxyaJi5z5guHcEyumiBs9Pg.roa (hash: LIHlX4VN2XaFL14w/XwFEPN4bxUvck7ZLxdQY/Md6OU=)
2: mY6csn89GrzEzGHDwbv9xyYo5Xs.crl (hash: XQlmHLVQA+T6sijtNmHVGfvyn3eGl1qjgVG6WXbsx3A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9a:6e:79:e2:f8:61:de:4b:76:ae:f3:a6:cf:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=721ab64ae71090927cac1d818a6aa643e1e6d1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6d:1a:3a:71:94:9f:77:22:50:68:d7:bf:76:
00:57:46:fe:3d:4b:55:ea:4d:48:b6:b3:a2:c0:83:
92:49:ec:bc:4d:89:f2:73:88:07:23:99:0e:f0:2a:
f9:61:5a:0d:c6:29:2b:8a:9b:f8:3f:4b:62:dc:3a:
6a:20:d9:2f:04:08:b1:ba:60:31:ee:7e:3b:cd:4d:
df:9b:a3:ff:23:6c:9d:e7:2b:75:b3:53:3d:1e:fb:
97:e3:61:3c:cc:1f:1f:6e:0d:b3:68:79:a2:be:46:
2a:58:cb:1b:ea:42:33:a2:cd:dc:c5:01:ab:db:2e:
96:3b:2d:15:f3:43:fe:b7:7f:d5:ae:ab:0d:9d:72:
a6:3e:f8:44:e3:f5:f3:bb:42:35:c5:0c:b2:43:ab:
67:7a:ab:54:27:6b:32:9d:10:64:56:6e:76:2a:66:
9f:5e:c9:e0:45:32:2b:fd:24:1b:e9:11:34:eb:fa:
78:cf:b7:4e:d9:87:46:a1:2a:f4:bd:57:83:75:01:
ae:3b:6a:8a:21:f9:44:05:2b:30:21:e1:80:ae:96:
a2:7c:5d:24:08:ff:fc:64:2c:10:c8:7c:3a:8b:de:
80:95:53:78:b4:1c:c1:5e:04:6f:c1:44:10:d1:19:
70:92:d9:0d:60:d2:63:42:29:6e:0e:04:73:d0:45:
9d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1A:B6:4A:E7:10:90:92:7C:AC:1D:81:8A:6A:A6:43:E1:E6:D1:E4
X509v3 Authority Key Identifier:
keyid:99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c7:55:c6:4e:ee:7a:f9:91:49:c6:5e:f7:3e:ae:9f:e5:e0:
c6:57:b0:da:d1:fe:ba:2e:2d:2d:46:5b:2a:d1:29:e9:9b:db:
16:41:23:fe:51:a5:2e:f6:00:c1:7b:34:27:16:75:99:af:8f:
6c:eb:80:2f:c8:07:6f:96:ec:ab:ca:d8:4f:c5:6e:65:6a:71:
5b:8a:6c:f1:13:54:b5:f8:cb:c7:41:f5:6a:45:95:33:81:f6:
8e:19:b7:8e:36:f2:94:0e:1c:ae:81:e1:e8:bd:81:6b:d7:fa:
c5:c9:dc:04:60:56:f5:49:fd:4b:78:39:94:30:b8:12:00:c4:
51:3e:b4:8a:e6:f4:3d:53:21:4a:aa:ed:4e:48:c3:cf:8c:86:
d3:9c:76:b0:f8:68:a3:97:a8:e7:8b:80:2c:d5:73:54:37:81:
36:42:0b:69:11:00:3e:e8:75:83:97:18:37:2d:9b:22:b7:8c:
2e:02:1e:cd:e3:57:8e:ad:8a:cd:2a:ba:d8:1f:ce:2d:e8:ed:
1b:ee:0a:27:77:61:a7:0d:6a:3d:d2:b4:69:76:28:14:ff:0f:
c2:b7:ae:dd:84:95:fe:21:39:9d:ae:4e:66:3e:2b:85:6c:17:
28:a5:24:35:ab:34:bd:f4:f7:c3:34:53:74:a1:a5:da:7e:12:
de:19:ba:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZpueeL4Yd5Ldq7zps9wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5OGU5Y2IyN2YzZDFhYmNjNGNjNjFjM2MxYmJmZGM3MjYy
OGU1N2IwHhcNMjUwMTMxMTgwMDM3WhcNMjUwMjAxMTgwMDM3WjAzMTEwLwYDVQQD
Eyg3MjFhYjY0YWU3MTA5MDkyN2NhYzFkODE4YTZhYTY0M2UxZTZkMWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG0aOnGUn3ciUGjXv3YAV0b+PUtV
6k1ItrOiwIOSSey8TYnyc4gHI5kO8Cr5YVoNxikripv4P0ti3DpqINkvBAixumAx
7n47zU3fm6P/I2yd5yt1s1M9HvuX42E8zB8fbg2zaHmivkYqWMsb6kIzos3cxQGr
2y6WOy0V80P+t3/VrqsNnXKmPvhE4/Xzu0I1xQyyQ6tneqtUJ2synRBkVm52Kmaf
XsngRTIr/SQb6RE06/p4z7dO2YdGoSr0vVeDdQGuO2qKIflEBSswIeGArpaifF0k
CP/8ZCwQyHw6i96AlVN4tBzBXgRvwUQQ0RlwktkNYNJjQiluDgRz0EWdOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIatkrnEJCSfKwdgYpqpkPh5tHkMB8GA1UdIwQY
MBaAFJmOnLJ/PRq8xMxhw8G7/ccmKOV7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVk2Y3NuODlHcnpFekdIRHdidjl4eVlvNVhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zYzlmNGEtNDQ1Ni00NTgxLWIyODct
NTJkNmIzZTQ3ODlmLzEvbVk2Y3NuODlHcnpFekdIRHdidjl4eVlvNVhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8zYzlmNGEtNDQ1Ni00NTgxLWIyODctNTJkNmIzZTQ3ODlm
LzEvbVk2Y3NuODlHcnpFekdIRHdidjl4eVlvNVhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsdVxk7u
evmRScZe9z6un+Xgxlew2tH+ui4tLUZbKtEp6ZvbFkEj/lGlLvYAwXs0JxZ1ma+P
bOuAL8gHb5bsq8rYT8VuZWpxW4ps8RNUtfjLx0H1akWVM4H2jhm3jjbylA4croHh
6L2Ba9f6xcncBGBW9Un9S3g5lDC4EgDEUT60iub0PVMhSqrtTkjDz4yG05x2sPho
o5eo54uALNVzVDeBNkILaREAPuh1g5cYNy2bIreMLgIezeNXjq2KzSq62B/OLejt
G+4KJ3dhpw1qPdK0aXYoFP8Pwreu3YSV/iE5na5OZj4rhWwXKKUkNas0vfT3wzRT
dKGl2n4S3hm6Ow==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:44 2025 by rpki-client