Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
File: Y2-s66M0MntpXrOwyV6yMJL5PgE.mft (raw, json)
Hash identifier: 5fgysyU0Beuo/FxB6FDKnG+KA9QPfoJXAJE175ZN/GM=
Subject key identifier: B4:C2:BC:05:60:C8:36:A1:B6:67:E0:8B:A7:D5:05:1D:59:8C:1D:FF
Authority key identifier: 63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01
Certificate issuer: /CN=636faceba334327b695eb3b0c95eb23092f93e01
Certificate serial: 0194BBCEDC5B30CD997A4FCA46FAC0F8F9CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
Manifest number: 0F17
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: Y2-s66M0MntpXrOwyV6yMJL5PgE.crl (hash: zDeiyD5abIaMeHL7C1IZcpbZDBP6TxywDYm1fRANSMM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:dc:5b:30:cd:99:7a:4f:ca:46:fa:c0:f8:f9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=636faceba334327b695eb3b0c95eb23092f93e01
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=b4c2bc0560c836a1b667e08ba7d5051d598c1dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:47:d0:61:21:4e:43:34:e7:47:06:09:ef:
69:22:31:80:cc:09:c4:e6:4a:37:78:d3:f2:e7:0b:
d2:c9:86:3d:a8:4d:ca:cb:91:7c:30:5b:ec:d4:2a:
15:f0:66:3f:78:e7:66:e6:c3:68:e9:20:32:c0:9b:
94:3e:d3:fe:58:d3:2e:3d:40:a7:c7:c6:0f:41:fc:
3d:bb:c8:a6:dd:c1:90:ec:d7:be:75:7e:cf:e5:1d:
9e:37:9a:eb:70:af:91:5e:c3:5f:1f:e6:6d:3f:ef:
f4:84:09:b5:fc:52:d9:a4:b0:40:c4:f2:48:4b:53:
ca:8e:25:d3:85:3c:98:05:aa:06:7a:2c:f9:b0:fd:
05:02:8e:20:b5:58:ba:01:71:fa:67:89:7f:42:a5:
1e:79:bd:99:9f:7d:d8:0b:42:61:a5:f1:26:99:43:
32:0d:7b:a4:62:e3:35:aa:fb:63:66:82:41:57:13:
19:57:1e:15:66:de:3d:c8:10:29:3c:c3:2e:15:51:
ff:e8:91:4a:f6:91:86:53:d1:20:ac:38:c0:1d:06:
60:21:b4:1d:21:92:21:48:2b:97:88:d9:4b:96:7a:
86:b7:7e:92:26:40:5a:e7:86:61:81:2e:8d:1b:59:
ec:a7:63:86:24:0c:43:4a:19:21:dd:9c:01:74:40:
ed:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C2:BC:05:60:C8:36:A1:B6:67:E0:8B:A7:D5:05:1D:59:8C:1D:FF
X509v3 Authority Key Identifier:
keyid:63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:72:78:0b:7e:0f:62:4e:4a:98:8f:29:4c:6d:7b:c0:18:91:
3b:8a:04:ec:4f:22:f3:db:38:7b:ae:e1:96:56:7f:6c:93:5a:
49:b1:aa:75:1b:9b:08:c8:6b:80:17:76:ff:19:b8:5e:89:d5:
b8:b9:f1:b9:1d:75:9e:b7:9a:8e:22:13:e4:c7:8b:ab:5a:bc:
ed:c9:15:e3:8d:7e:70:81:34:1a:af:bd:eb:e2:31:58:d7:20:
7f:69:40:c6:0e:13:96:ce:b3:8e:fb:89:c8:57:ea:32:5c:32:
52:4c:b5:e5:d4:5d:1d:17:1c:f4:14:33:f6:3f:80:2f:fd:52:
5c:34:88:ab:e5:35:7a:29:e8:cf:9b:19:f9:6a:89:8b:43:7f:
9a:52:bb:19:24:6e:d9:17:f8:1e:b1:d8:18:3b:01:22:9d:0f:
16:d8:2c:5a:17:92:42:e3:8b:d3:95:3f:02:ab:e5:ea:36:43:
30:07:d5:25:3b:47:92:df:19:a3:f2:98:24:c2:b4:f7:9b:37:
ce:74:a3:ff:dc:69:b9:14:30:80:f5:ae:bf:07:21:90:ad:16:
9d:e6:2a:a5:8d:cd:2e:7e:10:04:4c:d1:ba:92:3e:e7:7a:cc:
b1:36:c8:99:d5:91:3e:9f:d3:7c:c0:dd:bc:d2:92:8d:b0:77:
89:f4:78:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ztxbMM2Zek/KRvrA+PnOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNmZhY2ViYTMzNDMyN2I2OTVlYjNiMGM5NWViMjMwOTJm
OTNlMDEwHhcNMjUwMTMxMTAwMTIzWhcNMjUwMjAxMTAwMTIzWjAzMTEwLwYDVQQD
EyhiNGMyYmMwNTYwYzgzNmExYjY2N2UwOGJhN2Q1MDUxZDU5OGMxZGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzipH0GEhTkM050cGCe9pIjGAzAnE
5ko3eNPy5wvSyYY9qE3Ky5F8MFvs1CoV8GY/eOdm5sNo6SAywJuUPtP+WNMuPUCn
x8YPQfw9u8im3cGQ7Ne+dX7P5R2eN5rrcK+RXsNfH+ZtP+/0hAm1/FLZpLBAxPJI
S1PKjiXThTyYBaoGeiz5sP0FAo4gtVi6AXH6Z4l/QqUeeb2Zn33YC0JhpfEmmUMy
DXukYuM1qvtjZoJBVxMZVx4VZt49yBApPMMuFVH/6JFK9pGGU9EgrDjAHQZgIbQd
IZIhSCuXiNlLlnqGt36SJkBa54ZhgS6NG1nsp2OGJAxDShkh3ZwBdEDtywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTCvAVgyDahtmfgi6fVBR1ZjB3/MB8GA1UdIwQY
MBaAFGNvrOujNDJ7aV6zsMlesjCS+T4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTItczY2TTBNbnRwWHJPd3lWNnlNSkw1UGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy83NTc3ODYtY2VhNS00OWJhLThlZjMt
YWMzOGQ1YTIwYWZlLzEvWTItczY2TTBNbnRwWHJPd3lWNnlNSkw1UGdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy83NTc3ODYtY2VhNS00OWJhLThlZjMtYWMzOGQ1YTIwYWZl
LzEvWTItczY2TTBNbnRwWHJPd3lWNnlNSkw1UGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3J4C34P
Yk5KmI8pTG17wBiRO4oE7E8i89s4e67hllZ/bJNaSbGqdRubCMhrgBd2/xm4XonV
uLnxuR11nreajiIT5MeLq1q87ckV441+cIE0Gq+96+IxWNcgf2lAxg4Tls6zjvuJ
yFfqMlwyUky15dRdHRcc9BQz9j+AL/1SXDSIq+U1einoz5sZ+WqJi0N/mlK7GSRu
2Rf4HrHYGDsBIp0PFtgsWheSQuOL05U/Aqvl6jZDMAfVJTtHkt8Zo/KYJMK095s3
znSj/9xpuRQwgPWuvwchkK0WneYqpY3NLn4QBEzRupI+53rMsTbImdWRPp/TfMDd
vNKSjbB3ifR4QQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:19 2025 by rpki-client