Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
File: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft (raw, json)
Hash identifier: UuRd69tSu+KYE6dFcVrWwCGubqcVVDDP0RfjBwqcFRk=
Subject key identifier: 5B:C8:A5:57:AF:A1:F2:E3:3E:47:3A:D5:48:C3:C7:A7:47:1E:1D:59
Authority key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
Certificate issuer: /CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Certificate serial: 0194BBCE3659E8E568CCFA3ECDE9041F0472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
Manifest number: 0446
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: VDp2XndX6JtfGoVwkuuoCgKyVMU.roa (hash: Rhw0fwZkj0N5t7R6u0JuhOm1mEK44+j2oimY3iLluL4=)
2: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl (hash: cRCY9Pr+nSJOLbZuWQ2iav7nw87Y2q+ra7f8+X0A5vI=)
3: tbUJNdzqV1cqj6cepbLRJaiPbU4.roa (hash: IS4lVDG4Sm/RB8vspTgrINHiyvQuQpEscgsUN00C+BY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:36:59:e8:e5:68:cc:fa:3e:cd:e9:04:1f:04:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=5bc8a557afa1f2e33e473ad548c3c7a7471e1d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9a:d6:8b:82:35:b1:99:63:65:ce:35:10:8e:
be:b8:e7:07:9a:f9:c6:82:54:20:b4:9b:0c:9c:cc:
79:7d:d1:20:d7:8e:79:7d:17:84:f9:f7:9f:e9:34:
2f:de:9e:df:34:37:b2:10:13:26:30:72:dc:a2:a0:
41:cf:6a:f5:5f:84:cd:1d:fc:b7:0a:a0:0a:94:b8:
67:1b:ea:cf:86:d2:06:ba:0f:7b:31:02:c3:56:2b:
a1:d2:00:b2:2d:d4:02:d6:66:20:24:97:c7:92:12:
63:97:a4:08:69:3b:41:4c:e1:24:d8:d7:c7:7f:86:
48:27:b2:8a:f0:bd:4e:d7:69:92:fe:f4:bd:98:e3:
4b:5d:fa:d0:d7:8d:87:aa:32:c2:09:df:20:ee:cd:
e6:5e:ac:ab:8c:ae:8e:89:6e:05:37:69:d5:6b:ba:
e2:47:df:ca:60:3b:3a:2e:dc:b7:6c:e2:5a:6d:04:
35:45:a5:bf:8a:b1:f0:b8:13:c4:eb:e9:8b:3a:c7:
b2:c4:86:db:8e:a4:9e:a8:aa:90:d8:42:78:ca:f2:
80:18:f9:b4:45:87:19:e3:90:e7:a6:f3:1a:32:35:
60:52:02:68:8d:c3:4f:8e:94:60:83:9c:64:80:da:
ab:23:ec:82:7e:84:ba:69:69:69:05:2a:3f:fe:24:
d3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C8:A5:57:AF:A1:F2:E3:3E:47:3A:D5:48:C3:C7:A7:47:1E:1D:59
X509v3 Authority Key Identifier:
keyid:62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f9:83:0d:52:02:38:2c:c6:20:3f:76:da:e2:01:cb:78:9b:
af:1c:2f:d1:16:5a:9f:29:d6:81:81:1d:a6:28:55:d7:be:53:
7c:97:0d:9b:37:dd:2f:62:b1:8a:25:19:50:17:49:c5:3b:98:
d2:1b:1c:84:4b:19:61:ef:83:68:49:5c:de:74:3f:4b:21:97:
87:61:7d:75:0b:ce:b3:12:55:bb:b8:dd:cc:df:8b:3f:a6:5b:
62:cc:df:b3:10:9c:e8:3c:fa:2b:7f:af:39:35:21:da:b0:a7:
d9:29:a8:11:94:e8:84:9c:c4:8e:4a:9d:d9:9d:ba:05:cc:72:
ee:c3:b3:50:8b:87:a8:f7:28:5d:b9:2d:5b:2c:a6:31:5b:50:
b3:7f:b2:d4:dc:c0:e2:5e:ec:42:ae:a6:64:06:14:ed:8c:e4:
44:3f:e0:63:a7:63:e1:7b:05:33:1a:6b:bf:d9:fd:57:5c:8c:
ff:3e:34:f4:30:c7:41:02:2d:19:35:f3:bd:a0:af:5a:87:58:
67:c3:fd:f6:19:27:04:86:1e:69:fd:d3:7e:31:70:80:30:e5:
ab:dc:8e:70:4f:f6:06:48:73:5e:a0:70:aa:c5:e8:5d:8e:25:
73:58:6a:5c:59:d5:6f:bf:8c:c0:7e:18:ea:48:3f:4b:7b:d1:
a6:92:21:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zjZZ6OVozPo+zekEHwRyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYzY2MjY3OTQzZDQxM2NkZjc2MGRjNjg1MDEwNGMxYzBm
YzFkNjUwHhcNMjUwMTMxMTAwMDQxWhcNMjUwMjAxMTAwMDQxWjAzMTEwLwYDVQQD
Eyg1YmM4YTU1N2FmYTFmMmUzM2U0NzNhZDU0OGMzYzdhNzQ3MWUxZDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJrWi4I1sZljZc41EI6+uOcHmvnG
glQgtJsMnMx5fdEg1455fReE+fef6TQv3p7fNDeyEBMmMHLcoqBBz2r1X4TNHfy3
CqAKlLhnG+rPhtIGug97MQLDViuh0gCyLdQC1mYgJJfHkhJjl6QIaTtBTOEk2NfH
f4ZIJ7KK8L1O12mS/vS9mONLXfrQ142HqjLCCd8g7s3mXqyrjK6OiW4FN2nVa7ri
R9/KYDs6Lty3bOJabQQ1RaW/irHwuBPE6+mLOseyxIbbjqSeqKqQ2EJ4yvKAGPm0
RYcZ45DnpvMaMjVgUgJojcNPjpRgg5xkgNqrI+yCfoS6aWlpBSo//iTTLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvIpVevofLjPkc61UjDx6dHHh1ZMB8GA1UdIwQY
MBaAFGLGYmeUPUE833YNxoUBBMHA/B1lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXNaaVo1UTlRVHpmZGczR2hRRUV3Y0Q4SFdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81MGY0ZjctNDljYy00YzgyLTkzMjQt
YTlkN2FkNDQyYjNiLzEvWXNaaVo1UTlRVHpmZGczR2hRRUV3Y0Q4SFdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81MGY0ZjctNDljYy00YzgyLTkzMjQtYTlkN2FkNDQyYjNi
LzEvWXNaaVo1UTlRVHpmZGczR2hRRUV3Y0Q4SFdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvmDDVIC
OCzGID922uIBy3ibrxwv0RZanynWgYEdpihV175TfJcNmzfdL2KxiiUZUBdJxTuY
0hschEsZYe+DaElc3nQ/SyGXh2F9dQvOsxJVu7jdzN+LP6ZbYszfsxCc6Dz6K3+v
OTUh2rCn2SmoEZTohJzEjkqd2Z26Bcxy7sOzUIuHqPcoXbktWyymMVtQs3+y1NzA
4l7sQq6mZAYU7YzkRD/gY6dj4XsFMxprv9n9V1yM/z409DDHQQItGTXzvaCvWodY
Z8P99hknBIYeaf3TfjFwgDDlq9yOcE/2BkhzXqBwqsXoXY4lc1hqXFnVb7+MwH4Y
6kg/S3vRppIhiQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:54:07 2025 by rpki-client