Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
File: 20YNIBeVpqmS7UrBi7fFLBCLeFI.mft (raw, json)
Hash identifier: 7YPM2mP9q4fuvp8XFRUKS5kBjTzipsYtPjMPsVYAB74=
Subject key identifier: 10:87:48:9C:FC:12:EE:5C:87:FA:4A:E0:C2:48:D1:52:C8:C8:63:CB
Authority key identifier: DB:46:0D:20:17:95:A6:A9:92:ED:4A:C1:8B:B7:C5:2C:10:8B:78:52
Certificate issuer: /CN=db460d201795a6a992ed4ac18bb7c52c108b7852
Certificate serial: 0194BC72C88F061621F2B756A8BE2AE7DE9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: 20YNIBeVpqmS7UrBi7fFLBCLeFI.crl (hash: IFmUqoyHHiF65wfMqHY//EzZ3v2Pzy13YR1wj5hJIW4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c8:8f:06:16:21:f2:b7:56:a8:be:2a:e7:de:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db460d201795a6a992ed4ac18bb7c52c108b7852
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=1087489cfc12ee5c87fa4ae0c248d152c8c863cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:96:87:0d:bc:c5:2b:a0:ab:7f:00:4e:7d:9c:
ac:6e:af:c7:2a:4e:c4:6d:35:bb:51:9f:e1:97:fa:
33:23:c1:96:57:3f:99:94:d9:57:e9:d3:5e:4d:83:
c2:96:b4:68:76:38:bf:e2:05:9c:36:1e:03:51:80:
f3:88:87:4e:8a:3d:0a:29:47:70:f1:27:79:20:f5:
8f:ab:b4:06:9b:6b:d4:24:04:78:06:5d:24:1a:fc:
f0:85:c7:e8:a1:8d:83:9e:80:ed:8a:d0:cd:e3:f3:
55:0c:d1:c0:61:c0:be:41:50:5e:bc:06:26:21:f2:
a6:92:50:f0:a3:d3:eb:5c:87:30:2d:5e:e9:f3:47:
45:fe:1a:7b:08:54:5a:fb:e6:ec:45:27:da:0d:b6:
99:18:ca:ab:0b:f9:fe:21:20:76:63:b3:d0:35:dc:
e0:01:f9:2a:50:d1:db:3e:59:67:81:3b:85:a9:96:
5c:37:6e:8b:7c:d3:67:87:71:b1:19:d0:ac:60:e9:
64:78:90:1b:26:32:75:80:f3:95:f3:d9:d6:a1:4f:
80:4c:23:28:d7:8f:c9:29:cf:c8:c2:c7:df:c6:7c:
b4:8e:f1:82:aa:92:72:8c:f5:69:48:8e:be:1f:ed:
4b:88:0a:fe:9b:a9:32:a6:53:29:aa:dd:0a:61:60:
34:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:87:48:9C:FC:12:EE:5C:87:FA:4A:E0:C2:48:D1:52:C8:C8:63:CB
X509v3 Authority Key Identifier:
keyid:DB:46:0D:20:17:95:A6:A9:92:ED:4A:C1:8B:B7:C5:2C:10:8B:78:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:2b:bf:5a:14:c7:e2:6c:73:a9:19:5d:29:cb:68:82:eb:08:
e2:72:13:d9:89:0f:de:57:cb:57:50:f0:db:08:d8:55:e0:73:
5f:7f:0b:b2:12:11:fc:f5:a1:b9:62:f8:6f:45:de:66:83:4d:
34:b9:e2:16:e4:e5:30:11:07:01:9f:5a:f8:5b:3c:38:25:c0:
e5:84:14:cf:c1:34:83:62:61:4d:ce:4f:1d:56:ad:bb:5e:79:
d7:e7:bb:53:2e:8e:af:7d:d9:e9:15:01:a4:7e:c6:4d:32:93:
3e:7a:e4:29:6c:d2:d9:c1:d3:a2:74:29:0f:70:ea:e6:bb:65:
27:6e:84:6b:4e:d6:23:ad:84:38:ee:6e:b6:d6:03:8f:0c:df:
69:9c:bc:e8:97:42:e1:cc:f3:44:07:3f:3e:8c:e1:a8:9c:69:
8a:15:19:85:c1:41:e1:05:eb:18:19:45:29:10:e1:46:2f:2b:
01:25:14:d7:bc:1f:50:7d:3d:eb:85:28:6e:a5:e4:17:db:9d:
19:45:d0:77:05:3f:15:01:c8:4f:c7:16:3e:3b:cf:49:9f:4b:
93:74:93:d9:4b:43:0b:3c:27:c6:d3:65:b8:b5:c6:b4:a9:9f:
39:ee:85:b7:42:66:4a:c3:9e:e8:69:37:17:ba:7b:93:32:9d:
b7:3f:30:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8csiPBhYh8rdWqL4q596fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNDYwZDIwMTc5NWE2YTk5MmVkNGFjMThiYjdjNTJjMTA4
Yjc4NTIwHhcNMjUwMTMxMTMwMDI2WhcNMjUwMjAxMTMwMDI2WjAzMTEwLwYDVQQD
EygxMDg3NDg5Y2ZjMTJlZTVjODdmYTRhZTBjMjQ4ZDE1MmM4Yzg2M2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZaHDbzFK6CrfwBOfZysbq/HKk7E
bTW7UZ/hl/ozI8GWVz+ZlNlX6dNeTYPClrRodji/4gWcNh4DUYDziIdOij0KKUdw
8Sd5IPWPq7QGm2vUJAR4Bl0kGvzwhcfooY2DnoDtitDN4/NVDNHAYcC+QVBevAYm
IfKmklDwo9PrXIcwLV7p80dF/hp7CFRa++bsRSfaDbaZGMqrC/n+ISB2Y7PQNdzg
AfkqUNHbPllngTuFqZZcN26LfNNnh3GxGdCsYOlkeJAbJjJ1gPOV89nWoU+ATCMo
14/JKc/Iwsffxny0jvGCqpJyjPVpSI6+H+1LiAr+m6kyplMpqt0KYWA0TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCHSJz8Eu5ch/pK4MJI0VLIyGPLMB8GA1UdIwQY
MBaAFNtGDSAXlaapku1KwYu3xSwQi3hSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjBZTklCZVZwcW1TN1VyQmk3ZkZMQkNMZUZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xZjM0NmEtYTg3ZC00OTU3LWE0Y2Ut
ZTgyZWQzZDc2YTg3LzEvMjBZTklCZVZwcW1TN1VyQmk3ZkZMQkNMZUZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8xZjM0NmEtYTg3ZC00OTU3LWE0Y2UtZTgyZWQzZDc2YTg3
LzEvMjBZTklCZVZwcW1TN1VyQmk3ZkZMQkNMZUZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSu/WhTH
4mxzqRldKctogusI4nIT2YkP3lfLV1Dw2wjYVeBzX38LshIR/PWhuWL4b0XeZoNN
NLniFuTlMBEHAZ9a+Fs8OCXA5YQUz8E0g2JhTc5PHVatu1551+e7Uy6Or33Z6RUB
pH7GTTKTPnrkKWzS2cHTonQpD3Dq5rtlJ26Ea07WI62EOO5uttYDjwzfaZy86JdC
4czzRAc/PozhqJxpihUZhcFB4QXrGBlFKRDhRi8rASUU17wfUH0964UobqXkF9ud
GUXQdwU/FQHIT8cWPjvPSZ9Lk3ST2UtDCzwnxtNluLXGtKmfOe6Ft0JmSsOe6Gk3
F7p7kzKdtz8wfA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:52:07 2025 by rpki-client