Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
File: YCmxoIE54dqWQ90EJPXNZFB-N3E.mft (raw, json)
Hash identifier: 1FMi1tqLwktAIAyWN57YQz7gshKXe+xA1+a7ymPIGhE=
Subject key identifier: A1:E5:7E:EA:BE:A2:77:EB:7D:86:B4:29:70:38:63:BF:71:29:79:70
Authority key identifier: 60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
Certificate issuer: /CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Certificate serial: 0194BC04C7775FDBCCE5F0C68042FBCC1E56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: YCmxoIE54dqWQ90EJPXNZFB-N3E.crl (hash: h71Wg3tARHoxixJIOzjRdPTBZ2zBMYB14rf88XEN//A=)
2: agnml2BoZnHcte3vAx95htHMxBs.roa (hash: 2HEzDKJFq3kC6T211YFaUksF6gjmrNkAZDecesO3QWc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c7:77:5f:db:cc:e5:f0:c6:80:42:fb:cc:1e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=a1e57eeabea277eb7d86b429703863bf71297970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:af:f4:9f:bc:fa:e5:a1:52:cc:37:1d:d3:
4a:3b:d2:06:09:ed:82:6c:d7:76:67:2e:28:e6:c7:
da:b2:79:8a:cd:9a:68:50:2b:00:1b:ac:07:0e:93:
e3:68:67:8e:8b:bb:7a:8a:57:81:8d:4e:d1:5a:d3:
2c:73:70:e7:3e:d6:f8:a8:c7:30:cc:cc:e6:6d:7f:
dc:4e:8f:6c:df:f5:3d:36:43:e5:be:e9:3a:c7:2b:
20:fb:6b:53:20:14:d3:b3:14:ce:89:e6:4a:28:76:
a5:56:a7:ac:54:5e:03:f3:37:75:27:15:2c:e2:f1:
8c:38:72:67:83:ae:e8:af:b4:43:24:25:6b:c3:71:
29:15:cb:a4:52:a2:1c:9d:06:d9:78:48:7f:5b:0f:
92:2e:2d:1a:0c:7f:c4:48:84:49:58:d6:4e:b3:34:
4b:04:79:d0:62:4c:7f:5a:8c:64:4f:25:0c:b7:b2:
bd:66:8e:c8:3e:89:08:1e:34:d7:bc:3f:a3:40:7e:
89:92:1e:35:49:97:2f:00:90:46:36:69:a8:2c:48:
a7:30:58:aa:bb:ab:f4:c5:29:47:06:73:d6:c7:1e:
dd:a1:f9:8e:e0:52:67:28:a9:af:a0:ab:64:bc:ae:
79:ca:28:d4:56:8a:3e:fd:2d:0f:66:ec:3b:59:99:
16:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E5:7E:EA:BE:A2:77:EB:7D:86:B4:29:70:38:63:BF:71:29:79:70
X509v3 Authority Key Identifier:
keyid:60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4e:ad:8d:04:6d:e4:f1:2d:20:a0:fc:8c:8f:1e:fb:a8:a5:
f5:1d:7f:53:85:a9:c2:84:96:f0:34:e2:2f:ef:b1:94:e4:49:
82:98:64:4e:f7:df:84:41:e2:af:c8:35:13:35:2c:1d:f5:26:
01:65:b7:c6:73:65:f1:90:6c:6f:2b:62:58:7a:aa:a6:45:97:
dd:07:f9:19:a8:4e:80:cf:63:9f:1d:a1:f4:60:06:1f:92:be:
e7:f7:68:22:15:8b:00:d2:2e:a4:19:05:e4:8e:db:a9:b6:ce:
c2:2c:43:f6:ef:2f:43:ac:eb:30:cf:ef:84:4d:92:09:07:59:
17:82:e2:08:b7:d4:f4:e4:f3:58:d8:a5:08:6e:69:e4:92:32:
01:5e:7b:b9:2c:2c:d9:85:5f:4c:d4:e0:79:83:2d:78:79:c9:
07:2f:dd:0e:fa:f7:92:b3:da:c2:dd:53:0f:02:73:73:c2:da:
a4:45:8a:dd:65:72:e5:41:47:5b:8c:b8:d4:9d:41:cd:b9:c8:
32:69:53:d6:4c:5b:4b:a3:41:88:6f:9e:27:fb:43:dc:86:05:
dc:35:61:b4:7f:08:ce:ee:d0:fd:7b:0d:a5:db:ca:1c:08:03:
9a:33:a4:26:24:30:51:cc:03:bd:fe:d2:44:40:ee:96:bf:53:
8c:bf:b8:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BMd3X9vM5fDGgEL7zB5WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMjliMWEwODEzOWUxZGE5NjQzZGQwNDI0ZjVjZDY0NTA3
ZTM3NzEwHhcNMjUwMTMxMTEwMDE3WhcNMjUwMjAxMTEwMDE3WjAzMTEwLwYDVQQD
EyhhMWU1N2VlYWJlYTI3N2ViN2Q4NmI0Mjk3MDM4NjNiZjcxMjk3OTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDqv9J+8+uWhUsw3HdNKO9IGCe2C
bNd2Zy4o5sfasnmKzZpoUCsAG6wHDpPjaGeOi7t6ileBjU7RWtMsc3DnPtb4qMcw
zMzmbX/cTo9s3/U9NkPlvuk6xysg+2tTIBTTsxTOieZKKHalVqesVF4D8zd1JxUs
4vGMOHJng67or7RDJCVrw3EpFcukUqIcnQbZeEh/Ww+SLi0aDH/ESIRJWNZOszRL
BHnQYkx/WoxkTyUMt7K9Zo7IPokIHjTXvD+jQH6Jkh41SZcvAJBGNmmoLEinMFiq
u6v0xSlHBnPWxx7dofmO4FJnKKmvoKtkvK55yijUVoo+/S0PZuw7WZkWUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHlfuq+onfrfYa0KXA4Y79xKXlwMB8GA1UdIwQY
MBaAFGApsaCBOeHalkPdBCT1zWRQfjdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZDU2ZjYtOTQxMC00ODQ0LWE0NzIt
NTYxNTUxM2ZkY2Y0LzEvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zZDU2ZjYtOTQxMC00ODQ0LWE0NzItNTYxNTUxM2ZkY2Y0
LzEvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmk6tjQRt
5PEtIKD8jI8e+6il9R1/U4WpwoSW8DTiL++xlORJgphkTvffhEHir8g1EzUsHfUm
AWW3xnNl8ZBsbytiWHqqpkWX3Qf5GahOgM9jnx2h9GAGH5K+5/doIhWLANIupBkF
5I7bqbbOwixD9u8vQ6zrMM/vhE2SCQdZF4LiCLfU9OTzWNilCG5p5JIyAV57uSws
2YVfTNTgeYMteHnJBy/dDvr3krPawt1TDwJzc8LapEWK3WVy5UFHW4y41J1BzbnI
MmlT1kxbS6NBiG+eJ/tD3IYF3DVhtH8Izu7Q/XsNpdvKHAgDmjOkJiQwUcwDvf7S
REDulr9TjL+4sg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:49:42 2025 by rpki-client