Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
File: y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft (raw, json)
Hash identifier: LmwG+sTCDzOVFStzXiUtiZ4mq/Aql0zd93XACOsZY8k=
Subject key identifier: 0F:32:5C:00:CB:F8:2C:53:92:B9:13:0D:A7:5A:CE:85:38:99:53:D5
Authority key identifier: CB:4E:D8:8C:5B:FB:C2:B9:56:FC:BB:30:D1:4E:83:2B:DB:B9:61:0D
Certificate issuer: /CN=cb4ed88c5bfbc2b956fcbb30d14e832bdbb9610d
Certificate serial: 0194BCAA3858E6D034BEA7B5B117DA71FB23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
Manifest number: 0252
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: fOUkBLPvgdmMw3qOCphjRq4t0eY.roa (hash: r4VQRSy7Gza9d4nweiTC6bFhiBWBCqInaEx5ZdTsmu8=)
2: y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl (hash: FZTJunJR+Pn2EIkTgwIiqwtvWuum2j/NEs6k6yV1n3U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:38:58:e6:d0:34:be:a7:b5:b1:17:da:71:fb:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4ed88c5bfbc2b956fcbb30d14e832bdbb9610d
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=0f325c00cbf82c5392b9130da75ace85389953d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:80:29:87:fb:67:13:2a:98:7c:90:78:66:
4e:9a:26:0f:85:10:6f:30:b0:fb:35:71:e5:ea:30:
7b:6a:30:8c:56:ac:89:c5:c3:35:19:ac:46:71:8b:
28:35:45:e1:4c:45:b3:25:99:59:a1:b9:25:25:15:
7b:69:b4:d1:a8:5e:97:04:a1:2f:e1:97:bd:3f:03:
7a:97:fa:70:74:37:64:53:8c:ca:38:35:c6:7c:b5:
4e:43:8f:70:89:d8:1d:ac:bd:59:bb:4b:97:b5:fc:
b7:1e:ac:99:90:1b:a2:a2:a0:8c:ab:c7:9e:18:29:
06:45:e4:50:ed:32:0c:65:93:bd:5c:b3:4e:72:55:
97:4f:15:1b:b1:07:e4:29:88:40:76:04:02:9c:51:
3e:24:ab:ba:66:4c:56:eb:97:2d:ca:0d:a9:af:b3:
70:de:c4:f6:6d:78:5b:17:62:2e:72:94:35:b8:a6:
ec:58:ec:b4:bb:9c:41:c9:62:4f:da:ec:a0:1d:66:
8b:d5:b5:42:43:c1:fb:e2:2b:08:e6:97:d5:24:6b:
cf:70:cc:52:d6:cb:37:25:dd:15:58:13:ce:a0:7c:
24:ae:72:e3:06:8c:b7:bc:d4:b0:cc:86:02:cd:5b:
2b:fa:22:bb:b5:e3:2c:c6:2e:94:f5:97:a2:fc:07:
63:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:32:5C:00:CB:F8:2C:53:92:B9:13:0D:A7:5A:CE:85:38:99:53:D5
X509v3 Authority Key Identifier:
keyid:CB:4E:D8:8C:5B:FB:C2:B9:56:FC:BB:30:D1:4E:83:2B:DB:B9:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:79:50:af:a7:8a:a1:5a:54:07:3d:aa:3a:b4:09:d8:39:0b:
ad:11:bb:7c:bf:df:1a:60:d9:a5:8b:78:e6:73:3c:5a:93:d8:
16:23:07:74:91:77:4f:26:37:d8:f4:5e:65:d4:00:44:26:15:
77:93:1a:bd:18:a1:95:ae:65:6c:fd:3e:f7:d7:23:17:fe:bc:
94:68:c9:08:1d:9f:68:c2:e7:59:97:cb:03:cb:8f:67:7a:d3:
f2:44:61:ad:6c:c0:33:e8:df:c4:5a:25:d8:9f:42:86:10:82:
67:c9:b7:b7:0a:16:0c:71:49:c8:ce:ea:74:cd:d8:34:06:48:
97:c0:e3:83:51:14:db:3d:50:87:71:d9:18:73:60:e7:a2:ba:
10:40:60:f5:4d:f8:d1:0e:8f:d2:ef:28:77:a4:6a:78:0a:f4:
18:51:7a:1f:ad:4b:4d:7e:c0:23:74:dd:bd:1b:51:49:32:5c:
6e:61:ea:7b:1f:51:b3:c8:73:55:3d:4a:38:5c:5a:0a:0d:43:
5b:ab:7c:3e:b6:b4:0f:c6:64:c6:3e:32:44:66:0e:d7:1c:d6:
39:c7:5c:a2:6f:51:79:55:fd:eb:2e:c2:da:36:b5:63:40:7f:
81:4e:e0:38:6e:ef:3c:ed:4b:0e:51:00:e2:f0:2b:21:35:21:
a0:f9:f6:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qjhY5tA0vqe1sRfacfsjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNGVkODhjNWJmYmMyYjk1NmZjYmIzMGQxNGU4MzJiZGJi
OTYxMGQwHhcNMjUwMTMxMTQwMDU5WhcNMjUwMjAxMTQwMDU5WjAzMTEwLwYDVQQD
EygwZjMyNWMwMGNiZjgyYzUzOTJiOTEzMGRhNzVhY2U4NTM4OTk1M2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU2AKYf7ZxMqmHyQeGZOmiYPhRBv
MLD7NXHl6jB7ajCMVqyJxcM1GaxGcYsoNUXhTEWzJZlZobklJRV7abTRqF6XBKEv
4Ze9PwN6l/pwdDdkU4zKODXGfLVOQ49widgdrL1Zu0uXtfy3HqyZkBuioqCMq8ee
GCkGReRQ7TIMZZO9XLNOclWXTxUbsQfkKYhAdgQCnFE+JKu6ZkxW65ctyg2pr7Nw
3sT2bXhbF2IucpQ1uKbsWOy0u5xByWJP2uygHWaL1bVCQ8H74isI5pfVJGvPcMxS
1ss3Jd0VWBPOoHwkrnLjBoy3vNSwzIYCzVsr+iK7teMsxi6U9Zei/AdjEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8yXADL+CxTkrkTDadazoU4mVPVMB8GA1UdIwQY
MBaAFMtO2Ixb+8K5Vvy7MNFOgyvbuWENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTA3WWpGdjd3cmxXX0xzdzBVNkRLOXU1WVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9iMzA5MTYtMjEyNS00YTRmLTlhMzYt
MjY0MTk3NTQ0M2ZmLzEveTA3WWpGdjd3cmxXX0xzdzBVNkRLOXU1WVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9iMzA5MTYtMjEyNS00YTRmLTlhMzYtMjY0MTk3NTQ0M2Zm
LzEveTA3WWpGdjd3cmxXX0xzdzBVNkRLOXU1WVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnlQr6eK
oVpUBz2qOrQJ2DkLrRG7fL/fGmDZpYt45nM8WpPYFiMHdJF3TyY32PReZdQARCYV
d5MavRihla5lbP0+99cjF/68lGjJCB2faMLnWZfLA8uPZ3rT8kRhrWzAM+jfxFol
2J9ChhCCZ8m3twoWDHFJyM7qdM3YNAZIl8Djg1EU2z1Qh3HZGHNg56K6EEBg9U34
0Q6P0u8od6RqeAr0GFF6H61LTX7AI3TdvRtRSTJcbmHqex9Rs8hzVT1KOFxaCg1D
W6t8Pra0D8Zkxj4yRGYO1xzWOcdcom9ReVX96y7C2ja1Y0B/gU7gOG7vPO1LDlEA
4vArITUhoPn2NA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:32:25 2025 by rpki-client