Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.mft
File: hYYCc-snGSK59-yPSlkQFjVtcys.mft (raw, json)
Hash identifier: IgBULKjpNG9V4iTm5bh//uSts3GrtPCuPx30JEwq8jY=
Subject key identifier: 42:62:F5:6D:58:9C:89:C8:74:0C:39:8C:46:9A:F8:F7:71:FF:76:93
Authority key identifier: 85:86:02:73:EB:27:19:22:B9:F7:EC:8F:4A:59:10:16:35:6D:73:2B
Certificate issuer: /CN=85860273eb271922b9f7ec8f4a591016356d732b
Certificate serial: 0194BC0539084EA7A29F9E5A120F63B30750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYYCc-snGSK59-yPSlkQFjVtcys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.mft
Manifest number: 0949
Signing time: Fri 31 Jan 2025 11:00:46 +0000
Manifest this update: Fri 31 Jan 2025 11:00:46 +0000
Manifest next update: Sat 01 Feb 2025 11:00:46 +0000
Files and hashes: 1: hYYCc-snGSK59-yPSlkQFjVtcys.crl (hash: 13FN1xu5Uu6JOZtCRR94T6e5tLpBd8ZjEy/pJu7Kk18=)
2: mddF3t4TzWyM7kqwlkCBOdlwjiA.roa (hash: gzOYKSEvkTGbu+QJJsi1Jgy+e4XYPYdTDnUqdEsobA8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:39:08:4e:a7:a2:9f:9e:5a:12:0f:63:b3:07:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85860273eb271922b9f7ec8f4a591016356d732b
Validity
Not Before: Jan 31 11:00:46 2025 GMT
Not After : Feb 1 11:00:46 2025 GMT
Subject: CN=4262f56d589c89c8740c398c469af8f771ff7693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:cb:c7:7c:2b:9d:0b:fe:e6:1a:23:88:6a:61:
e2:86:86:a4:a1:01:5f:e7:db:02:dd:18:4f:3f:33:
46:b9:1f:4c:1c:f7:d4:53:84:6b:f9:a0:07:8e:48:
2f:75:f1:3a:d0:b8:9c:71:f3:06:a9:48:21:98:bf:
22:9a:d9:ef:af:28:67:0f:3b:29:99:f4:fd:bf:15:
8c:53:65:c1:fc:92:c7:88:5f:50:7c:37:2d:01:48:
78:32:c6:b3:4b:e1:4e:0e:bf:64:56:86:ff:9b:91:
9b:64:ea:8e:6d:a4:98:b9:2d:fc:3f:3a:e7:11:a0:
92:a3:d7:84:c5:d7:18:a7:94:bc:45:c3:61:3e:8c:
7c:04:00:20:22:3b:09:04:84:7d:39:0e:c5:3a:5f:
5d:f0:f1:b9:64:4f:10:32:a9:91:37:fe:6e:39:1f:
b6:c1:10:5e:00:e7:e1:d9:1f:ea:0a:33:14:2b:38:
14:a6:5a:16:4c:75:36:58:24:7a:b2:19:e3:c5:c7:
1f:ef:e8:0c:4b:c8:5c:31:9b:d4:4e:37:6d:a6:a7:
df:07:b8:05:55:26:f7:a8:20:76:c6:8c:12:12:65:
3b:89:da:0c:c2:e8:04:ea:ba:97:ca:29:3b:07:6c:
be:6f:5d:20:22:d3:a1:9d:75:56:3c:66:c1:b4:ec:
74:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:62:F5:6D:58:9C:89:C8:74:0C:39:8C:46:9A:F8:F7:71:FF:76:93
X509v3 Authority Key Identifier:
keyid:85:86:02:73:EB:27:19:22:B9:F7:EC:8F:4A:59:10:16:35:6D:73:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYYCc-snGSK59-yPSlkQFjVtcys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6a:aa:16:10:49:b5:21:32:cf:75:74:c8:97:f9:50:2a:fd:
a2:cf:6c:13:7a:6b:54:5b:f1:94:78:91:6d:d0:58:1e:d0:2a:
e5:1a:e3:9c:d7:4f:36:40:74:b3:63:ea:5c:13:c3:e3:c8:b5:
ce:c8:e5:e5:fb:39:1d:d2:c8:08:46:95:87:9b:b3:76:16:f2:
06:7f:06:53:79:74:37:33:bb:0e:d8:ea:35:5e:99:84:78:3f:
fe:a8:12:85:99:47:bf:d5:50:eb:b6:99:b7:c4:85:3d:17:33:
5b:0b:2f:e0:7d:a0:5d:d9:88:12:fb:68:fe:b3:9b:c9:31:ad:
89:7e:e0:9e:3b:8b:4d:91:f7:23:c3:bc:b2:26:7b:99:fa:ed:
2d:dc:3d:36:6c:9b:c4:a4:eb:02:45:d3:fc:f1:74:a8:f6:7d:
94:48:f4:6d:37:ed:f1:64:e2:12:7f:b0:25:9d:59:1a:6e:46:
fc:05:7b:24:fa:eb:bb:6e:35:fa:91:0a:85:a9:47:c6:b9:72:
3a:27:40:77:28:69:b7:9e:70:0a:70:ba:89:db:53:c3:02:6c:
10:fb:da:c8:01:0b:3b:3f:5d:41:5e:ad:6a:14:72:8c:73:09:
8f:9c:60:2f:85:5a:64:80:5c:1f:9f:ae:2d:bd:ec:ae:c0:a8:
36:9c:b4:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BTkITqein55aEg9jswdQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ODYwMjczZWIyNzE5MjJiOWY3ZWM4ZjRhNTkxMDE2MzU2
ZDczMmIwHhcNMjUwMTMxMTEwMDQ2WhcNMjUwMjAxMTEwMDQ2WjAzMTEwLwYDVQQD
Eyg0MjYyZjU2ZDU4OWM4OWM4NzQwYzM5OGM0NjlhZjhmNzcxZmY3NjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9svHfCudC/7mGiOIamHihoakoQFf
59sC3RhPPzNGuR9MHPfUU4Rr+aAHjkgvdfE60LiccfMGqUghmL8imtnvryhnDzsp
mfT9vxWMU2XB/JLHiF9QfDctAUh4MsazS+FODr9kVob/m5GbZOqObaSYuS38Pzrn
EaCSo9eExdcYp5S8RcNhPox8BAAgIjsJBIR9OQ7FOl9d8PG5ZE8QMqmRN/5uOR+2
wRBeAOfh2R/qCjMUKzgUploWTHU2WCR6shnjxccf7+gMS8hcMZvUTjdtpqffB7gF
VSb3qCB2xowSEmU7idoMwugE6rqXyik7B2y+b10gItOhnXVWPGbBtOx0xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJi9W1YnInIdAw5jEaa+Pdx/3aTMB8GA1UdIwQY
MBaAFIWGAnPrJxkiuffsj0pZEBY1bXMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFlZQ2Mtc25HU0s1OS15UFNsa1FGalZ0Y3lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wMTU3YzktMzQ4OC00ZmI4LTliNGYt
OTkwOWVlMmYzM2IyLzEvaFlZQ2Mtc25HU0s1OS15UFNsa1FGalZ0Y3lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wMTU3YzktMzQ4OC00ZmI4LTliNGYtOTkwOWVlMmYzM2Iy
LzEvaFlZQ2Mtc25HU0s1OS15UFNsa1FGalZ0Y3lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWqqFhBJ
tSEyz3V0yJf5UCr9os9sE3prVFvxlHiRbdBYHtAq5RrjnNdPNkB0s2PqXBPD48i1
zsjl5fs5HdLICEaVh5uzdhbyBn8GU3l0NzO7DtjqNV6ZhHg//qgShZlHv9VQ67aZ
t8SFPRczWwsv4H2gXdmIEvto/rObyTGtiX7gnjuLTZH3I8O8siZ7mfrtLdw9Nmyb
xKTrAkXT/PF0qPZ9lEj0bTft8WTiEn+wJZ1ZGm5G/AV7JPrru241+pEKhalHxrly
OidAdyhpt55wCnC6idtTwwJsEPvayAELOz9dQV6tahRyjHMJj5xgL4VaZIBcH5+u
Lb3srsCoNpy0Hw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:22:43 2025 by rpki-client