Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
File: y_sCefzSOo5YPzRauQRyjm0OTGI.mft (raw, json)
Hash identifier: wtlpqGSBcoTlal+0nOgyMgpK92L+3soqu0YJYwxO2Bs=
Subject key identifier: 85:E9:D3:96:5C:CC:F2:AF:59:A7:82:D7:1A:B7:39:37:0E:5E:77:B0
Authority key identifier: CB:FB:02:79:FC:D2:3A:8E:58:3F:34:5A:B9:04:72:8E:6D:0E:4C:62
Certificate issuer: /CN=cbfb0279fcd23a8e583f345ab904728e6d0e4c62
Certificate serial: 0194BCAA029662E0DF88C4BBEEB2BC24E2B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
Manifest number: 0454
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: y_sCefzSOo5YPzRauQRyjm0OTGI.crl (hash: PpHI5JGGji787RN6ihyQxjZ2OZYf2ypSAayT6/rbros=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:02:96:62:e0:df:88:c4:bb:ee:b2:bc:24:e2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbfb0279fcd23a8e583f345ab904728e6d0e4c62
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=85e9d3965cccf2af59a782d71ab739370e5e77b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:03:1d:33:1a:6e:8e:c4:aa:95:65:af:76:8c:
f5:09:bb:66:45:72:ac:9d:e6:ef:e8:07:53:77:78:
7d:1d:e6:c2:87:d8:79:a4:b9:86:1d:89:1a:e1:81:
f9:7c:7e:66:21:8c:aa:11:62:45:44:ec:f1:37:2b:
42:12:50:1a:4e:c1:af:ad:a5:31:5e:5d:58:c0:f8:
61:db:9e:ba:1b:b9:8f:7a:51:db:0a:7e:04:80:77:
d8:1f:57:66:8e:67:a1:12:70:c3:c3:61:d4:89:33:
56:5b:cc:2a:f9:9f:63:b1:a2:ed:06:2e:61:7a:73:
e6:df:1c:70:d8:e1:53:93:22:5a:91:e2:48:4b:43:
76:d7:d3:2d:67:d5:fc:5b:b7:42:70:fa:a0:d6:57:
8d:ad:ac:00:eb:d0:e4:b9:65:6a:e4:8d:dc:b5:e2:
55:1a:bd:8f:7e:22:a9:75:93:07:f4:72:06:65:cc:
86:9c:38:27:24:01:1e:84:f1:8c:74:7a:a1:17:55:
c3:e2:ae:b0:e5:11:af:98:b1:96:f9:7d:ba:67:cb:
16:1f:39:7d:84:6b:1c:15:4e:c6:36:ad:39:6e:0f:
4e:f8:48:dc:4b:2e:3d:e7:99:62:94:c7:21:29:a2:
41:3a:1a:b5:a7:29:8a:86:42:aa:70:46:e7:05:06:
63:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E9:D3:96:5C:CC:F2:AF:59:A7:82:D7:1A:B7:39:37:0E:5E:77:B0
X509v3 Authority Key Identifier:
keyid:CB:FB:02:79:FC:D2:3A:8E:58:3F:34:5A:B9:04:72:8E:6D:0E:4C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:3b:e9:08:04:b2:32:87:13:22:1d:1e:b6:9c:91:49:7e:ee:
6a:fc:f7:77:44:9c:15:82:68:3f:23:58:6f:c8:20:71:9a:ba:
d0:7f:73:52:e6:4a:42:8e:dc:70:b1:a1:02:a3:d5:d9:d5:9a:
f7:f9:da:13:cb:47:7f:e0:c8:05:15:fe:80:70:46:ab:46:df:
57:60:7c:f8:04:9e:97:a5:76:15:98:94:66:4a:50:64:68:fc:
5e:8f:79:43:5f:18:20:58:52:40:4c:a3:c8:fb:7c:0c:63:06:
b1:74:d5:71:0c:06:8a:94:6d:e8:af:fa:28:bc:75:6c:33:3c:
8d:22:0f:cd:71:9b:95:57:0e:7e:69:c9:e8:59:54:03:fc:9b:
65:3f:29:b1:9c:14:ed:5b:92:90:ff:ac:00:a2:23:24:77:b8:
7d:e3:38:ef:79:95:6b:1f:86:db:b8:0a:f5:75:66:1a:4b:4f:
d4:d0:ef:d0:5a:8e:06:91:16:e3:0e:33:26:af:34:5e:a6:e4:
da:7f:ba:27:4c:1a:bb:4c:75:95:fc:fc:77:4a:ed:3d:d4:91:
da:fb:c7:8f:95:4f:fc:7d:96:88:23:10:38:c9:db:6f:b0:a5:
d1:26:93:30:ca:68:35:3e:94:ec:7c:98:f8:6a:31:9a:79:ef:
f4:25:58:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qgKWYuDfiMS77rK8JOK2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZmIwMjc5ZmNkMjNhOGU1ODNmMzQ1YWI5MDQ3MjhlNmQw
ZTRjNjIwHhcNMjUwMTMxMTQwMDQ1WhcNMjUwMjAxMTQwMDQ1WjAzMTEwLwYDVQQD
Eyg4NWU5ZDM5NjVjY2NmMmFmNTlhNzgyZDcxYWI3MzkzNzBlNWU3N2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAMdMxpujsSqlWWvdoz1CbtmRXKs
nebv6AdTd3h9HebCh9h5pLmGHYka4YH5fH5mIYyqEWJFROzxNytCElAaTsGvraUx
Xl1YwPhh2566G7mPelHbCn4EgHfYH1dmjmehEnDDw2HUiTNWW8wq+Z9jsaLtBi5h
enPm3xxw2OFTkyJakeJIS0N219MtZ9X8W7dCcPqg1leNrawA69DkuWVq5I3cteJV
Gr2PfiKpdZMH9HIGZcyGnDgnJAEehPGMdHqhF1XD4q6w5RGvmLGW+X26Z8sWHzl9
hGscFU7GNq05bg9O+EjcSy4955lilMchKaJBOhq1pymKhkKqcEbnBQZjeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXp05ZczPKvWaeC1xq3OTcOXnewMB8GA1UdIwQY
MBaAFMv7Ann80jqOWD80WrkEco5tDkxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveV9zQ2VmelNPbzVZUHpSYXVRUnlqbTBPVEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85Njc3YjEtZDQzZS00NjZlLTliZjgt
ODBmODIwMjcxNGRhLzEveV9zQ2VmelNPbzVZUHpSYXVRUnlqbTBPVEdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi85Njc3YjEtZDQzZS00NjZlLTliZjgtODBmODIwMjcxNGRh
LzEveV9zQ2VmelNPbzVZUHpSYXVRUnlqbTBPVEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyzvpCASy
MocTIh0etpyRSX7uavz3d0ScFYJoPyNYb8ggcZq60H9zUuZKQo7ccLGhAqPV2dWa
9/naE8tHf+DIBRX+gHBGq0bfV2B8+ASel6V2FZiUZkpQZGj8Xo95Q18YIFhSQEyj
yPt8DGMGsXTVcQwGipRt6K/6KLx1bDM8jSIPzXGblVcOfmnJ6FlUA/ybZT8psZwU
7VuSkP+sAKIjJHe4feM473mVax+G27gK9XVmGktP1NDv0FqOBpEW4w4zJq80Xqbk
2n+6J0wau0x1lfz8d0rtPdSR2vvHj5VP/H2WiCMQOMnbb7Cl0SaTMMpoNT6U7HyY
+Goxmnnv9CVYTA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:27:38 2025 by rpki-client