Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
File: yciBJHytvL9SqirXYsx0VKeocm4.mft (raw, json)
Hash identifier: L6fj0UIxO2Y5jHezeUmaGmDK+6NxN62U7hrhN3sPBE0=
Subject key identifier: 63:5E:6A:15:47:7D:CF:C7:AD:ED:61:0F:91:56:AC:77:42:D6:B3:1D
Authority key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
Certificate issuer: /CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Certificate serial: 0194BCA9B658110ACB11FB6734B3E05610AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
Manifest number: 12F1
Signing time: Fri 31 Jan 2025 14:00:26 +0000
Manifest this update: Fri 31 Jan 2025 14:00:26 +0000
Manifest next update: Sat 01 Feb 2025 14:00:26 +0000
Files and hashes: 1: jOZRDN_BFHgGfDMvwJ0jkJTVBko.roa (hash: v7urVrLJEvfyeck+EYvOP/ZepjN99wS4T6ZKWFITJzs=)
2: yciBJHytvL9SqirXYsx0VKeocm4.crl (hash: Fi8YHzonOrvLhYx1flyBvhmuT8prjWWOS7brKG+Qs0s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b6:58:11:0a:cb:11:fb:67:34:b3:e0:56:10:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Validity
Not Before: Jan 31 14:00:26 2025 GMT
Not After : Feb 1 14:00:26 2025 GMT
Subject: CN=635e6a15477dcfc7aded610f9156ac7742d6b31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:94:84:87:20:ff:26:02:ee:2a:6b:b6:54:
67:de:03:f5:8f:27:61:40:d9:f8:85:e6:1e:0d:14:
35:38:40:58:62:ed:01:2d:93:68:38:6b:7d:f9:b9:
99:c9:48:62:aa:72:4b:82:d2:0f:84:c8:d6:ca:f1:
64:e8:b4:20:a9:17:15:1e:44:67:55:a2:01:26:1a:
31:62:d0:96:fb:af:43:d6:a9:80:bb:0b:2a:f7:3e:
bd:2f:bd:d3:38:51:e8:5a:db:32:f3:48:51:74:e6:
87:7d:d7:57:df:61:a8:43:ff:fd:44:7f:71:94:90:
50:59:55:8e:7a:43:ac:8d:e2:60:16:53:81:82:a5:
5d:6c:f2:37:6b:ba:70:68:86:3b:eb:0c:0e:3b:df:
93:de:f2:36:43:df:90:b0:e2:a9:36:40:b9:f5:c5:
e1:18:a6:4f:72:6f:d9:74:f4:97:42:e6:70:b1:ac:
66:0f:3d:69:2d:d8:12:6d:f0:7c:57:f8:96:43:c0:
f7:e4:e3:b8:f0:47:a7:40:ab:21:97:15:c9:ca:cc:
04:0f:69:81:8d:49:27:e8:37:45:49:49:8b:b1:e8:
e9:bb:03:bc:8a:25:1c:cc:fa:92:15:f4:c2:d8:cf:
4e:ef:03:98:dd:9c:0a:31:91:63:ae:0d:c6:95:01:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5E:6A:15:47:7D:CF:C7:AD:ED:61:0F:91:56:AC:77:42:D6:B3:1D
X509v3 Authority Key Identifier:
keyid:C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:66:3d:23:0e:b4:70:13:27:5f:2a:a7:b7:a6:0d:a2:ab:1c:
fe:f1:9e:b3:13:75:05:e2:25:a0:0f:91:66:bb:32:90:06:02:
0d:3b:76:47:fa:3b:31:26:36:46:f2:e4:e7:3b:27:62:44:4c:
62:88:3c:20:6a:63:54:76:d1:b2:5f:04:90:1f:85:ab:e8:5f:
a3:52:0a:08:e5:53:57:8e:09:0b:28:3a:a7:14:2c:78:df:3b:
7d:01:0c:84:63:da:27:a0:5c:fd:c7:3f:1d:50:63:94:aa:a7:
5f:37:f5:9c:81:50:70:23:60:42:51:c9:66:39:90:73:f6:4d:
4a:41:9e:82:9d:88:0b:2b:69:e1:e3:ee:6f:e9:72:d2:7f:17:
22:77:fb:b4:cd:47:be:cf:06:f3:30:2a:ed:4e:4b:06:df:ae:
5b:3a:49:cf:b6:ef:98:4a:c2:2e:39:30:82:53:ee:ba:aa:78:
6b:3f:19:8f:a5:c3:08:42:f5:87:a4:16:12:f9:58:52:de:30:
f4:bf:12:59:67:0a:0f:d5:26:33:32:4d:4d:85:7f:ef:f7:82:
e1:5f:99:7b:ca:d9:98:20:ad:35:3e:bb:8e:5c:ce:2d:29:a3:
3d:82:6f:0a:82:36:bc:9e:1a:a6:f4:af:10:4e:52:6d:56:75:
22:3f:49:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qbZYEQrLEftnNLPgVhCsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5Yzg4MTI0N2NhZGJjYmY1MmFhMmFkNzYyY2M3NDU0YTdh
ODcyNmUwHhcNMjUwMTMxMTQwMDI2WhcNMjUwMjAxMTQwMDI2WjAzMTEwLwYDVQQD
Eyg2MzVlNmExNTQ3N2RjZmM3YWRlZDYxMGY5MTU2YWM3NzQyZDZiMzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyWUhIcg/yYC7iprtlRn3gP1jydh
QNn4heYeDRQ1OEBYYu0BLZNoOGt9+bmZyUhiqnJLgtIPhMjWyvFk6LQgqRcVHkRn
VaIBJhoxYtCW+69D1qmAuwsq9z69L73TOFHoWtsy80hRdOaHfddX32GoQ//9RH9x
lJBQWVWOekOsjeJgFlOBgqVdbPI3a7pwaIY76wwOO9+T3vI2Q9+QsOKpNkC59cXh
GKZPcm/ZdPSXQuZwsaxmDz1pLdgSbfB8V/iWQ8D35OO48EenQKshlxXJyswED2mB
jUkn6DdFSUmLsejpuwO8iiUczPqSFfTC2M9O7wOY3ZwKMZFjrg3GlQGHIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNeahVHfc/Hre1hD5FWrHdC1rMdMB8GA1UdIwQY
MBaAFMnIgSR8rby/Uqoq12LMdFSnqHJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWNpQkpIeXR2TDlTcWlyWFlzeDBWS2VvY200LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZDZiNTMtOTVhOS00ZDYwLWI0NmQt
N2VmZTkwNWZmMjkxLzEveWNpQkpIeXR2TDlTcWlyWFlzeDBWS2VvY200Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZDZiNTMtOTVhOS00ZDYwLWI0NmQtN2VmZTkwNWZmMjkx
LzEveWNpQkpIeXR2TDlTcWlyWFlzeDBWS2VvY200LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmY9Iw60
cBMnXyqnt6YNoqsc/vGesxN1BeIloA+RZrsykAYCDTt2R/o7MSY2RvLk5zsnYkRM
Yog8IGpjVHbRsl8EkB+Fq+hfo1IKCOVTV44JCyg6pxQseN87fQEMhGPaJ6Bc/cc/
HVBjlKqnXzf1nIFQcCNgQlHJZjmQc/ZNSkGegp2ICytp4ePub+ly0n8XInf7tM1H
vs8G8zAq7U5LBt+uWzpJz7bvmErCLjkwglPuuqp4az8Zj6XDCEL1h6QWEvlYUt4w
9L8SWWcKD9UmMzJNTYV/7/eC4V+Ze8rZmCCtNT67jlzOLSmjPYJvCoI2vJ4apvSv
EE5SbVZ1Ij9Jcg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:18 2025 by rpki-client