Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
File: y1eZ2NBfSgIAEdyoAxdivqASJV0.mft (raw, json)
Hash identifier: 2BIx01XhiEg/+RewMJzbo8EZtdmxrS41mj0Y+NqO3b8=
Subject key identifier: B3:2A:1B:07:A7:21:2E:2E:BE:24:0E:15:E6:7F:1A:3B:3F:E2:F2:1E
Authority key identifier: CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D
Certificate issuer: /CN=cb5799d8d05f4a020011dca8031762bea012255d
Certificate serial: 0194BC3BE87A391894FAC47D6BA4A7F52345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
Manifest number: 0996
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: 1FhxmjQY59YAJAMVhG_T6zF5XSA.roa (hash: LhK5E0yQbIvlUPrgw8D5iXHjua3tvso8AKzY9lfo4J0=)
2: RNQvE2oEKPo_zVElIo7XyWY9pN4.roa (hash: cHPYWyTjBN1Ib/KsumMhkuYgXusEijJa/SgckNxXiqc=)
3: y1eZ2NBfSgIAEdyoAxdivqASJV0.crl (hash: dDMdFBFAXlSj81nHbIJLu8ViETZoOvi/a+yRr3TPBgo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e8:7a:39:18:94:fa:c4:7d:6b:a4:a7:f5:23:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5799d8d05f4a020011dca8031762bea012255d
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=b32a1b07a7212e2ebe240e15e67f1a3b3fe2f21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:c3:79:39:e3:9e:5a:8e:05:5d:68:42:0b:
8d:01:9e:42:72:c6:3b:80:8e:7b:65:26:23:44:8c:
f3:17:19:51:10:00:d4:26:96:c6:f5:b7:0a:7c:06:
77:ca:04:83:23:e3:9f:ac:3d:ec:5f:c0:3c:36:62:
2b:ee:e6:88:c2:1f:5e:fb:b8:b3:69:a7:65:93:ed:
d6:da:ea:96:10:71:ad:d2:86:6f:78:6d:2a:2e:48:
e0:8d:8d:d2:d1:5c:ad:bf:19:6f:dc:82:38:70:1c:
8f:8b:9f:40:ba:5f:32:72:4c:bc:7b:24:47:8c:ba:
ed:46:73:85:4b:72:27:4c:04:22:75:d2:c0:48:b8:
c2:ba:26:1c:56:a7:81:e9:cf:c5:8a:49:9e:16:96:
21:27:81:a9:d3:f3:14:45:43:ae:85:6e:5c:b9:1c:
db:4e:15:6f:f1:1c:dc:68:e5:52:85:62:75:44:1a:
64:58:9b:47:79:ae:a6:03:41:a8:c9:ed:73:66:44:
87:20:19:f6:01:89:1b:91:a8:f5:19:1b:71:fa:50:
de:4d:06:88:36:5d:04:9a:a3:70:75:a9:71:af:30:
3a:f5:1b:0c:75:e8:eb:17:13:b1:ac:38:52:cc:4a:
58:bc:cb:ac:83:41:da:b5:e6:34:74:91:d3:19:23:
d3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2A:1B:07:A7:21:2E:2E:BE:24:0E:15:E6:7F:1A:3B:3F:E2:F2:1E
X509v3 Authority Key Identifier:
keyid:CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:91:39:d0:80:60:b6:ac:b7:29:89:93:76:25:14:b3:ea:be:
03:81:35:ba:ea:a5:a4:d8:0b:02:c6:9f:df:a5:d8:73:fd:67:
64:ff:ce:58:21:93:19:34:d5:76:3c:3e:b1:b5:b3:6f:cf:78:
5f:b9:00:e0:4b:36:cd:70:ce:a7:2f:c5:97:ef:7f:9f:48:06:
b3:c4:74:e0:e7:0a:48:76:3f:2e:ff:b2:e0:b1:93:a3:cc:43:
03:70:18:be:a5:08:e1:28:e5:50:7a:ad:6d:cd:2a:72:a4:bc:
2b:aa:0e:e7:d0:46:63:3a:5c:12:07:72:08:3d:1b:f4:1d:63:
59:9a:47:9c:6d:b0:5e:e9:23:ef:78:1b:c1:e3:20:1a:8a:cb:
14:5b:fa:8a:82:7a:9f:6c:56:f1:27:d4:15:e2:55:ed:0f:d4:
35:ee:ad:19:c8:3c:03:8d:8e:d3:56:f3:91:d8:cf:ed:57:dc:
d2:f2:69:99:47:5b:34:8d:f0:ac:70:0a:6b:73:2e:4d:ea:6a:
bc:d2:1f:e4:be:eb:84:a7:e0:69:5e:55:4f:2a:3a:07:21:4a:
5e:fb:cb:5f:61:4c:24:2a:d9:1e:ed:d3:dc:fd:ed:bb:10:28:
90:f7:8e:73:95:2d:42:17:85:58:3b:a3:f0:89:c0:9e:19:cf:
89:cf:f1:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O+h6ORiU+sR9a6Sn9SNFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNTc5OWQ4ZDA1ZjRhMDIwMDExZGNhODAzMTc2MmJlYTAx
MjI1NWQwHhcNMjUwMTMxMTIwMDMwWhcNMjUwMjAxMTIwMDMwWjAzMTEwLwYDVQQD
EyhiMzJhMWIwN2E3MjEyZTJlYmUyNDBlMTVlNjdmMWEzYjNmZTJmMjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDTDeTnjnlqOBV1oQguNAZ5CcsY7
gI57ZSYjRIzzFxlREADUJpbG9bcKfAZ3ygSDI+OfrD3sX8A8NmIr7uaIwh9e+7iz
aadlk+3W2uqWEHGt0oZveG0qLkjgjY3S0Vytvxlv3II4cByPi59Aul8ycky8eyRH
jLrtRnOFS3InTAQiddLASLjCuiYcVqeB6c/FikmeFpYhJ4Gp0/MURUOuhW5cuRzb
ThVv8RzcaOVShWJ1RBpkWJtHea6mA0Goye1zZkSHIBn2AYkbkaj1GRtx+lDeTQaI
Nl0EmqNwdalxrzA69RsMdejrFxOxrDhSzEpYvMusg0HateY0dJHTGSPTIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMqGwenIS4uviQOFeZ/Gjs/4vIeMB8GA1UdIwQY
MBaAFMtXmdjQX0oCABHcqAMXYr6gEiVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTFlWjJOQmZTZ0lBRWR5b0F4ZGl2cUFTSlYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9jNzgwMjAtZmEzMi00OTg4LTllMTQt
NWM2MDJmZGU5NjNiLzEveTFlWjJOQmZTZ0lBRWR5b0F4ZGl2cUFTSlYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9jNzgwMjAtZmEzMi00OTg4LTllMTQtNWM2MDJmZGU5NjNi
LzEveTFlWjJOQmZTZ0lBRWR5b0F4ZGl2cUFTSlYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5E50IBg
tqy3KYmTdiUUs+q+A4E1uuqlpNgLAsaf36XYc/1nZP/OWCGTGTTVdjw+sbWzb894
X7kA4Es2zXDOpy/Fl+9/n0gGs8R04OcKSHY/Lv+y4LGTo8xDA3AYvqUI4SjlUHqt
bc0qcqS8K6oO59BGYzpcEgdyCD0b9B1jWZpHnG2wXukj73gbweMgGorLFFv6ioJ6
n2xW8SfUFeJV7Q/UNe6tGcg8A42O01bzkdjP7Vfc0vJpmUdbNI3wrHAKa3MuTepq
vNIf5L7rhKfgaV5VTyo6ByFKXvvLX2FMJCrZHu3T3P3tuxAokPeOc5UtQheFWDuj
8InAnhnPic/xfw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:20 2025 by rpki-client