Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
File: YG03z4fxLyqy3vMTgMOGuCbBnWU.mft (raw, json)
Hash identifier: jUNiD2EiFZ+Q2lhsEXEjzcLE4DYxlGzwAbKuVuYc5sA=
Subject key identifier: BA:90:F6:4A:31:D3:7D:05:27:FD:52:EC:E2:63:4E:9B:50:39:FA:35
Authority key identifier: 60:6D:37:CF:87:F1:2F:2A:B2:DE:F3:13:80:C3:86:B8:26:C1:9D:65
Certificate issuer: /CN=606d37cf87f12f2ab2def31380c386b826c19d65
Certificate serial: 0194BC7320F81D074C6EE33AC9BC9805B04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YG03z4fxLyqy3vMTgMOGuCbBnWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: YG03z4fxLyqy3vMTgMOGuCbBnWU.crl (hash: HzCanLv3sXvHqqLSmZiPrOZ//+Y+Nnn124n2aXF1+7w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:20:f8:1d:07:4c:6e:e3:3a:c9:bc:98:05:b0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606d37cf87f12f2ab2def31380c386b826c19d65
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=ba90f64a31d37d0527fd52ece2634e9b5039fa35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:b7:02:3a:fa:61:67:9d:c9:7e:9e:fa:af:
48:76:03:33:3b:ce:08:f3:bb:40:36:f2:b5:22:a4:
a0:01:3a:6a:05:35:59:df:93:de:d9:f0:37:8f:96:
92:cc:6a:f4:2f:c4:e2:01:0e:56:33:c9:17:7c:51:
e2:be:3d:3f:24:e2:0a:6c:79:92:ad:d7:e0:1a:50:
8e:a9:16:2f:e4:77:28:85:71:81:89:a9:9a:22:26:
17:dc:4b:dc:a8:e8:30:77:21:6d:57:e3:aa:4f:46:
01:5b:66:01:36:72:69:00:ff:96:9b:ca:fd:2c:78:
d8:41:c0:55:f2:8d:17:f8:31:91:03:70:72:66:08:
70:75:bc:59:f9:8e:9c:74:e3:ea:84:45:9b:73:d4:
6d:f7:f0:bf:14:fe:b4:c3:de:97:d0:b1:7d:60:97:
91:bd:29:64:9d:36:04:43:45:55:bc:a0:b8:2c:c9:
a5:9f:5e:d5:43:45:bc:c6:ca:25:28:8e:8d:0e:27:
6e:8b:20:f8:b1:9f:9f:99:19:7d:56:d2:7c:e3:67:
18:f8:75:94:2a:7d:3c:f0:e0:36:a6:3c:f2:52:ef:
6f:79:be:6c:36:70:1a:0c:06:1d:a3:0a:21:ae:45:
da:7b:1d:9e:7d:fa:88:fb:e2:77:fc:2a:d8:3d:e4:
a2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:90:F6:4A:31:D3:7D:05:27:FD:52:EC:E2:63:4E:9B:50:39:FA:35
X509v3 Authority Key Identifier:
keyid:60:6D:37:CF:87:F1:2F:2A:B2:DE:F3:13:80:C3:86:B8:26:C1:9D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YG03z4fxLyqy3vMTgMOGuCbBnWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a8:27:a0:87:54:82:f3:06:85:5d:7d:4e:ba:5d:e8:80:1a:
58:6c:ef:23:0e:8e:a7:6a:43:ef:81:05:df:f7:f3:0b:35:79:
48:81:1b:9c:d8:4a:58:54:5c:aa:78:45:61:ce:56:3c:97:14:
61:74:76:42:7c:24:e0:7f:df:90:68:96:bf:c4:64:c1:e6:8a:
21:f5:73:a8:81:b4:08:8a:a6:f6:20:80:44:86:8d:6c:64:bc:
eb:ba:c5:89:01:68:74:94:8e:20:4c:83:e1:90:a7:be:77:3a:
2e:fd:74:ec:2c:60:41:de:9c:b7:f6:9d:7d:1d:76:89:49:ec:
32:c1:a6:23:c2:59:fa:11:3a:2a:21:72:8a:87:61:3c:78:5a:
5e:dc:43:c8:12:3f:79:4c:57:42:55:c0:52:26:80:23:00:7b:
5c:62:13:54:93:6a:be:03:12:d3:1c:07:33:e1:09:01:40:f2:
dc:58:1c:a4:c6:b2:e9:22:ca:08:4b:92:ac:f6:2c:05:2e:ad:
3b:01:d4:e7:0b:ca:bf:0e:dd:78:d0:51:f8:89:31:a8:2f:e0:
cf:f6:a7:8b:ef:4c:da:c7:7a:1c:3c:35:7e:73:ac:5b:a2:03:
f3:cd:cd:73:c7:b3:5e:79:71:2b:14:eb:4a:79:4c:72:35:ab:
ac:5c:89:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cyD4HQdMbuM6ybyYBbBLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNmQzN2NmODdmMTJmMmFiMmRlZjMxMzgwYzM4NmI4MjZj
MTlkNjUwHhcNMjUwMTMxMTMwMDQ5WhcNMjUwMjAxMTMwMDQ5WjAzMTEwLwYDVQQD
EyhiYTkwZjY0YTMxZDM3ZDA1MjdmZDUyZWNlMjYzNGU5YjUwMzlmYTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSe3Ajr6YWedyX6e+q9IdgMzO84I
87tANvK1IqSgATpqBTVZ35Pe2fA3j5aSzGr0L8TiAQ5WM8kXfFHivj0/JOIKbHmS
rdfgGlCOqRYv5HcohXGBiamaIiYX3EvcqOgwdyFtV+OqT0YBW2YBNnJpAP+Wm8r9
LHjYQcBV8o0X+DGRA3ByZghwdbxZ+Y6cdOPqhEWbc9Rt9/C/FP60w96X0LF9YJeR
vSlknTYEQ0VVvKC4LMmln17VQ0W8xsolKI6NDiduiyD4sZ+fmRl9VtJ842cY+HWU
Kn088OA2pjzyUu9veb5sNnAaDAYdowohrkXaex2effqI++J3/CrYPeSiZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqQ9kox030FJ/1S7OJjTptQOfo1MB8GA1UdIwQY
MBaAFGBtN8+H8S8qst7zE4DDhrgmwZ1lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUcwM3o0ZnhMeXF5M3ZNVGdNT0d1Q2JCbldVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hMjBkNmEtOTFiYS00NDJmLTg5Mjct
ZGMwMDQzZTliYjRkLzEvWUcwM3o0ZnhMeXF5M3ZNVGdNT0d1Q2JCbldVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9hMjBkNmEtOTFiYS00NDJmLTg5MjctZGMwMDQzZTliYjRk
LzEvWUcwM3o0ZnhMeXF5M3ZNVGdNT0d1Q2JCbldVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqgnoIdU
gvMGhV19Trpd6IAaWGzvIw6Op2pD74EF3/fzCzV5SIEbnNhKWFRcqnhFYc5WPJcU
YXR2Qnwk4H/fkGiWv8RkweaKIfVzqIG0CIqm9iCARIaNbGS867rFiQFodJSOIEyD
4ZCnvnc6Lv107CxgQd6ct/adfR12iUnsMsGmI8JZ+hE6KiFyiodhPHhaXtxDyBI/
eUxXQlXAUiaAIwB7XGITVJNqvgMS0xwHM+EJAUDy3FgcpMay6SLKCEuSrPYsBS6t
OwHU5wvKvw7deNBR+IkxqC/gz/ani+9M2sd6HDw1fnOsW6ID883Nc8ezXnlxKxTr
SnlMcjWrrFyJ/w==
-----END CERTIFICATE-----
Generated at Sun May 11 21:43:33 2025 by rpki-client