Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft
File: Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft (raw, json)
Hash identifier: Y4JLlxECxCKi3/2U9B1mDQzIJUhQNTOzAbKzidIq7Tg=
Subject key identifier: 76:6A:21:3E:AD:49:3B:D5:73:96:9C:46:8C:7B:83:88:FE:3C:51:2D
Authority key identifier: 63:EF:6B:DB:C4:2A:D0:6D:EF:DA:D7:26:79:41:43:46:D8:D0:48:DF
Certificate issuer: /CN=63ef6bdbc42ad06defdad72679414346d8d048df
Certificate serial: 0194BBCE5884AA4024DBCE87EEE029F0A308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 10:00:49 +0000
Manifest this update: Fri 31 Jan 2025 10:00:49 +0000
Manifest next update: Sat 01 Feb 2025 10:00:49 +0000
Files and hashes: 1: Y-9r28Qq0G3v2tcmeUFDRtjQSN8.crl (hash: dJ9WuPltEMQjhqUFDyeO5O9DidvhGjjJg268REv4V/Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:58:84:aa:40:24:db:ce:87:ee:e0:29:f0:a3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ef6bdbc42ad06defdad72679414346d8d048df
Validity
Not Before: Jan 31 10:00:49 2025 GMT
Not After : Feb 1 10:00:49 2025 GMT
Subject: CN=766a213ead493bd573969c468c7b8388fe3c512d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f5:9d:50:a3:11:90:a2:e5:be:8b:3f:a6:f8:
10:34:3b:de:8f:28:74:d9:0e:a7:a9:6b:35:09:79:
ca:c5:88:59:73:62:b1:2b:83:a1:c0:9a:9c:62:7c:
94:db:7d:a0:60:94:99:44:3e:16:8f:4f:b8:97:86:
17:ae:19:4d:6f:54:3a:8c:6e:b2:cd:50:e3:db:8c:
7d:fc:7a:81:e6:89:80:85:2d:d7:a2:9b:79:cf:4d:
64:7f:56:48:7a:27:4f:09:4c:07:f4:1d:7a:fd:e1:
a1:85:73:1d:13:d1:b5:4e:2b:29:2d:1f:52:8f:20:
29:98:59:26:5a:7b:b5:f4:f8:b3:69:97:4f:d5:2d:
4e:ac:34:a2:2c:eb:e0:77:28:ba:29:ad:79:55:5b:
77:67:1a:99:f6:a2:70:2f:ab:93:22:28:c5:50:c3:
15:a0:c5:f1:ed:85:28:7e:b0:3a:45:9f:62:33:8f:
05:8a:1a:bc:0f:63:df:56:5d:e3:26:18:74:78:57:
41:97:89:07:45:93:71:10:20:20:7e:eb:f9:fc:87:
ce:e5:57:31:ff:42:fe:2f:3a:8b:2b:66:6d:b1:25:
b0:1b:97:0d:68:a0:94:51:8f:dc:9f:50:91:ec:ea:
99:89:49:9f:1f:ca:60:19:f3:06:5c:7e:6a:91:8a:
72:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6A:21:3E:AD:49:3B:D5:73:96:9C:46:8C:7B:83:88:FE:3C:51:2D
X509v3 Authority Key Identifier:
keyid:63:EF:6B:DB:C4:2A:D0:6D:EF:DA:D7:26:79:41:43:46:D8:D0:48:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4c:e1:52:b8:02:54:2e:5a:60:af:4a:05:ae:00:6c:ff:10:
f1:e3:ef:aa:cc:6e:59:73:ff:5b:11:bf:78:f1:90:d0:22:a6:
86:49:84:6c:61:2e:1a:5a:62:90:36:30:a1:eb:f9:d1:54:30:
f6:aa:1a:9c:b7:6e:4d:23:f1:4f:7a:0c:b5:e1:84:cf:5f:da:
38:e7:48:f1:78:cd:6c:0b:11:7b:a4:9d:31:2e:85:f1:ce:99:
bc:4e:93:5d:d8:b4:f9:8d:ae:ed:54:61:11:a9:33:ee:a3:d0:
f5:20:62:04:87:2b:89:13:ce:80:63:0d:9e:71:42:6d:9c:ee:
92:5e:bc:d8:fb:33:19:ee:3d:21:d3:6a:1b:93:56:57:09:c5:
01:72:04:e2:e6:0a:3d:e9:ef:f3:cb:fc:9b:55:96:20:f6:7d:
2f:b1:36:03:5f:0f:af:ce:1b:85:db:14:c2:fa:64:da:42:12:
a2:98:85:a0:e3:d5:29:03:84:75:db:80:b7:4c:e0:9e:ab:df:
11:e0:f3:f1:ef:8c:fb:43:f0:e7:30:02:17:32:c1:93:a2:ef:
e7:b0:63:15:03:74:5d:f3:1d:91:05:57:63:37:6b:ff:af:be:
03:ad:15:98:80:18:6f:61:43:31:96:40:ac:5b:af:6c:7f:f3:
4d:54:d5:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zliEqkAk286H7uAp8KMIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZWY2YmRiYzQyYWQwNmRlZmRhZDcyNjc5NDE0MzQ2ZDhk
MDQ4ZGYwHhcNMjUwMTMxMTAwMDQ5WhcNMjUwMjAxMTAwMDQ5WjAzMTEwLwYDVQQD
Eyg3NjZhMjEzZWFkNDkzYmQ1NzM5NjljNDY4YzdiODM4OGZlM2M1MTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PWdUKMRkKLlvos/pvgQNDvejyh0
2Q6nqWs1CXnKxYhZc2KxK4OhwJqcYnyU232gYJSZRD4Wj0+4l4YXrhlNb1Q6jG6y
zVDj24x9/HqB5omAhS3Xopt5z01kf1ZIeidPCUwH9B16/eGhhXMdE9G1TispLR9S
jyApmFkmWnu19PizaZdP1S1OrDSiLOvgdyi6Ka15VVt3ZxqZ9qJwL6uTIijFUMMV
oMXx7YUofrA6RZ9iM48Fihq8D2PfVl3jJhh0eFdBl4kHRZNxECAgfuv5/IfO5Vcx
/0L+LzqLK2ZtsSWwG5cNaKCUUY/cn1CR7OqZiUmfH8pgGfMGXH5qkYpy7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZqIT6tSTvVc5acRox7g4j+PFEtMB8GA1UdIwQY
MBaAFGPva9vEKtBt79rXJnlBQ0bY0EjfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS05cjI4UXEwRzN2MnRjbWVVRkRSdGpRU044LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81YWI1MTItOTYwNi00MmRjLTllYjUt
MGM4MzY4ZGI5NTYzLzEvWS05cjI4UXEwRzN2MnRjbWVVRkRSdGpRU044Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi81YWI1MTItOTYwNi00MmRjLTllYjUtMGM4MzY4ZGI5NTYz
LzEvWS05cjI4UXEwRzN2MnRjbWVVRkRSdGpRU044LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0zhUrgC
VC5aYK9KBa4AbP8Q8ePvqsxuWXP/WxG/ePGQ0CKmhkmEbGEuGlpikDYwoev50VQw
9qoanLduTSPxT3oMteGEz1/aOOdI8XjNbAsRe6SdMS6F8c6ZvE6TXdi0+Y2u7VRh
Eakz7qPQ9SBiBIcriRPOgGMNnnFCbZzukl682PszGe49IdNqG5NWVwnFAXIE4uYK
Penv88v8m1WWIPZ9L7E2A18Pr84bhdsUwvpk2kISopiFoOPVKQOEdduAt0zgnqvf
EeDz8e+M+0Pw5zACFzLBk6Lv57BjFQN0XfMdkQVXYzdr/6++A60VmIAYb2FDMZZA
rFuvbH/zTVTV4g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:09 2025 by rpki-client