Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a01e67-d148-46f4-953a-c52758ad95e9/1/yDoMgB1lCLAFiqMvn9j25_JGtMI.mft
File: yDoMgB1lCLAFiqMvn9j25_JGtMI.mft (raw, json)
Hash identifier: F7iyMhPCEXCBs0DfSXCxYU+jUTHELh9Vw6CXNEBZgDM=
Subject key identifier: 32:1F:35:49:87:62:94:33:A0:BC:BF:95:05:67:4E:17:72:1C:8F:4F
Authority key identifier: C8:3A:0C:80:1D:65:08:B0:05:8A:A3:2F:9F:D8:F6:E7:F2:46:B4:C2
Certificate issuer: /CN=c83a0c801d6508b0058aa32f9fd8f6e7f246b4c2
Certificate serial: 0194BBCEF29229567FA89FC8A3613B5B038A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDoMgB1lCLAFiqMvn9j25_JGtMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a01e67-d148-46f4-953a-c52758ad95e9/1/yDoMgB1lCLAFiqMvn9j25_JGtMI.mft
Manifest number: 1162
Signing time: Fri 31 Jan 2025 10:01:29 +0000
Manifest this update: Fri 31 Jan 2025 10:01:29 +0000
Manifest next update: Sat 01 Feb 2025 10:01:29 +0000
Files and hashes: 1: yDoMgB1lCLAFiqMvn9j25_JGtMI.crl (hash: jasu8ax08vdckyL41/cH1YASd/FbD1u9Z2E439iNrw0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f2:92:29:56:7f:a8:9f:c8:a3:61:3b:5b:03:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83a0c801d6508b0058aa32f9fd8f6e7f246b4c2
Validity
Not Before: Jan 31 10:01:29 2025 GMT
Not After : Feb 1 10:01:29 2025 GMT
Subject: CN=321f354987629433a0bcbf9505674e17721c8f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:d7:97:7d:1e:01:7e:88:10:e7:d9:96:1a:
b6:51:a2:8c:21:a1:d3:c6:98:9d:4d:f4:69:01:ae:
96:27:0e:c8:07:1a:cb:f8:d2:02:23:95:79:86:9f:
a7:9e:18:5d:b9:80:4b:ed:45:6c:9d:44:6c:2b:6d:
f0:c3:db:d6:0c:ba:a5:ad:09:48:6f:47:56:39:3f:
61:be:14:65:6c:45:7e:e1:f6:82:7c:c0:12:b8:2a:
70:b5:ac:e6:43:8e:6d:e1:7b:54:67:30:72:80:62:
32:0d:3c:77:53:88:a5:1c:cb:f6:89:81:07:d0:ca:
8e:eb:d5:b7:eb:77:03:d0:99:39:be:7b:fa:56:86:
b0:6a:38:1d:74:36:3e:1b:bf:e9:fa:f9:f0:e3:67:
0f:fe:dc:44:f1:4e:89:a0:e9:4b:a4:c6:74:01:f4:
63:c9:7b:a1:ab:4e:70:03:e9:24:37:7c:ad:8f:8e:
25:f7:4a:66:ab:93:e9:e7:ed:6c:38:b2:6e:61:58:
9f:cb:32:c6:70:a1:5a:c8:b5:25:e7:33:8d:ad:68:
96:f7:cc:22:2d:d6:df:af:b8:75:7f:ef:bb:9b:89:
ef:79:e4:14:a3:13:5d:b7:dc:9d:b8:82:e6:ca:d8:
e2:a0:79:fa:c0:93:49:58:61:b5:b1:3f:63:69:f2:
fe:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1F:35:49:87:62:94:33:A0:BC:BF:95:05:67:4E:17:72:1C:8F:4F
X509v3 Authority Key Identifier:
keyid:C8:3A:0C:80:1D:65:08:B0:05:8A:A3:2F:9F:D8:F6:E7:F2:46:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDoMgB1lCLAFiqMvn9j25_JGtMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a01e67-d148-46f4-953a-c52758ad95e9/1/yDoMgB1lCLAFiqMvn9j25_JGtMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a01e67-d148-46f4-953a-c52758ad95e9/1/yDoMgB1lCLAFiqMvn9j25_JGtMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:e6:b1:7f:04:68:96:a3:e6:0b:d8:cc:31:17:65:f3:ae:ee:
83:57:1c:23:ca:3e:ec:d5:70:65:66:07:71:46:d6:bb:68:dc:
9e:f4:51:df:21:a5:60:1f:ae:68:f2:80:aa:9c:26:c9:4c:c5:
76:87:0a:32:33:35:cf:24:4d:86:fa:98:d7:11:4f:52:68:d4:
47:fd:78:0e:3a:53:ee:07:2b:2c:3f:70:ad:1c:40:c2:35:f0:
e7:04:54:00:ac:9a:e8:5d:d3:2e:e4:a7:87:30:ff:6a:08:a8:
08:ef:63:26:e8:93:1c:20:89:dd:77:f8:05:91:a5:2d:b3:8c:
21:1f:1c:b3:02:35:a0:a9:8a:e4:ea:89:ad:2e:21:db:03:42:
1d:6f:e8:d0:e8:4e:d4:c6:92:f5:88:dc:31:5f:4d:1f:03:dc:
bd:e1:90:b2:ef:3e:c8:b2:24:96:32:cd:9e:b4:0a:35:9e:ab:
31:dd:1e:78:aa:b7:0b:0d:fc:46:32:fc:54:27:2d:80:6d:f0:
04:c8:4b:41:1a:38:98:aa:fc:b3:c1:8f:a3:c0:47:fd:2d:59:
73:6c:45:18:01:af:f9:fb:ef:c6:c1:a0:8d:80:bc:e4:cb:7e:
44:f1:7e:ae:3f:b3:e2:da:49:55:f9:f5:69:cf:d7:e5:04:0d:
c4:e1:c1:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zvKSKVZ/qJ/Io2E7WwOKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4M2EwYzgwMWQ2NTA4YjAwNThhYTMyZjlmZDhmNmU3ZjI0
NmI0YzIwHhcNMjUwMTMxMTAwMTI5WhcNMjUwMjAxMTAwMTI5WjAzMTEwLwYDVQQD
EygzMjFmMzU0OTg3NjI5NDMzYTBiY2JmOTUwNTY3NGUxNzcyMWM4ZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX/Xl30eAX6IEOfZlhq2UaKMIaHT
xpidTfRpAa6WJw7IBxrL+NICI5V5hp+nnhhduYBL7UVsnURsK23ww9vWDLqlrQlI
b0dWOT9hvhRlbEV+4faCfMASuCpwtazmQ45t4XtUZzBygGIyDTx3U4ilHMv2iYEH
0MqO69W363cD0Jk5vnv6VoawajgddDY+G7/p+vnw42cP/txE8U6JoOlLpMZ0AfRj
yXuhq05wA+kkN3ytj44l90pmq5Pp5+1sOLJuYVifyzLGcKFayLUl5zONrWiW98wi
Ldbfr7h1f++7m4nveeQUoxNdt9yduILmytjioHn6wJNJWGG1sT9jafL+LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIfNUmHYpQzoLy/lQVnThdyHI9PMB8GA1UdIwQY
MBaAFMg6DIAdZQiwBYqjL5/Y9ufyRrTCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveURvTWdCMWxDTEFGaXFNdm45ajI1X0pHdE1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMDFlNjctZDE0OC00NmY0LTk1M2Et
YzUyNzU4YWQ5NWU5LzEveURvTWdCMWxDTEFGaXFNdm45ajI1X0pHdE1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hMDFlNjctZDE0OC00NmY0LTk1M2EtYzUyNzU4YWQ5NWU5
LzEveURvTWdCMWxDTEFGaXFNdm45ajI1X0pHdE1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0eaxfwRo
lqPmC9jMMRdl867ug1ccI8o+7NVwZWYHcUbWu2jcnvRR3yGlYB+uaPKAqpwmyUzF
docKMjM1zyRNhvqY1xFPUmjUR/14DjpT7gcrLD9wrRxAwjXw5wRUAKya6F3TLuSn
hzD/agioCO9jJuiTHCCJ3Xf4BZGlLbOMIR8cswI1oKmK5OqJrS4h2wNCHW/o0OhO
1MaS9YjcMV9NHwPcveGQsu8+yLIkljLNnrQKNZ6rMd0eeKq3Cw38RjL8VCctgG3w
BMhLQRo4mKr8s8GPo8BH/S1Zc2xFGAGv+fvvxsGgjYC85Mt+RPF+rj+z4tpJVfn1
ac/X5QQNxOHBaA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:29:09 2025 by rpki-client