Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
File: YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft (raw, json)
Hash identifier: wcD9jx+AE7G5hbogZZT9benrmj1LTd4OYGGHjSXZhE0=
Subject key identifier: 85:9D:34:27:CE:5A:70:8C:C3:D1:E0:51:52:F0:C7:DB:C3:B2:0E:B1
Authority key identifier: 60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
Certificate issuer: /CN=600e85f581c7513908ea04665fd23726fd70e62b
Certificate serial: 0194BC04CFFF8003777C90089BA70D28B08D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl (hash: coK8QFP5QyKfI5YFl0zPWQhJYxUUS5DKvGvZuyjbFp4=)
2: xoPlD0rrBEJIFIvkk6R1R6ePGVo.roa (hash: v5S5OgtFceKc/UtdxN43/f/RbwPnYdlFD8XVOZ+FDEc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:cf:ff:80:03:77:7c:90:08:9b:a7:0d:28:b0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600e85f581c7513908ea04665fd23726fd70e62b
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=859d3427ce5a708cc3d1e05152f0c7dbc3b20eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b8:d4:ff:cc:f2:e8:07:29:9e:1d:00:e3:4d:
b5:a7:12:4c:a1:2e:19:1b:4d:32:a0:cb:cd:7e:95:
87:8c:57:ed:0a:79:4e:b7:bb:bf:8b:60:c2:56:e6:
6f:6a:7c:fd:d6:f2:c0:af:1d:21:ff:5d:1c:e2:9e:
55:8f:aa:6b:45:27:c6:8d:0e:73:e2:5f:36:bc:bc:
ce:74:e6:2a:63:2e:04:f9:59:0d:d5:53:2d:43:60:
10:80:6c:96:34:15:63:d3:da:9c:be:18:00:3c:cc:
8d:73:af:39:69:d1:35:20:ff:7a:74:31:be:47:6d:
ae:76:ff:41:4f:23:0b:ab:c9:32:e5:e3:ce:02:7f:
f5:4d:bd:49:0c:a3:69:26:c3:76:57:79:a0:65:a5:
b8:b1:12:b5:77:ef:16:86:cb:1f:14:ab:be:71:3c:
99:79:39:9d:e3:9d:79:d3:e2:79:60:5f:24:f1:6c:
77:d3:8c:55:e5:b6:16:39:ee:82:24:e2:be:92:79:
c4:30:10:95:97:43:4f:0e:07:f0:62:91:a0:34:15:
64:bd:2f:75:1d:fa:45:08:30:cb:ea:d4:15:4e:d3:
f9:33:3c:eb:5b:40:9c:d2:ab:ca:3a:48:c0:a3:fa:
91:59:08:c0:e8:a2:37:1e:4e:0c:f4:f3:ee:8d:ba:
e3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9D:34:27:CE:5A:70:8C:C3:D1:E0:51:52:F0:C7:DB:C3:B2:0E:B1
X509v3 Authority Key Identifier:
keyid:60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:64:c5:6f:c0:91:30:88:1d:26:4a:7c:ae:ce:46:ca:d3:ca:
4a:03:0f:61:65:d1:0e:a1:82:32:91:92:ac:5c:c1:ee:df:95:
2a:86:aa:a4:cb:89:25:22:7f:4a:d3:62:c1:7d:2e:7c:6d:be:
f3:db:2c:2a:1e:05:4b:44:e9:65:2a:a5:df:ce:e8:55:c0:8a:
64:0e:5a:ce:ea:51:f1:50:3b:62:e3:c2:b5:9e:e4:40:04:ac:
81:a9:78:1e:4d:f9:7b:06:27:c8:1f:a7:3b:00:da:56:b4:58:
23:41:bd:f8:ac:55:ca:42:40:c4:74:63:cd:f1:59:6c:58:c1:
8a:16:31:fb:e7:0e:af:03:61:af:75:06:1e:10:cb:0b:4c:6f:
4b:84:33:88:db:17:72:a9:12:b9:52:eb:5d:6d:24:89:b4:6c:
bc:5a:e3:c5:30:89:0b:e7:f2:67:33:71:18:f8:e2:90:5c:25:
3e:fe:63:66:be:ec:9d:6d:54:0f:46:7d:e2:e6:ba:15:a2:f6:
09:b5:c8:5a:8c:52:b2:1f:76:b4:e9:43:63:d8:2d:39:f9:b0:
08:47:7a:14:5d:91:b0:53:76:4c:22:af:9e:a6:35:99:b7:f0:
17:cc:38:36:2a:3f:c2:d4:bc:d8:44:9a:5f:d0:f1:4c:85:a3:
22:15:49:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BM//gAN3fJAIm6cNKLCNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMGU4NWY1ODFjNzUxMzkwOGVhMDQ2NjVmZDIzNzI2ZmQ3
MGU2MmIwHhcNMjUwMTMxMTEwMDE5WhcNMjUwMjAxMTEwMDE5WjAzMTEwLwYDVQQD
Eyg4NTlkMzQyN2NlNWE3MDhjYzNkMWUwNTE1MmYwYzdkYmMzYjIwZWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47jU/8zy6Acpnh0A4021pxJMoS4Z
G00yoMvNfpWHjFftCnlOt7u/i2DCVuZvanz91vLArx0h/10c4p5Vj6prRSfGjQ5z
4l82vLzOdOYqYy4E+VkN1VMtQ2AQgGyWNBVj09qcvhgAPMyNc685adE1IP96dDG+
R22udv9BTyMLq8ky5ePOAn/1Tb1JDKNpJsN2V3mgZaW4sRK1d+8WhssfFKu+cTyZ
eTmd45150+J5YF8k8Wx304xV5bYWOe6CJOK+knnEMBCVl0NPDgfwYpGgNBVkvS91
HfpFCDDL6tQVTtP5MzzrW0Cc0qvKOkjAo/qRWQjA6KI3Hk4M9PPujbrj+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWdNCfOWnCMw9HgUVLwx9vDsg6xMB8GA1UdIwQY
MBaAFGAOhfWBx1E5COoEZl/SNyb9cOYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yNWMwMTctODZlMi00Y2MzLWEyMDIt
NGNkYTc4OGZlODk5LzEvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8yNWMwMTctODZlMi00Y2MzLWEyMDItNGNkYTc4OGZlODk5
LzEvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp2TFb8CR
MIgdJkp8rs5GytPKSgMPYWXRDqGCMpGSrFzB7t+VKoaqpMuJJSJ/StNiwX0ufG2+
89ssKh4FS0TpZSql387oVcCKZA5azupR8VA7YuPCtZ7kQASsgal4Hk35ewYnyB+n
OwDaVrRYI0G9+KxVykJAxHRjzfFZbFjBihYx++cOrwNhr3UGHhDLC0xvS4QziNsX
cqkSuVLrXW0kibRsvFrjxTCJC+fyZzNxGPjikFwlPv5jZr7snW1UD0Z94ua6FaL2
CbXIWoxSsh92tOlDY9gtOfmwCEd6FF2RsFN2TCKvnqY1mbfwF8w4Nio/wtS82ESa
X9DxTIWjIhVJyw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:49:07 2025 by rpki-client