Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/yGf0ZiTUgb6p0bqL6wwBicm0S14.mft
File: yGf0ZiTUgb6p0bqL6wwBicm0S14.mft (raw, json)
Hash identifier: F2ocRz5c7OxmHh1EQCd4YRRNYW5bjkdU09FxX4qZnWE=
Subject key identifier: 89:81:17:0B:A4:AC:D6:0F:9A:F3:A4:11:DB:A0:C6:D9:CB:99:A8:9C
Authority key identifier: C8:67:F4:66:24:D4:81:BE:A9:D1:BA:8B:EB:0C:01:89:C9:B4:4B:5E
Certificate issuer: /CN=c867f46624d481bea9d1ba8beb0c0189c9b44b5e
Certificate serial: 0194BC04E63845C3172D8012B274E05F7776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGf0ZiTUgb6p0bqL6wwBicm0S14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/yGf0ZiTUgb6p0bqL6wwBicm0S14.mft
Manifest number: 0770
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: 4lb8MH7GOJnctq74IYYrPz2MrXI.roa (hash: j6r/F3I87KdB4Ik/hzhNmN4mf0uzrhpeKqetEtToc9c=)
2: yGf0ZiTUgb6p0bqL6wwBicm0S14.crl (hash: YuBbGldQejSTatYak2brF+x6KQjdmOaUYY0qj+Ge6Bg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e6:38:45:c3:17:2d:80:12:b2:74:e0:5f:77:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c867f46624d481bea9d1ba8beb0c0189c9b44b5e
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=8981170ba4acd60f9af3a411dba0c6d9cb99a89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d8:0b:d6:fc:1f:d8:39:8d:42:94:18:ab:a6:
47:9c:a3:64:c4:13:0b:fa:03:ce:61:aa:19:8d:85:
a4:ff:e8:f4:10:29:f3:da:6e:cd:aa:b0:d1:03:0a:
a3:46:ed:e8:77:90:39:d7:d1:30:c7:11:f6:19:25:
52:d6:fd:e4:b6:3d:c4:8a:ff:6e:f5:be:58:62:0a:
b7:0d:ae:b2:bd:cb:04:cc:f6:e2:32:fc:76:e1:43:
1f:49:fe:a8:d4:07:b1:63:54:c1:0b:61:3a:fc:58:
25:43:b7:d4:3a:13:ab:27:8e:44:14:e5:b0:f5:07:
f6:1c:ef:70:07:b6:7b:14:e9:9d:ba:d6:23:2a:c2:
8e:10:69:95:d7:9c:0c:55:46:16:b4:54:90:6c:55:
b2:eb:68:d7:65:ec:f4:b5:92:31:f0:2c:5c:7e:bb:
21:a7:a5:8e:a2:a9:34:59:ea:11:fc:05:86:d3:c9:
91:ec:b2:87:6f:23:67:55:ad:8f:0e:dd:d6:49:10:
86:d7:cc:91:1b:63:75:fb:01:af:a6:08:48:05:92:
f6:fe:6f:a0:02:d5:a1:c8:4f:b4:73:7a:cc:ee:68:
87:63:7e:88:1b:e4:df:2f:31:2f:9b:56:37:12:a8:
5e:a0:b1:ee:d5:60:1f:23:91:b3:90:84:d2:9c:e2:
e2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:81:17:0B:A4:AC:D6:0F:9A:F3:A4:11:DB:A0:C6:D9:CB:99:A8:9C
X509v3 Authority Key Identifier:
keyid:C8:67:F4:66:24:D4:81:BE:A9:D1:BA:8B:EB:0C:01:89:C9:B4:4B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGf0ZiTUgb6p0bqL6wwBicm0S14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/yGf0ZiTUgb6p0bqL6wwBicm0S14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/yGf0ZiTUgb6p0bqL6wwBicm0S14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:22:a5:6e:29:e0:0d:db:96:20:57:c0:cc:1e:78:9d:a7:d3:
e4:24:e0:e5:07:88:3f:e9:5d:a0:bf:65:63:ba:8d:3c:f0:35:
59:47:2e:3c:bc:55:f6:64:57:a4:50:8f:8d:ff:cd:da:f4:d2:
d7:1b:35:3f:48:dc:05:ae:6b:6d:5d:be:c4:c4:d9:6e:7a:99:
e3:fa:67:f4:b5:18:b2:8a:45:24:5a:6b:f9:fc:48:6c:d3:c2:
10:5d:4d:92:12:12:6c:66:13:11:98:73:48:5f:68:55:98:6b:
c9:80:09:80:5a:0d:24:c3:a9:e3:88:cb:77:7a:5f:f1:b6:b0:
42:c7:3b:7a:54:7d:dd:a2:70:a1:b0:5a:90:21:c7:6b:1e:e1:
ca:d8:d5:0d:33:fe:ba:6a:93:56:93:85:15:85:b3:3e:ab:e6:
0f:be:65:e4:6f:27:66:e2:ca:43:6e:b9:6f:95:88:0b:22:15:
55:85:a1:84:32:c4:9a:4c:46:be:27:4b:48:92:f1:70:2d:66:
90:d7:0c:cd:33:51:29:a7:76:da:b1:ab:17:49:a4:2f:99:ac:
b6:a5:15:4e:5e:25:e8:bb:38:15:3f:24:61:f0:41:1b:19:d4:
92:90:f6:78:8b:e4:34:30:e0:93:6a:08:fc:0b:89:97:3c:27:
9d:dd:93:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BOY4RcMXLYASsnTgX3d2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NjdmNDY2MjRkNDgxYmVhOWQxYmE4YmViMGMwMTg5Yzli
NDRiNWUwHhcNMjUwMTMxMTEwMDI1WhcNMjUwMjAxMTEwMDI1WjAzMTEwLwYDVQQD
Eyg4OTgxMTcwYmE0YWNkNjBmOWFmM2E0MTFkYmEwYzZkOWNiOTlhODljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29gL1vwf2DmNQpQYq6ZHnKNkxBML
+gPOYaoZjYWk/+j0ECnz2m7NqrDRAwqjRu3od5A519EwxxH2GSVS1v3ktj3Eiv9u
9b5YYgq3Da6yvcsEzPbiMvx24UMfSf6o1AexY1TBC2E6/FglQ7fUOhOrJ45EFOWw
9Qf2HO9wB7Z7FOmdutYjKsKOEGmV15wMVUYWtFSQbFWy62jXZez0tZIx8Cxcfrsh
p6WOoqk0WeoR/AWG08mR7LKHbyNnVa2PDt3WSRCG18yRG2N1+wGvpghIBZL2/m+g
AtWhyE+0c3rM7miHY36IG+TfLzEvm1Y3EqheoLHu1WAfI5GzkITSnOLi7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImBFwukrNYPmvOkEdugxtnLmaicMB8GA1UdIwQY
MBaAFMhn9GYk1IG+qdG6i+sMAYnJtEteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUdmMFppVFVnYjZwMGJxTDZ3d0JpY20wUzE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9mNTBiOTYtNjMwZS00Mzc5LTk1Y2Et
NzFhZWRiYWVmNDhiLzEveUdmMFppVFVnYjZwMGJxTDZ3d0JpY20wUzE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9mNTBiOTYtNjMwZS00Mzc5LTk1Y2EtNzFhZWRiYWVmNDhi
LzEveUdmMFppVFVnYjZwMGJxTDZ3d0JpY20wUzE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGiKlbing
DduWIFfAzB54nafT5CTg5QeIP+ldoL9lY7qNPPA1WUcuPLxV9mRXpFCPjf/N2vTS
1xs1P0jcBa5rbV2+xMTZbnqZ4/pn9LUYsopFJFpr+fxIbNPCEF1NkhISbGYTEZhz
SF9oVZhryYAJgFoNJMOp44jLd3pf8bawQsc7elR93aJwobBakCHHax7hytjVDTP+
umqTVpOFFYWzPqvmD75l5G8nZuLKQ265b5WICyIVVYWhhDLEmkxGvidLSJLxcC1m
kNcMzTNRKad22rGrF0mkL5mstqUVTl4l6Ls4FT8kYfBBGxnUkpD2eIvkNDDgk2oI
/AuJlzwnnd2Tjw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:27:48 2025 by rpki-client