Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
File: yHX3bo-JQkeSPA4nYjTZikw-xcI.mft (raw, json)
Hash identifier: J1Kt7p6mxlS6VQLEZejCek43WvWMKnZONKS0DC7++CM=
Subject key identifier: 54:6C:42:C6:25:33:95:79:6F:56:4F:EE:7E:A7:08:C2:74:B9:75:D7
Authority key identifier: C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
Certificate issuer: /CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Certificate serial: 0194BD4E6E73680E88062924BD8CD064C524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: FGsyv-avFXn_iimzPOzOCwcPyYs.roa (hash: x+nbArqL7XpMEWFfS8pufHXCc23im3EMURx/7GPfFLI=)
2: I709bbaWjjvBjycgl5Y9TKJLvE0.roa (hash: XtOSTkSn/jS5PlGEkzSWe5jgilvzImx3IY3GpNZBgXs=)
3: yHX3bo-JQkeSPA4nYjTZikw-xcI.crl (hash: aFIu4ZoKIoEw5Fy/++kY8SVGAYOTxgdDOCbhnX4cbd8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6e:73:68:0e:88:06:29:24:bd:8c:d0:64:c5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=546c42c6253395796f564fee7ea708c274b975d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:27:10:7a:d9:9b:87:ab:5c:25:8e:82:28:
dd:47:50:73:87:6f:a8:f0:aa:a4:63:83:68:4f:62:
fa:42:36:f9:fc:3b:f5:52:76:f9:47:5e:9a:c7:fc:
33:41:c7:95:be:b7:22:ee:af:78:52:f4:42:9b:95:
54:6b:22:7c:b8:0b:c5:e6:4a:20:60:2c:64:39:03:
91:10:86:b9:14:6b:51:ab:ef:67:b6:47:6e:f8:9a:
60:a2:94:a4:28:12:30:e5:cd:58:f7:cf:83:16:ed:
54:6a:f0:c3:e7:4d:c2:d3:e2:c1:42:a4:d9:15:8f:
2e:64:74:69:9c:86:bb:a8:c6:20:0e:8c:4f:13:85:
9d:18:23:88:1d:c5:ba:aa:da:05:fa:f1:13:1f:9c:
65:87:37:ea:c9:7c:a9:8a:ba:fd:ab:6c:3d:df:e5:
85:47:31:ae:2b:2d:44:61:7f:c4:c1:06:cd:f1:27:
c7:29:33:db:b8:f8:e5:ec:0e:e7:ab:b3:83:cb:18:
f8:c9:da:35:99:43:24:67:33:ca:02:8a:ff:2b:46:
7c:7a:99:74:91:f8:4a:e0:88:91:99:b2:98:0c:c9:
53:3e:90:41:91:43:a8:ff:db:30:1d:da:00:45:63:
83:b2:22:58:4c:a8:cb:6d:4e:c4:58:b4:c8:b0:a6:
fc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6C:42:C6:25:33:95:79:6F:56:4F:EE:7E:A7:08:C2:74:B9:75:D7
X509v3 Authority Key Identifier:
keyid:C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c8:e2:9f:8d:ca:20:e2:c4:3f:bf:b9:09:8f:4f:b6:ec:43:
d7:fd:8a:57:c4:d5:1a:de:b7:60:62:bf:af:68:fb:9e:ff:de:
81:f2:88:7c:6f:17:be:40:ec:18:e1:5f:37:ac:c2:c4:1c:cb:
54:77:f4:ac:0f:b1:eb:fc:3c:41:da:1e:25:92:2c:a4:cd:69:
8c:ff:53:6c:86:3f:f5:23:de:0e:d4:d7:9f:1a:26:e2:a2:05:
87:5e:03:1d:ce:4c:d3:21:d1:65:49:0b:8f:22:73:f6:9c:50:
14:6e:85:be:4e:86:2e:fd:84:b7:1f:63:97:2d:a3:5d:1b:fa:
9a:34:4c:f1:d0:13:6f:6d:87:36:43:f8:bc:73:29:04:83:65:
19:cd:18:c4:de:a6:31:6d:11:6c:23:3f:71:5f:79:e8:44:ac:
f7:a2:58:c6:77:03:57:15:77:8f:5d:80:11:04:9d:0f:94:49:
38:3e:2f:4a:6e:2b:af:35:2e:b2:a4:ec:81:22:79:ac:f6:dc:
04:dc:3f:0e:78:25:bf:10:d7:f6:b0:ed:8c:f7:1c:28:fc:be:
01:d4:bf:07:c3:2b:25:b3:bb:3c:fe:41:00:ee:09:08:10:60:
52:ba:d0:f3:19:56:2b:80:16:30:48:c3:54:94:64:95:21:84:
18:4c:62:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tm5zaA6IBikkvYzQZMUkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NzVmNzZlOGY4OTQyNDc5MjNjMGUyNzYyMzRkOThhNGMz
ZWM1YzIwHhcNMjUwMTMxMTcwMDIxWhcNMjUwMjAxMTcwMDIxWjAzMTEwLwYDVQQD
Eyg1NDZjNDJjNjI1MzM5NTc5NmY1NjRmZWU3ZWE3MDhjMjc0Yjk3NWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpUnEHrZm4erXCWOgijdR1Bzh2+o
8KqkY4NoT2L6Qjb5/Dv1Unb5R16ax/wzQceVvrci7q94UvRCm5VUayJ8uAvF5kog
YCxkOQOREIa5FGtRq+9ntkdu+JpgopSkKBIw5c1Y98+DFu1UavDD503C0+LBQqTZ
FY8uZHRpnIa7qMYgDoxPE4WdGCOIHcW6qtoF+vETH5xlhzfqyXypirr9q2w93+WF
RzGuKy1EYX/EwQbN8SfHKTPbuPjl7A7nq7ODyxj4ydo1mUMkZzPKAor/K0Z8epl0
kfhK4IiRmbKYDMlTPpBBkUOo/9swHdoARWODsiJYTKjLbU7EWLTIsKb87wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRsQsYlM5V5b1ZP7n6nCMJ0uXXXMB8GA1UdIwQY
MBaAFMh1926PiUJHkjwOJ2I02YpMPsXCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUhYM2JvLUpRa2VTUEE0bllqVFppa3cteGNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lOWU3OTgtNGVmMy00YWE4LTgxZjAt
MzA1NjU4ZjkxNjM1LzEveUhYM2JvLUpRa2VTUEE0bllqVFppa3cteGNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9lOWU3OTgtNGVmMy00YWE4LTgxZjAtMzA1NjU4ZjkxNjM1
LzEveUhYM2JvLUpRa2VTUEE0bllqVFppa3cteGNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMjin43K
IOLEP7+5CY9PtuxD1/2KV8TVGt63YGK/r2j7nv/egfKIfG8XvkDsGOFfN6zCxBzL
VHf0rA+x6/w8QdoeJZIspM1pjP9TbIY/9SPeDtTXnxom4qIFh14DHc5M0yHRZUkL
jyJz9pxQFG6Fvk6GLv2Etx9jly2jXRv6mjRM8dATb22HNkP4vHMpBINlGc0YxN6m
MW0RbCM/cV956ESs96JYxncDVxV3j12AEQSdD5RJOD4vSm4rrzUusqTsgSJ5rPbc
BNw/DnglvxDX9rDtjPccKPy+AdS/B8MrJbO7PP5BAO4JCBBgUrrQ8xlWK4AWMEjD
VJRklSGEGExiSg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:02:20 2025 by rpki-client