Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
File: YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft (raw, json)
Hash identifier: u43TvBtoYPn4EV+O9p867mINm+wF7H41A6DbFnF/kmM=
Subject key identifier: 17:BC:CD:D7:C9:EF:A1:B8:37:3D:7A:13:AF:9C:29:40:1E:00:20:BE
Authority key identifier: 60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60
Certificate issuer: /CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660
Certificate serial: 0194BC73214F28DBE83BFF02B5F391659159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl (hash: 1+cz5K6jMzVFzSfzL75KK1vCsL4dtaps9FTd7wfBBF4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:21:4f:28:db:e8:3b:ff:02:b5:f3:91:65:91:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=17bccdd7c9efa1b8373d7a13af9c29401e0020be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2b:a4:13:3e:ae:23:5a:82:35:e8:a5:c9:17:
02:1d:2e:29:85:f7:d4:83:a9:96:16:84:85:8a:3b:
f8:fc:43:52:af:b4:9c:cb:b9:e4:e6:c3:f4:11:e7:
aa:b6:00:11:b7:0a:39:ae:c2:f9:56:1d:97:49:81:
a9:b6:22:85:54:13:fa:ec:d2:fa:55:0f:3d:fe:1d:
78:b6:a5:3f:cc:6f:63:a6:fc:94:8a:ce:e6:c9:fd:
57:1e:10:bc:99:c4:55:6a:83:13:ec:fa:60:e7:47:
30:a6:6f:cc:6b:fa:09:ac:b1:f8:52:21:b0:bb:46:
31:83:bd:35:61:de:f9:a2:31:f7:23:da:61:e4:34:
09:60:7c:71:c1:a3:31:97:62:30:e6:e8:f9:d7:f2:
da:04:4e:0a:bf:c3:e2:8d:23:7e:0e:f1:7c:2f:25:
15:7f:9e:84:70:68:97:81:07:36:08:5b:97:85:5a:
da:0f:58:c5:3d:7f:c5:d0:40:fa:15:ae:b9:d3:32:
fd:19:53:bb:45:fc:e3:f9:50:26:5d:ce:63:03:0e:
20:aa:71:ef:15:5e:63:7f:87:85:d5:6f:2d:91:f6:
2e:0b:09:11:8a:db:8c:39:71:cf:21:b1:84:64:bf:
37:b4:61:f2:8c:c5:b0:5e:b2:c9:12:7b:85:8c:10:
0e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BC:CD:D7:C9:EF:A1:B8:37:3D:7A:13:AF:9C:29:40:1E:00:20:BE
X509v3 Authority Key Identifier:
keyid:60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:89:37:53:2a:e3:63:66:66:8e:2a:9c:10:0f:32:06:c1:98:
c4:8d:7b:e6:78:b8:61:5a:ce:f5:dd:96:d8:24:38:22:4e:a9:
fb:7a:04:40:fd:cb:a0:60:cd:af:3d:9f:48:6a:be:f8:7e:4a:
05:2a:ca:d4:e8:cd:b8:df:0d:cc:e5:f4:30:9a:74:86:27:af:
e0:c2:b7:bc:4e:cd:00:00:a2:19:50:22:5e:46:ad:e5:54:ef:
f4:e9:84:eb:a4:de:16:4f:f0:0f:93:d0:53:a2:c5:ec:a5:11:
8d:c7:ab:f1:30:ab:2f:86:4e:93:8e:29:ab:97:40:46:fd:86:
dd:b6:f8:d2:f9:f2:bf:eb:2b:4e:0b:65:7b:a8:bc:53:59:28:
09:f7:77:26:23:aa:d4:68:cb:12:00:1a:db:19:38:17:2d:cc:
20:79:83:1e:40:d8:60:bb:ac:7c:59:db:7e:40:1a:cf:e4:df:
d4:3a:df:e3:ed:76:05:97:19:00:43:7c:08:62:6c:39:f1:8e:
c8:ca:14:59:b3:ca:b6:de:1c:98:94:a3:0a:7c:0a:30:69:d7:
eb:bd:94:ca:fa:6b:a3:9c:38:5a:83:36:c7:73:a5:25:09:a8:
bf:a6:c5:71:b5:46:93:23:26:d3:4c:eb:ea:30:f8:50:4c:a0:
84:62:ad:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cyFPKNvoO/8CtfORZZFZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMWUwYWFlOTNlYjA1ZmY1ZDQyZGQ3MDE2ZjVkZWEzODFm
Yjg2NjAwHhcNMjUwMTMxMTMwMDQ5WhcNMjUwMjAxMTMwMDQ5WjAzMTEwLwYDVQQD
EygxN2JjY2RkN2M5ZWZhMWI4MzczZDdhMTNhZjljMjk0MDFlMDAyMGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziukEz6uI1qCNeilyRcCHS4phffU
g6mWFoSFijv4/ENSr7Scy7nk5sP0EeeqtgARtwo5rsL5Vh2XSYGptiKFVBP67NL6
VQ89/h14tqU/zG9jpvyUis7myf1XHhC8mcRVaoMT7Ppg50cwpm/Ma/oJrLH4UiGw
u0Yxg701Yd75ojH3I9ph5DQJYHxxwaMxl2Iw5uj51/LaBE4Kv8PijSN+DvF8LyUV
f56EcGiXgQc2CFuXhVraD1jFPX/F0ED6Fa650zL9GVO7Rfzj+VAmXc5jAw4gqnHv
FV5jf4eF1W8tkfYuCwkRituMOXHPIbGEZL83tGHyjMWwXrLJEnuFjBAOhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBe8zdfJ76G4Nz16E6+cKUAeACC+MB8GA1UdIwQY
MBaAFGAeCq6T6wX/XULdcBb13qOB+4ZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUI0S3JwUHJCZjlkUXQxd0Z2WGVvNEg3aG1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8xZmM4NTMtNjUyNi00MDkxLTk1ZjQt
ZjlmNjAxYzA2ODZlLzEvWUI0S3JwUHJCZjlkUXQxd0Z2WGVvNEg3aG1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8xZmM4NTMtNjUyNi00MDkxLTk1ZjQtZjlmNjAxYzA2ODZl
LzEvWUI0S3JwUHJCZjlkUXQxd0Z2WGVvNEg3aG1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYk3Uyrj
Y2ZmjiqcEA8yBsGYxI175ni4YVrO9d2W2CQ4Ik6p+3oEQP3LoGDNrz2fSGq++H5K
BSrK1OjNuN8NzOX0MJp0hiev4MK3vE7NAACiGVAiXkat5VTv9OmE66TeFk/wD5PQ
U6LF7KURjcer8TCrL4ZOk44pq5dARv2G3bb40vnyv+srTgtle6i8U1koCfd3JiOq
1GjLEgAa2xk4Fy3MIHmDHkDYYLusfFnbfkAaz+Tf1Drf4+12BZcZAEN8CGJsOfGO
yMoUWbPKtt4cmJSjCnwKMGnX672Uyvpro5w4WoM2x3OlJQmov6bFcbVGkyMm00zr
6jD4UEyghGKtmQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 17:10:32 2025 by rpki-client