Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
File: yND8glkHXNZ18xnXr0-nEwSKUVw.mft (raw, json)
Hash identifier: Bw5AwKn1RUVGuciZV/tpS2GpxnaerpzDPmxF8Qb8LtI=
Subject key identifier: 67:AB:DD:19:96:0B:75:24:CD:BF:A8:99:D5:31:13:A6:36:45:02:99
Authority key identifier: C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C
Certificate issuer: /CN=c8d0fc8259075cd675f319d7af4fa713048a515c
Certificate serial: 0194BC72A79A86AB0D888A06AAE0CC8E58BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: Z406JsldDq5gjN_1Lio77tcegQc.roa (hash: M3kXHnMtNow14QpQkIkQl70hqTwzolvy5YYpOz5DGxs=)
2: yND8glkHXNZ18xnXr0-nEwSKUVw.crl (hash: eRi+hCtwHHE92fBJxbxEU44dVWMa7dfdgXUaITxCZAE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a7:9a:86:ab:0d:88:8a:06:aa:e0:cc:8e:58:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d0fc8259075cd675f319d7af4fa713048a515c
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=67abdd19960b7524cdbfa899d53113a636450299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:c9:2a:c0:86:31:12:22:34:02:b4:16:61:
b3:83:5a:98:77:49:d8:91:dc:bf:31:50:5d:c7:6b:
4a:92:a6:ab:4c:62:f4:6f:31:26:34:62:f5:2a:85:
9c:bd:74:9d:53:95:ee:64:a7:ac:cb:f9:c5:46:0d:
30:66:32:08:53:6e:9d:48:de:a7:fa:6a:64:55:4d:
ee:e7:50:87:f2:ec:09:0b:8d:57:26:76:45:d2:1e:
28:77:94:da:d6:2c:db:9f:2c:2d:19:e9:eb:f2:a0:
28:8c:87:34:7e:ab:8a:b5:a4:e1:56:be:56:f7:33:
6f:f9:1d:f3:df:62:69:a3:c0:3b:8f:50:aa:05:04:
89:d2:db:26:73:70:20:42:5a:de:92:f0:4b:03:9f:
4a:1f:2c:f9:c5:ea:50:2f:e3:a2:c3:5b:bb:11:4a:
f5:9b:5f:b3:87:2f:ff:a0:d4:16:54:47:79:66:d1:
ea:b7:73:0b:38:b4:a6:b4:ac:42:7e:24:f6:5b:0a:
64:17:9b:d5:31:16:6e:0b:ef:59:82:18:d5:fa:b3:
88:5b:38:4e:92:69:04:a4:47:79:b4:ad:80:5f:e7:
88:11:5b:d9:d9:84:c1:18:bb:41:55:3a:40:c7:7b:
80:cb:a2:fc:22:b7:99:a9:56:bd:26:02:9d:ed:60:
ef:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AB:DD:19:96:0B:75:24:CD:BF:A8:99:D5:31:13:A6:36:45:02:99
X509v3 Authority Key Identifier:
keyid:C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c7:af:ec:c9:24:7b:8b:cb:4f:f6:e8:c3:f3:62:92:b2:ff:
f6:0e:38:ba:8d:cc:b2:c4:78:b1:a8:d0:87:dd:23:6e:e8:f6:
6f:2e:da:94:08:a1:d2:8a:b2:37:08:33:fc:6d:9d:f1:35:41:
2a:90:9c:6f:c8:41:4f:af:c9:d4:b5:2b:18:88:15:45:47:6b:
0a:c6:48:d3:26:fa:a2:2f:a4:35:68:03:a5:2e:99:c1:24:04:
af:a8:e2:69:42:4d:21:cd:d9:06:0b:86:6b:fe:2a:26:7b:f0:
71:0b:e6:8d:f8:da:6c:78:12:e5:a0:57:da:72:9c:1a:8b:60:
92:4b:11:f6:5c:24:8c:e1:1b:12:66:3d:b7:ca:08:ca:14:e1:
12:ba:5b:6d:f5:5f:6c:b1:dd:9d:c0:8b:d7:c3:71:8c:66:bd:
8d:56:f2:68:cc:61:99:d2:cc:7b:b5:a4:97:97:8f:d1:9f:8f:
d0:ee:0d:f5:b3:cf:ef:0e:ac:06:a5:14:e3:68:48:e3:51:00:
c8:ed:9d:7c:6f:e3:62:58:bd:f8:6c:98:db:d2:48:41:7b:29:
46:42:d8:ae:ca:a6:0c:73:79:6b:ed:bc:22:11:c1:3e:04:3f:
ec:6e:62:4d:fd:68:97:7b:32:a6:4d:89:69:35:0f:f9:4a:ad:
da:f4:9e:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cqeahqsNiIoGquDMjli6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDBmYzgyNTkwNzVjZDY3NWYzMTlkN2FmNGZhNzEzMDQ4
YTUxNWMwHhcNMjUwMTMxMTMwMDE4WhcNMjUwMjAxMTMwMDE4WjAzMTEwLwYDVQQD
Eyg2N2FiZGQxOTk2MGI3NTI0Y2RiZmE4OTlkNTMxMTNhNjM2NDUwMjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkzJKsCGMRIiNAK0FmGzg1qYd0nY
kdy/MVBdx2tKkqarTGL0bzEmNGL1KoWcvXSdU5XuZKesy/nFRg0wZjIIU26dSN6n
+mpkVU3u51CH8uwJC41XJnZF0h4od5Ta1izbnywtGenr8qAojIc0fquKtaThVr5W
9zNv+R3z32Jpo8A7j1CqBQSJ0tsmc3AgQlrekvBLA59KHyz5xepQL+Oiw1u7EUr1
m1+zhy//oNQWVEd5ZtHqt3MLOLSmtKxCfiT2WwpkF5vVMRZuC+9ZghjV+rOIWzhO
kmkEpEd5tK2AX+eIEVvZ2YTBGLtBVTpAx3uAy6L8IreZqVa9JgKd7WDvZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGer3RmWC3Ukzb+omdUxE6Y2RQKZMB8GA1UdIwQY
MBaAFMjQ/IJZB1zWdfMZ169PpxMEilFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5EOGdsa0hYTloxOHhuWHIwLW5Fd1NLVVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80NWM4NjItOWUzMy00NWM4LWE3Mjgt
N2EyZmQxMDI2OWJlLzEveU5EOGdsa0hYTloxOHhuWHIwLW5Fd1NLVVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC80NWM4NjItOWUzMy00NWM4LWE3MjgtN2EyZmQxMDI2OWJl
LzEveU5EOGdsa0hYTloxOHhuWHIwLW5Fd1NLVVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcev7Mkk
e4vLT/bow/NikrL/9g44uo3MssR4sajQh90jbuj2by7alAih0oqyNwgz/G2d8TVB
KpCcb8hBT6/J1LUrGIgVRUdrCsZI0yb6oi+kNWgDpS6ZwSQEr6jiaUJNIc3ZBguG
a/4qJnvwcQvmjfjabHgS5aBX2nKcGotgkksR9lwkjOEbEmY9t8oIyhThErpbbfVf
bLHdncCL18NxjGa9jVbyaMxhmdLMe7Wkl5eP0Z+P0O4N9bPP7w6sBqUU42hI41EA
yO2dfG/jYli9+GyY29JIQXspRkLYrsqmDHN5a+28IhHBPgQ/7G5iTf1ol3sypk2J
aTUP+Uqt2vSeJw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:32:28 2025 by rpki-client