Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
File: y4muY2SP0cie1Wo2G9jB4RlWv7o.mft (raw, json)
Hash identifier: P4L+GRqfQ9lr500z013PPkD+b3PATy0YETj4aCHTHnQ=
Subject key identifier: 1A:08:4B:F9:FD:9B:FD:5D:CD:5A:E1:62:C3:05:46:7D:3F:65:2E:21
Authority key identifier: CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
Certificate issuer: /CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Certificate serial: 0194BD8572AA75509CA6084B216B0E7F4F46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
Manifest number: 112C
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: AC5Czqpvjh0N2Ua52Rhnwc0cRrg.roa (hash: BaLqMkqAO8y3wqAkiCrx9+8UXW+y+iTwdOtnoANbo+k=)
2: y4muY2SP0cie1Wo2G9jB4RlWv7o.crl (hash: qxBfvzpVbQQjzaKdZJLGGBSBhsy1KOonIuQBYtim4eo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:72:aa:75:50:9c:a6:08:4b:21:6b:0e:7f:4f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=1a084bf9fd9bfd5dcd5ae162c305467d3f652e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c9:f4:e9:69:0e:9d:e8:af:74:f5:a9:96:62:
44:77:9c:31:be:a1:e1:21:3e:9e:0d:0e:cf:89:fb:
8e:53:62:73:39:be:d3:03:c9:35:c1:cc:f0:03:9e:
e3:57:28:cf:22:4d:51:28:62:01:04:d2:0c:a8:d5:
08:39:71:b8:28:fb:4c:ef:8f:d9:96:2e:2c:c2:9f:
35:5c:04:4d:65:92:fa:94:4b:c4:aa:e9:20:b6:90:
4b:85:cc:26:9e:38:02:3c:93:98:42:17:5f:dc:c6:
44:ed:46:fa:ac:66:13:16:a9:05:4a:6a:fd:17:7e:
4f:dc:d5:fa:84:1f:bd:72:3c:fe:9a:d6:58:2a:c7:
ba:8d:4f:88:4a:36:37:d2:56:54:32:27:db:c3:6c:
e2:88:fa:e9:7d:a8:6f:76:e6:b9:66:61:af:bb:81:
d8:b7:ec:7c:fc:b2:37:a1:31:3d:1c:51:8b:05:31:
62:15:73:8a:d1:c9:1e:da:c9:24:e3:8b:47:05:59:
3e:34:3c:17:67:70:f4:be:e7:fa:88:2f:d3:51:95:
0e:87:ba:a0:14:b5:77:d7:76:e0:1d:16:dd:c8:ce:
be:84:f4:db:ee:11:7b:0d:7f:46:81:3e:a8:36:36:
92:18:60:46:14:dc:85:a9:50:21:41:cf:12:23:91:
87:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:08:4B:F9:FD:9B:FD:5D:CD:5A:E1:62:C3:05:46:7D:3F:65:2E:21
X509v3 Authority Key Identifier:
keyid:CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:64:44:66:c1:01:14:28:65:47:e5:23:75:96:0a:db:64:64:
e1:f4:a4:5c:27:0c:9b:70:ed:2d:b2:7b:da:bc:ab:ef:35:18:
23:61:b9:11:dc:25:db:62:2a:81:fc:3b:5d:21:70:12:a8:ea:
ad:c2:9d:86:ff:69:22:39:68:3f:fe:55:bf:60:5d:68:e5:78:
9c:ff:ec:43:80:43:7b:7b:b5:88:b4:72:8d:97:fe:08:c5:2e:
67:83:a9:4d:82:f6:a1:fb:41:ef:ff:18:4c:61:12:62:ba:b0:
22:c4:d9:ed:5e:5a:4b:eb:10:3b:9c:6f:a2:9b:dd:a3:97:46:
2a:45:eb:d0:33:89:20:2b:7d:b2:20:35:aa:85:a7:9a:5b:00:
14:53:40:61:c6:29:13:99:f1:53:8d:45:cd:03:08:1e:05:7c:
fd:ac:f9:b8:c3:5e:32:bb:47:15:c5:3a:fe:08:37:c8:99:b1:
27:45:f3:75:a2:71:69:00:f9:3c:be:b9:e4:4e:69:de:b1:f7:
28:56:61:2b:43:8d:77:b6:ca:3f:31:17:72:e6:f4:81:fb:2d:
82:41:fd:77:6e:05:65:c3:16:5b:42:d3:e7:7a:db:03:b2:80:
d9:f9:c1:39:7b:02:c7:e2:48:39:9e:e9:a5:9f:65:cf:e9:70:
34:db:be:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hXKqdVCcpghLIWsOf09GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiODlhZTYzNjQ4ZmQxYzg5ZWQ1NmEzNjFiZDhjMWUxMTk1
NmJmYmEwHhcNMjUwMTMxMTgwMDI2WhcNMjUwMjAxMTgwMDI2WjAzMTEwLwYDVQQD
EygxYTA4NGJmOWZkOWJmZDVkY2Q1YWUxNjJjMzA1NDY3ZDNmNjUyZTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMn06WkOneivdPWplmJEd5wxvqHh
IT6eDQ7PifuOU2JzOb7TA8k1wczwA57jVyjPIk1RKGIBBNIMqNUIOXG4KPtM74/Z
li4swp81XARNZZL6lEvEqukgtpBLhcwmnjgCPJOYQhdf3MZE7Ub6rGYTFqkFSmr9
F35P3NX6hB+9cjz+mtZYKse6jU+ISjY30lZUMifbw2ziiPrpfahvdua5ZmGvu4HY
t+x8/LI3oTE9HFGLBTFiFXOK0cke2skk44tHBVk+NDwXZ3D0vuf6iC/TUZUOh7qg
FLV313bgHRbdyM6+hPTb7hF7DX9GgT6oNjaSGGBGFNyFqVAhQc8SI5GHbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoIS/n9m/1dzVrhYsMFRn0/ZS4hMB8GA1UdIwQY
MBaAFMuJrmNkj9HIntVqNhvYweEZVr+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTRtdVkyU1AwY2llMVdvMkc5akI0UmxXdjdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYmE2ZGYtNTQ4Yy00NGVhLWIxZDUt
ZjRlYjBmZjViYjczLzEveTRtdVkyU1AwY2llMVdvMkc5akI0UmxXdjdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xYmE2ZGYtNTQ4Yy00NGVhLWIxZDUtZjRlYjBmZjViYjcz
LzEveTRtdVkyU1AwY2llMVdvMkc5akI0UmxXdjdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGREZsEB
FChlR+UjdZYK22Rk4fSkXCcMm3DtLbJ72ryr7zUYI2G5Edwl22Iqgfw7XSFwEqjq
rcKdhv9pIjloP/5Vv2BdaOV4nP/sQ4BDe3u1iLRyjZf+CMUuZ4OpTYL2oftB7/8Y
TGESYrqwIsTZ7V5aS+sQO5xvopvdo5dGKkXr0DOJICt9siA1qoWnmlsAFFNAYcYp
E5nxU41FzQMIHgV8/az5uMNeMrtHFcU6/gg3yJmxJ0XzdaJxaQD5PL655E5p3rH3
KFZhK0ONd7bKPzEXcub0gfstgkH9d24FZcMWW0LT53rbA7KA2fnBOXsCx+JIOZ7p
pZ9lz+lwNNu+pg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:38 2025 by rpki-client