Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
File: ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft (raw, json)
Hash identifier: YM9vJS0pmSGquZKY2s2G6vUNNdefLJ8NpMyJNcHWUyU=
Subject key identifier: B9:11:F7:1E:7B:70:CE:9F:31:82:19:4C:F5:2E:AA:D0:D9:C6:A9:DC
Authority key identifier: C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
Certificate issuer: /CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Certificate serial: 0194BD178464EF6A136EF2D1E256A5AE3F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
Manifest number: 0B98
Signing time: Fri 31 Jan 2025 16:00:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 16:00:22 +0000
Files and hashes: 1: ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl (hash: XBkcj/PTf3XyorcsUdCsjwXiwSfgDoOqVSA7esQXyp0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:84:64:ef:6a:13:6e:f2:d1:e2:56:a5:ae:3f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 16:00:22 2025 GMT
Subject: CN=b911f71e7b70ce9f3182194cf52eaad0d9c6a9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:51:39:c4:7d:53:a2:c2:db:9b:92:10:1b:4c:
0c:6f:b5:bd:40:f8:b0:e4:4d:97:92:31:6f:ab:77:
53:3f:48:39:72:c8:6c:0c:95:32:01:41:dc:c8:aa:
f0:81:25:bb:bf:3b:92:37:45:65:27:fe:e6:dd:36:
de:fb:b3:b3:55:fc:06:51:28:40:05:c3:de:e2:11:
5d:4e:83:7f:1b:d2:cf:00:f5:a0:11:33:6a:c7:b6:
8c:e3:f9:7d:58:e8:a9:b8:c6:15:5b:9a:7e:d8:2f:
88:e6:1b:b1:96:3d:1b:3d:8c:62:5b:18:b1:d5:1d:
3e:3d:6c:98:01:fc:22:dd:81:f5:41:b2:ad:bb:6d:
59:3e:38:1a:3c:5e:c3:c0:0c:57:e8:b3:b9:1e:63:
8f:31:24:7a:74:1c:13:7a:87:3a:db:22:64:a3:a6:
d3:71:40:01:17:36:55:03:25:ac:04:a9:8a:cc:31:
db:2f:73:38:fc:2d:58:d9:e2:a0:14:1c:df:93:6b:
2b:8f:4d:9a:9f:bb:4a:66:69:aa:ca:86:d5:f8:df:
da:9c:14:96:d3:db:64:c5:80:28:bc:c4:38:dc:31:
b1:d9:b1:b0:26:15:29:c8:86:f5:ca:f9:86:d6:97:
10:10:e6:bf:6f:a6:e5:a6:fb:61:f7:7e:a0:9c:16:
dc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:11:F7:1E:7B:70:CE:9F:31:82:19:4C:F5:2E:AA:D0:D9:C6:A9:DC
X509v3 Authority Key Identifier:
keyid:C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a3:34:72:cd:7b:97:62:cb:6e:46:40:aa:ad:a9:52:a8:52:
4b:b7:c5:4b:d5:c9:f9:c5:dd:74:4b:9a:b0:5c:1c:e7:03:51:
73:a2:a4:4b:bc:45:91:45:c8:07:d1:3c:a8:1e:04:23:34:1a:
ec:a4:ef:92:32:45:6f:88:ad:70:55:4e:e5:a1:1e:2e:75:50:
02:33:b5:67:d2:a7:f6:ef:fb:1c:20:2e:0f:b9:0c:39:56:a3:
31:3b:7a:81:c2:a3:51:30:b6:d6:0c:57:38:ac:65:17:14:01:
c7:82:74:1a:e2:cd:2b:1c:5b:d4:fa:c0:50:05:2d:d3:ec:66:
95:60:33:88:04:51:20:2c:25:b7:fe:a0:69:42:44:8c:ef:f8:
da:a3:dc:39:5b:1e:2b:06:22:37:d8:d9:a2:69:84:dd:d2:74:
e0:db:6b:29:c8:2b:46:87:70:21:a5:41:a2:49:b1:5c:31:4c:
cd:a1:21:1e:26:59:92:f0:4e:71:00:db:72:59:f6:66:c4:2d:
d0:c8:4d:da:33:60:3b:f2:8e:8b:48:cc:ba:b5:21:af:7e:23:
fd:b5:25:e6:9d:90:f0:ae:91:c6:d0:24:7a:ae:3c:9a:5f:df:
9c:62:d9:da:a7:1e:e4:ec:14:07:29:cf:d4:7f:ab:6d:4a:88:
9b:1f:34:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F4Rk72oTbvLR4lalrj9nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZGEyZmY1YTc3ZTc4ZWVjMzAzM2RkYTU3NDlhNGE4YzFl
NTUxNjQwHhcNMjUwMTMxMTYwMDIyWhcNMjUwMjAxMTYwMDIyWjAzMTEwLwYDVQQD
EyhiOTExZjcxZTdiNzBjZTlmMzE4MjE5NGNmNTJlYWFkMGQ5YzZhOWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1E5xH1TosLbm5IQG0wMb7W9QPiw
5E2XkjFvq3dTP0g5cshsDJUyAUHcyKrwgSW7vzuSN0VlJ/7m3Tbe+7OzVfwGUShA
BcPe4hFdToN/G9LPAPWgETNqx7aM4/l9WOipuMYVW5p+2C+I5huxlj0bPYxiWxix
1R0+PWyYAfwi3YH1QbKtu21ZPjgaPF7DwAxX6LO5HmOPMSR6dBwTeoc62yJko6bT
cUABFzZVAyWsBKmKzDHbL3M4/C1Y2eKgFBzfk2srj02an7tKZmmqyobV+N/anBSW
09tkxYAovMQ43DGx2bGwJhUpyIb1yvmG1pcQEOa/b6blpvth936gnBbcNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkR9x57cM6fMYIZTPUuqtDZxqncMB8GA1UdIwQY
MBaAFMnaL/WnfnjuwwM92ldJpKjB5VFkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRvdjlhZC1lTzdEQXozYVYwbWtxTUhsVVdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zYzA4YWUtZWI2ZC00NjA4LTgyYzMt
NmMwNGE2ZWQxM2M1LzEveWRvdjlhZC1lTzdEQXozYVYwbWtxTUhsVVdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8zYzA4YWUtZWI2ZC00NjA4LTgyYzMtNmMwNGE2ZWQxM2M1
LzEveWRvdjlhZC1lTzdEQXozYVYwbWtxTUhsVVdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVKM0cs17
l2LLbkZAqq2pUqhSS7fFS9XJ+cXddEuasFwc5wNRc6KkS7xFkUXIB9E8qB4EIzQa
7KTvkjJFb4itcFVO5aEeLnVQAjO1Z9Kn9u/7HCAuD7kMOVajMTt6gcKjUTC21gxX
OKxlFxQBx4J0GuLNKxxb1PrAUAUt0+xmlWAziARRICwlt/6gaUJEjO/42qPcOVse
KwYiN9jZommE3dJ04NtrKcgrRodwIaVBokmxXDFMzaEhHiZZkvBOcQDbcln2ZsQt
0MhN2jNgO/KOi0jMurUhr34j/bUl5p2Q8K6RxtAkeq48ml/fnGLZ2qce5OwUBynP
1H+rbUqImx80hQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:46:58 2025 by rpki-client