Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
File: yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json)
Hash identifier: i0Sj0CR8ZwuQ2Z3h2Vd4gECk0o6VYoc2bvWohZjTiXw=
Subject key identifier: 27:C4:2F:7C:3E:13:5B:31:C6:B5:F4:66:45:24:3C:0B:0F:51:FD:21
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Certificate issuer: /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial: 0194BD174A6716C1F216289A9210B9EE9384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
Manifest number: 0C86
Signing time: Fri 31 Jan 2025 16:00:07 +0000
Manifest this update: Fri 31 Jan 2025 16:00:07 +0000
Manifest next update: Sat 01 Feb 2025 16:00:07 +0000
Files and hashes: 1: KJabg-goYfqIShBpOYNsGhfln78.roa (hash: 5RhSWnJ06JVLJawdnqYDlBh1ZbuwgFFPRLF+/W6LgAk=)
2: kwy8KgUICcwuEJop_j-CKqXu_cg.roa (hash: VpzhVsmBR8ZtX+oH6lHXeHMgxo/zL5mzYyLWURLNaRU=)
3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: uTyCHenRz8nxyByRPBRPq8iwErvOngSI1h61xFozHhc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4a:67:16:c1:f2:16:28:9a:92:10:b9:ee:93:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Validity
Not Before: Jan 31 16:00:07 2025 GMT
Not After : Feb 1 16:00:07 2025 GMT
Subject: CN=27c42f7c3e135b31c6b5f46645243c0b0f51fd21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:54:f2:e5:94:24:23:21:28:c7:a3:3d:58:b8:
22:2a:56:1b:fd:07:73:94:70:7b:5e:e1:89:02:e3:
88:74:74:ab:d5:93:0a:71:45:80:83:2b:71:ab:00:
03:da:c0:85:a6:88:82:c7:ed:99:f0:69:63:2c:b2:
3f:1e:1b:35:9a:b2:40:5c:8f:11:17:96:eb:28:d4:
ed:28:1d:e3:06:d8:29:72:cb:d5:48:4b:a8:cc:a4:
3f:76:e6:14:97:39:d6:09:49:68:84:94:fc:5b:67:
4f:b9:c8:69:af:c3:f3:61:49:2b:d8:58:3e:35:a3:
c2:15:ce:94:57:c4:ec:ee:11:69:f8:c2:da:fe:ff:
b8:ee:d6:0f:23:a9:74:85:8a:36:34:46:e8:f1:46:
47:07:19:dd:bc:78:f4:43:c5:4c:79:79:f1:4e:cb:
02:53:0b:8f:fa:3d:fc:f7:9d:e9:24:28:ab:b1:cf:
5d:75:de:c2:af:5b:50:41:f3:84:90:53:cd:e1:2c:
6a:9f:eb:e7:31:09:8c:98:b8:85:46:b5:cc:c0:31:
e1:42:c8:0c:3b:8d:79:40:3c:3c:83:3d:09:50:45:
38:87:71:d2:04:4f:ba:ae:45:f2:6e:00:1c:fa:47:
c6:67:bd:c7:84:98:cf:3c:c5:23:f9:f8:8a:b0:e0:
97:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C4:2F:7C:3E:13:5B:31:C6:B5:F4:66:45:24:3C:0B:0F:51:FD:21
X509v3 Authority Key Identifier:
keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ee:e4:2b:23:15:cb:f7:84:fc:e2:f6:c4:11:6c:69:b8:90:
b9:ba:f5:94:88:bb:4d:84:86:85:68:63:2a:83:07:d9:5f:87:
66:4a:d2:95:a0:22:d7:ac:0e:61:93:b2:d5:80:22:24:a3:35:
4f:30:66:9b:e5:7a:24:85:32:7f:5e:00:57:05:4c:5a:fb:e1:
a4:f9:84:0b:cc:12:82:b6:ed:b6:44:9e:be:c1:f3:c9:9d:3c:
6a:20:cc:3d:ab:7c:55:09:1d:2f:fd:8a:e2:17:35:11:5b:6a:
55:ae:49:0f:91:6b:fa:c9:f8:ef:9f:ff:6b:b4:97:48:23:9d:
c7:3f:cd:e1:d6:a5:ba:ec:56:a5:0a:13:38:71:85:27:b0:e6:
d7:2f:2c:29:0e:ec:52:78:57:13:53:43:12:14:c3:d7:53:b0:
be:c2:f3:0e:d6:81:6c:1d:4b:34:7b:f7:39:2c:62:85:6a:60:
0f:0c:84:81:15:af:76:66:24:1d:be:3e:61:a5:99:6a:0c:d1:
eb:ae:0a:4a:9d:a9:6d:d8:39:ad:bc:3e:8b:30:b4:ad:70:aa:
44:16:0b:42:3b:10:a8:64:39:68:d7:7c:98:b8:3d:39:e7:a9:
94:3e:6f:5c:f2:08:bc:3e:53:d2:ce:5f:15:ef:00:9e:81:c5:
cb:d9:0b:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F0pnFsHyFiiakhC57pOEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOWUyMGQxMDM0YjQ0ZWY3NWU5NWZkZjdlYjg4ODE1YjZm
N2QyZjgwHhcNMjUwMTMxMTYwMDA3WhcNMjUwMjAxMTYwMDA3WjAzMTEwLwYDVQQD
EygyN2M0MmY3YzNlMTM1YjMxYzZiNWY0NjY0NTI0M2MwYjBmNTFmZDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFTy5ZQkIyEox6M9WLgiKlYb/Qdz
lHB7XuGJAuOIdHSr1ZMKcUWAgytxqwAD2sCFpoiCx+2Z8GljLLI/Hhs1mrJAXI8R
F5brKNTtKB3jBtgpcsvVSEuozKQ/duYUlznWCUlohJT8W2dPuchpr8PzYUkr2Fg+
NaPCFc6UV8Ts7hFp+MLa/v+47tYPI6l0hYo2NEbo8UZHBxndvHj0Q8VMeXnxTssC
UwuP+j38953pJCirsc9ddd7Cr1tQQfOEkFPN4Sxqn+vnMQmMmLiFRrXMwDHhQsgM
O415QDw8gz0JUEU4h3HSBE+6rkXybgAc+kfGZ73HhJjPPMUj+fiKsOCXgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfEL3w+E1sxxrX0ZkUkPAsPUf0hMB8GA1UdIwQY
MBaAFMqeINEDS0Tvdelf3364iBW299L4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xM2E2ODAtZjY5OC00Yzk3LTliYjYt
MTI3MDFhYjUxYWNmLzEveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xM2E2ODAtZjY5OC00Yzk3LTliYjYtMTI3MDFhYjUxYWNm
LzEveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWu7kKyMV
y/eE/OL2xBFsabiQubr1lIi7TYSGhWhjKoMH2V+HZkrSlaAi16wOYZOy1YAiJKM1
TzBmm+V6JIUyf14AVwVMWvvhpPmEC8wSgrbttkSevsHzyZ08aiDMPat8VQkdL/2K
4hc1EVtqVa5JD5Fr+sn475//a7SXSCOdxz/N4daluuxWpQoTOHGFJ7Dm1y8sKQ7s
UnhXE1NDEhTD11OwvsLzDtaBbB1LNHv3OSxihWpgDwyEgRWvdmYkHb4+YaWZagzR
664KSp2pbdg5rbw+izC0rXCqRBYLQjsQqGQ5aNd8mLg9OeeplD5vXPIIvD5T0s5f
Fe8AnoHFy9kL5w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:14:07 2025 by rpki-client