Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
File: y02MQeEiyIHZNtkdWwLb2GoucKU.mft (raw, json)
Hash identifier: XXcUP6veaVi5bbYpHhTzUROzwm6PlB0GRjNEr1tJ7/I=
Subject key identifier: 35:D1:71:A0:F5:83:BC:1F:FC:D4:68:96:98:05:65:3D:8F:F1:AE:5D
Authority key identifier: CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
Certificate issuer: /CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Certificate serial: 0194BD4E56CBCECBDD2A2A27F5505C7EA233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:15 +0000
Manifest this update: Fri 31 Jan 2025 17:00:15 +0000
Manifest next update: Sat 01 Feb 2025 17:00:15 +0000
Files and hashes: 1: x9dC2s7poumOX7Fyb1pJRfvWUck.roa (hash: 4hkKgFGTZlThYX8UktL5gydXSJoUP0UEdhwE5OUeAGQ=)
2: y02MQeEiyIHZNtkdWwLb2GoucKU.crl (hash: PhKB4lQbyfG64dlAle93wxD8wBX5q895MKfbyKprxVM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:56:cb:ce:cb:dd:2a:2a:27:f5:50:5c:7e:a2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Validity
Not Before: Jan 31 17:00:15 2025 GMT
Not After : Feb 1 17:00:15 2025 GMT
Subject: CN=35d171a0f583bc1ffcd468969805653d8ff1ae5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2c:00:cf:7f:f2:c5:a9:c4:8a:04:65:86:c5:
54:f1:f5:0c:90:18:2b:77:18:7c:89:36:28:9a:9d:
ed:87:6d:d0:c3:79:81:d4:90:b8:eb:e9:56:7a:c4:
29:44:62:21:d8:cb:c5:d6:58:4d:3b:eb:8b:27:2d:
8f:bd:57:fa:19:67:b7:e2:20:5a:dd:a1:d7:cd:17:
b4:a3:87:a7:3f:a5:e4:fe:b2:cc:03:15:fe:fa:87:
53:07:4c:4e:ba:ed:90:26:38:4c:2f:69:b5:b9:26:
5d:17:6d:4c:00:4b:d0:d4:b8:5b:0f:b8:dc:2b:72:
16:14:c7:b5:2f:ad:df:27:b2:2a:fd:9a:bc:03:c2:
78:e5:29:27:00:38:f3:f0:b3:94:22:26:d6:11:6a:
e0:59:72:27:11:fc:be:ce:8a:47:d8:50:17:99:e7:
53:d0:3c:58:67:81:e2:3e:cc:fe:03:81:f8:c7:db:
89:14:99:58:89:92:ed:8b:2b:d1:2d:82:b7:3e:6b:
d8:41:e7:a1:19:2f:c9:02:7e:76:4b:3f:39:ec:73:
ed:06:49:b1:3f:8d:13:64:b9:1e:d0:7b:b7:e3:3c:
28:ef:4c:5c:db:ac:c3:71:46:9c:4a:55:13:65:79:
a7:b4:31:c6:65:63:94:4c:2f:fd:da:93:7d:44:ca:
22:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D1:71:A0:F5:83:BC:1F:FC:D4:68:96:98:05:65:3D:8F:F1:AE:5D
X509v3 Authority Key Identifier:
keyid:CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:dd:bc:be:c7:05:5e:d4:76:5e:18:bf:2d:de:34:be:2b:2a:
c3:7a:33:e8:e4:81:bf:b5:f6:b3:09:a1:95:8d:7b:e1:bd:ce:
14:7e:0c:8d:72:6b:33:fe:7b:25:02:04:55:d0:80:dc:3d:d2:
12:92:16:5e:99:49:d1:3a:b2:42:af:de:d2:e8:01:4b:7c:7f:
90:8e:25:ed:30:26:56:50:79:36:99:fa:f8:0f:72:48:a3:75:
3d:d5:c3:70:48:d1:7e:5b:81:0c:6a:f8:80:cc:cc:38:46:ed:
7a:d4:71:c9:42:67:4b:6b:c1:5b:08:6f:de:73:16:c5:9c:34:
91:fb:7b:9d:86:47:f1:db:d1:ea:1f:31:82:17:d7:69:08:66:
4e:73:59:5f:89:1e:72:73:50:ef:b9:9c:06:2e:b0:6a:3a:78:
3f:6e:6c:8a:66:a4:0c:30:44:36:60:a1:69:9f:9f:eb:ac:05:
cb:83:3c:56:62:c7:17:a7:64:ce:d4:ff:2a:8c:f7:0e:b2:01:
68:a7:85:cb:2d:a1:35:cb:d3:85:3b:73:4d:46:5f:73:03:3d:
32:83:bb:7b:9f:ae:89:78:81:01:ae:a7:94:ac:4c:ca:56:04:
ce:06:bf:80:02:99:92:5d:64:1c:b2:62:02:0c:59:61:e8:f5:
02:d4:a6:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TlbLzsvdKion9VBcfqIzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNGQ4YzQxZTEyMmM4ODFkOTM2ZDkxZDViMDJkYmQ4NmEy
ZTcwYTUwHhcNMjUwMTMxMTcwMDE1WhcNMjUwMjAxMTcwMDE1WjAzMTEwLwYDVQQD
EygzNWQxNzFhMGY1ODNiYzFmZmNkNDY4OTY5ODA1NjUzZDhmZjFhZTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SwAz3/yxanEigRlhsVU8fUMkBgr
dxh8iTYomp3th23Qw3mB1JC46+lWesQpRGIh2MvF1lhNO+uLJy2PvVf6GWe34iBa
3aHXzRe0o4enP6Xk/rLMAxX++odTB0xOuu2QJjhML2m1uSZdF21MAEvQ1LhbD7jc
K3IWFMe1L63fJ7Iq/Zq8A8J45SknADjz8LOUIibWEWrgWXInEfy+zopH2FAXmedT
0DxYZ4HiPsz+A4H4x9uJFJlYiZLtiyvRLYK3PmvYQeehGS/JAn52Sz857HPtBkmx
P40TZLke0Hu34zwo70xc26zDcUacSlUTZXmntDHGZWOUTC/92pN9RMoieQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXRcaD1g7wf/NRolpgFZT2P8a5dMB8GA1UdIwQY
MBaAFMtNjEHhIsiB2TbZHVsC29hqLnClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTAyTVFlRWl5SUhaTnRrZFd3TGIyR291Y0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hOTEzMWMtODJkMi00MWI3LTllMjAt
MTM2OTYxOTdkM2I2LzEveTAyTVFlRWl5SUhaTnRrZFd3TGIyR291Y0tVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hOTEzMWMtODJkMi00MWI3LTllMjAtMTM2OTYxOTdkM2I2
LzEveTAyTVFlRWl5SUhaTnRrZFd3TGIyR291Y0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfd28vscF
XtR2Xhi/Ld40visqw3oz6OSBv7X2swmhlY174b3OFH4MjXJrM/57JQIEVdCA3D3S
EpIWXplJ0TqyQq/e0ugBS3x/kI4l7TAmVlB5Npn6+A9ySKN1PdXDcEjRfluBDGr4
gMzMOEbtetRxyUJnS2vBWwhv3nMWxZw0kft7nYZH8dvR6h8xghfXaQhmTnNZX4ke
cnNQ77mcBi6wajp4P25simakDDBENmChaZ+f66wFy4M8VmLHF6dkztT/Koz3DrIB
aKeFyy2hNcvThTtzTUZfcwM9MoO7e5+uiXiBAa6nlKxMylYEzga/gAKZkl1kHLJi
AgxZYej1AtSmKg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:07 2025 by rpki-client