Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
File: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft (raw, json)
Hash identifier: n5eADoNBz8itbZLnViLmaMueS7NYoaGdde0wJaLxWCk=
Subject key identifier: D7:22:5E:88:18:AA:20:C1:A5:9A:A9:69:C9:84:D5:F8:B9:2E:5E:AB
Authority key identifier: AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
Certificate issuer: /CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Certificate serial: 0194BCA97D43871B1BD911D8649386EFCFBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: G67im2f6_ZhJBmi9qes0fIWNsWo.roa (hash: rcGVW1BtLRG5wqd17uLZEGASDvopWpXiN4N5Gl4c/9Y=)
2: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl (hash: pJXR//arMWxqFdeydKTEq7buInnesEpzYmEQ8PS86fw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7d:43:87:1b:1b:d9:11:d8:64:93:86:ef:cf:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=d7225e8818aa20c1a59aa969c984d5f8b92e5eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:53:8b:43:91:18:2a:35:32:d9:9d:fb:0b:68:
0d:54:1d:ed:93:42:28:9e:e3:ca:11:cf:74:9a:ad:
8c:13:62:9d:35:a9:14:c6:96:25:5f:d1:17:3a:c5:
82:f2:d1:31:01:2a:12:60:7f:c9:ec:5d:38:31:be:
e3:00:41:3a:c4:31:db:fd:3e:d7:c7:f1:82:87:8b:
cd:cc:4c:67:d3:80:f7:d4:d2:57:77:9f:a2:3c:bc:
71:cb:f2:5c:ae:de:7f:0e:98:81:39:69:3d:ec:ae:
8c:87:68:95:84:0a:16:bf:aa:39:5e:a1:5a:7a:8d:
11:e3:b2:b1:55:0a:ba:52:56:9e:aa:65:86:41:cb:
c0:54:90:d6:73:2e:23:53:cd:33:c4:93:47:c4:06:
8d:d5:fd:b2:44:55:04:bb:fb:44:03:04:73:fd:20:
51:5e:6f:60:fd:ca:63:17:fb:0a:37:7f:eb:5f:6d:
cb:ad:33:46:01:1f:ce:22:14:9c:00:c4:d8:2a:1f:
e8:95:0d:60:8d:b0:ee:84:a5:04:86:ae:0e:04:6c:
05:a7:f4:8e:26:4b:12:6b:bc:87:e0:5a:27:ac:ec:
b2:73:3d:f4:29:91:42:1d:64:52:3e:82:52:00:17:
d2:5d:9c:25:3e:00:62:17:4e:ee:6f:d4:44:a2:fc:
3a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:22:5E:88:18:AA:20:C1:A5:9A:A9:69:C9:84:D5:F8:B9:2E:5E:AB
X509v3 Authority Key Identifier:
keyid:AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:35:bc:3e:65:3e:94:70:54:60:b5:15:47:93:33:bc:f5:b0:
0e:cb:3e:28:9c:48:e4:fb:75:b2:60:dc:75:d8:62:ef:10:58:
85:ef:31:d9:6e:a3:96:da:ff:f2:ca:25:3d:de:4f:df:6d:1a:
e7:5c:b0:5f:c6:1f:49:d9:17:c4:0f:a6:d2:c3:d1:d2:bc:92:
40:df:47:08:7b:3a:1d:4b:90:e9:e1:3f:e5:28:ee:ab:37:7c:
f8:93:44:a9:15:6d:cb:cc:4a:7f:0e:4a:68:a5:6f:58:64:4c:
db:ae:2a:5d:f1:52:e2:2d:73:ed:84:ca:02:a5:d4:58:f9:51:
61:90:b6:fb:0d:29:d1:e4:cc:e2:87:f0:15:b8:32:de:94:ea:
9c:17:04:8d:5f:26:02:46:78:d1:22:f5:69:98:22:6d:1a:a8:
bf:f5:ea:a2:df:a1:10:98:c3:e5:d4:51:8f:4f:d6:2d:ac:9e:
91:fc:84:1d:a7:25:e8:d4:57:c0:46:bc:e9:e8:19:12:30:6e:
59:51:58:cf:fc:20:ce:b6:0b:fe:a5:9b:43:04:c1:9c:ff:5f:
6d:b5:88:18:6c:d1:35:6c:a6:af:e3:49:3d:2b:fc:61:ae:54:
71:a2:0a:e6:89:0a:0b:56:24:55:54:93:87:b5:2c:67:96:c2:
1f:d9:3d:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qX1Dhxsb2RHYZJOG78++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOGY1NDM4MDczYTYyMWFlYTc3MmY1Y2I3YTRlZmQ1OGM2
Yjc3NGMwHhcNMjUwMTMxMTQwMDExWhcNMjUwMjAxMTQwMDExWjAzMTEwLwYDVQQD
EyhkNzIyNWU4ODE4YWEyMGMxYTU5YWE5NjljOTg0ZDVmOGI5MmU1ZWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lOLQ5EYKjUy2Z37C2gNVB3tk0Io
nuPKEc90mq2ME2KdNakUxpYlX9EXOsWC8tExASoSYH/J7F04Mb7jAEE6xDHb/T7X
x/GCh4vNzExn04D31NJXd5+iPLxxy/Jcrt5/DpiBOWk97K6Mh2iVhAoWv6o5XqFa
eo0R47KxVQq6UlaeqmWGQcvAVJDWcy4jU80zxJNHxAaN1f2yRFUEu/tEAwRz/SBR
Xm9g/cpjF/sKN3/rX23LrTNGAR/OIhScAMTYKh/olQ1gjbDuhKUEhq4OBGwFp/SO
JksSa7yH4FonrOyycz30KZFCHWRSPoJSABfSXZwlPgBiF07ub9REovw6ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNciXogYqiDBpZqpacmE1fi5Ll6rMB8GA1UdIwQY
MBaAFK2PVDgHOmIa6ncvXLek79WMa3dMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclk5VU9BYzZZaHJxZHk5Y3Q2VHYxWXhyZDB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9kMTRlZjUtZjRkYi00M2JjLThjY2Yt
MTc3OGJhMjVkOGI5LzEvclk5VU9BYzZZaHJxZHk5Y3Q2VHYxWXhyZDB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9kMTRlZjUtZjRkYi00M2JjLThjY2YtMTc3OGJhMjVkOGI5
LzEvclk5VU9BYzZZaHJxZHk5Y3Q2VHYxWXhyZDB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDW8PmU+
lHBUYLUVR5MzvPWwDss+KJxI5Pt1smDcddhi7xBYhe8x2W6jltr/8solPd5P320a
51ywX8YfSdkXxA+m0sPR0rySQN9HCHs6HUuQ6eE/5Sjuqzd8+JNEqRVty8xKfw5K
aKVvWGRM264qXfFS4i1z7YTKAqXUWPlRYZC2+w0p0eTM4ofwFbgy3pTqnBcEjV8m
AkZ40SL1aZgibRqov/Xqot+hEJjD5dRRj0/WLayekfyEHacl6NRXwEa86egZEjBu
WVFYz/wgzrYL/qWbQwTBnP9fbbWIGGzRNWymr+NJPSv8Ya5UcaIK5okKC1YkVVST
h7UsZ5bCH9k9Lw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:57 2025 by rpki-client