Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
File: Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft (raw, json)
Hash identifier: OMuCDi/QgpJnsOOBTWuYSVCqjBs9tLMeKQgaas9z9GA=
Subject key identifier: 28:7E:24:09:E4:D3:10:38:12:23:85:27:2D:DF:B9:B1:32:DE:98:30
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 0194BC04E75F7835BA3CECFE8567FBB46107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
Manifest number: 0D96
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: N1KahuaH4ywVDh5vnQRZfE-0JBo.roa (hash: Wu4yHucu0ZzzchZ+LFYsPLlBMoJ/1TTM1l51egvuWFs=)
2: RB-kmvtWIZxfX4s_GWqpUMWBav8.roa (hash: mz77dGj7KT4Y12imMMdj/cXmV+eNEz+qEQ+Q1rCDxAw=)
3: Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl (hash: 3pzXH7qQr0ZSYCJQDyWDYvnnuS1tMyKhCjdqPXtNipk=)
4: l9XP7gaCaWGis4j2_HYtNslfm-c.roa (hash: onTtv8prZDY2J8tyTCAIkrUkYzKJXBwYs1TgFOfQ6IQ=)
5: tlIKbz1V8UXsvEu0ibiB0w5ibCk.roa (hash: /TM/jP7GUhWFV9jaWV2wl5fbT4nnV1fM8WvoCBtZe94=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e7:5f:78:35:ba:3c:ec:fe:85:67:fb:b4:61:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=287e2409e4d31038122385272ddfb9b132de9830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:06:27:e8:7d:c7:dd:9e:c0:00:b7:f7:53:af:
98:fc:3f:bc:8e:ca:f6:f3:63:1e:fd:24:51:f9:ea:
3f:01:d5:cc:de:3d:06:f3:81:9b:cd:85:37:96:a9:
30:6d:19:bc:52:20:bd:99:94:41:13:3f:ea:65:b4:
30:7a:bc:58:03:9d:60:e6:1e:de:3a:77:ad:41:ab:
96:63:c4:ad:15:33:ed:21:f3:e6:6a:41:ce:df:09:
b7:c7:60:22:12:0c:eb:5c:a3:dd:51:be:92:03:08:
5e:3d:08:5d:5e:e5:70:d6:b5:ed:ea:cd:85:7a:8a:
0b:09:df:ac:3c:78:23:d9:a4:de:93:ad:5b:6a:de:
09:db:4b:7c:24:6d:67:80:6f:af:f6:23:2b:d1:8a:
83:32:be:ad:76:3a:1f:30:46:ca:93:de:ff:62:1f:
c6:7a:cf:15:12:18:87:c9:31:76:b4:34:32:43:bb:
cb:02:97:88:8a:5a:00:79:1e:5a:76:84:42:b8:10:
63:b6:2e:ed:33:1a:4b:ca:ae:03:c1:cd:19:75:ce:
95:4c:6d:3b:ff:dc:4d:2a:60:3b:53:78:8a:42:00:
bf:2b:de:30:9a:51:8e:44:b9:a6:cb:24:7a:cf:93:
64:e4:d2:eb:b5:3a:94:86:c3:ac:c5:e3:62:ec:f4:
73:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7E:24:09:E4:D3:10:38:12:23:85:27:2D:DF:B9:B1:32:DE:98:30
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:99:8a:77:18:89:7c:49:f6:d4:19:8a:f4:68:58:4e:2f:d2:
eb:8b:61:e3:9e:32:8d:01:ae:4f:4b:38:0d:af:fb:dd:65:9f:
2f:1f:69:54:95:86:c9:ce:03:dd:4a:92:24:9b:dd:88:ca:37:
79:95:49:03:a7:7e:66:46:1f:c1:44:77:c1:80:af:8a:8e:99:
b8:f5:1b:cf:28:72:90:d5:f8:f1:a2:49:45:d5:20:d1:35:be:
69:28:f6:52:a4:9f:a7:34:88:32:79:bc:80:dd:15:e5:83:54:
4a:f5:b6:1c:20:55:e0:dc:82:92:f6:0b:86:07:e9:21:81:39:
35:32:66:81:57:56:15:fe:e6:d5:55:d6:2f:8c:c8:e0:14:e0:
58:e2:90:e7:3c:4b:52:22:9a:98:e5:f5:de:bf:31:bf:f7:69:
7b:4a:fb:2a:90:27:e3:d0:02:c0:5a:7d:7c:a4:72:00:76:1d:
09:7c:b0:45:1c:99:ee:63:a4:2d:c3:39:86:08:e1:01:21:ef:
eb:a8:6c:ac:c2:2d:24:49:86:3a:ce:77:ca:3e:6d:a3:9a:bc:
79:0b:f8:c1:f1:a2:f1:ac:cb:af:e4:bc:61:e1:2a:7d:72:30:
00:5b:9c:72:52:69:3b:fc:87:e4:77:06:d7:f9:80:c0:ca:26:
7a:ba:d9:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BOdfeDW6POz+hWf7tGEHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh
NDA4MjMwHhcNMjUwMTMxMTEwMDI1WhcNMjUwMjAxMTEwMDI1WjAzMTEwLwYDVQQD
EygyODdlMjQwOWU0ZDMxMDM4MTIyMzg1MjcyZGRmYjliMTMyZGU5ODMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAYn6H3H3Z7AALf3U6+Y/D+8jsr2
82Me/SRR+eo/AdXM3j0G84GbzYU3lqkwbRm8UiC9mZRBEz/qZbQwerxYA51g5h7e
OnetQauWY8StFTPtIfPmakHO3wm3x2AiEgzrXKPdUb6SAwhePQhdXuVw1rXt6s2F
eooLCd+sPHgj2aTek61bat4J20t8JG1ngG+v9iMr0YqDMr6tdjofMEbKk97/Yh/G
es8VEhiHyTF2tDQyQ7vLApeIiloAeR5adoRCuBBjti7tMxpLyq4Dwc0Zdc6VTG07
/9xNKmA7U3iKQgC/K94wmlGORLmmyyR6z5Nk5NLrtTqUhsOsxeNi7PRzJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCh+JAnk0xA4EiOFJy3fubEy3pgwMB8GA1UdIwQY
MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt
ZDJjZDI2YjY5ZGYxLzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUtZDJjZDI2YjY5ZGYx
LzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpmKdxiJ
fEn21BmK9GhYTi/S64th454yjQGuT0s4Da/73WWfLx9pVJWGyc4D3UqSJJvdiMo3
eZVJA6d+ZkYfwUR3wYCvio6ZuPUbzyhykNX48aJJRdUg0TW+aSj2UqSfpzSIMnm8
gN0V5YNUSvW2HCBV4NyCkvYLhgfpIYE5NTJmgVdWFf7m1VXWL4zI4BTgWOKQ5zxL
UiKamOX13r8xv/dpe0r7KpAn49ACwFp9fKRyAHYdCXywRRyZ7mOkLcM5hgjhASHv
66hsrMItJEmGOs53yj5to5q8eQv4wfGi8azLr+S8YeEqfXIwAFucclJpO/yH5HcG
1/mAwMomerrZZQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:37 2025 by rpki-client