Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
File: ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft (raw, json)
Hash identifier: wtxHZnTx6mraSWlHseqCI1+zRrkVYNrn5PcRmkcijCM=
Subject key identifier: 8F:80:D3:FD:BC:5D:9A:B4:AD:A0:1E:0A:58:A0:5F:C5:52:CB:72:75
Authority key identifier: C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
Certificate issuer: /CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Certificate serial: 0194BD17A093DBD809532BCBEB7F4B31981B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 16:00:29 +0000
Manifest this update: Fri 31 Jan 2025 16:00:29 +0000
Manifest next update: Sat 01 Feb 2025 16:00:29 +0000
Files and hashes: 1: CA1FNHSnELY2j7gmDHjDS2dsoX8.roa (hash: cFZtRXhk5SHYLVuLELTuEuyCvo+k9H5qi+XN9Dm3gEY=)
2: ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl (hash: /e3MxuAVAyoijOz2QOAetUiFNtYY8MVC5qAhWMY+QvI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a0:93:db:d8:09:53:2b:cb:eb:7f:4b:31:98:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Validity
Not Before: Jan 31 16:00:29 2025 GMT
Not After : Feb 1 16:00:29 2025 GMT
Subject: CN=8f80d3fdbc5d9ab4ada01e0a58a05fc552cb7275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:61:e9:9b:32:6e:2c:a4:1d:8a:0e:40:e3:32:
74:79:4b:83:c6:67:c2:91:a8:37:16:24:31:4a:0e:
36:f7:4c:da:d3:b4:7d:de:38:e2:2a:07:49:9b:52:
f1:29:c6:70:60:29:55:b4:f7:0d:93:dd:cc:b0:bd:
83:f0:a0:9c:63:1c:46:ea:bb:bb:e9:91:20:8e:d3:
a1:0c:84:96:35:2d:1d:8e:ae:52:b6:07:18:69:e6:
17:2a:d7:49:3a:7a:e5:31:86:39:47:31:ad:fa:5f:
52:92:da:f6:d2:7c:34:fb:e9:83:30:a1:ee:e2:86:
91:49:54:f3:88:f9:d4:70:c9:55:55:54:89:71:81:
78:15:3b:78:37:d3:b6:59:12:ee:c6:b3:ec:04:74:
e0:e3:ff:de:e3:d3:fe:bc:c2:a3:2d:4e:9c:20:9f:
9c:27:34:9f:d3:a0:29:af:ea:48:9d:8c:fb:67:9b:
17:40:e9:64:9f:7c:99:f1:c4:d4:a3:b2:ae:dd:73:
75:46:a6:62:e5:ba:4f:1a:a7:12:24:a8:cf:7e:5e:
84:2c:fe:24:4e:91:3c:6c:98:52:e8:b7:33:e4:fe:
93:d8:88:7d:86:1a:c8:6d:98:1f:39:10:f6:dc:d5:
0f:42:d2:12:bf:e4:53:f2:4f:4e:79:48:b2:d6:a8:
dc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:80:D3:FD:BC:5D:9A:B4:AD:A0:1E:0A:58:A0:5F:C5:52:CB:72:75
X509v3 Authority Key Identifier:
keyid:C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c1:16:ab:71:ea:b3:35:7d:c9:4e:b9:f9:88:05:5f:9d:6c:
54:e7:49:fd:23:95:13:07:af:05:17:e9:2b:31:ae:b9:0d:dc:
81:8a:11:a3:e4:64:35:25:d2:7d:5a:ab:81:b3:9b:0a:5c:81:
2c:f6:56:05:eb:0a:81:5f:95:cd:41:e4:c4:a9:c7:b8:8b:29:
e4:ac:ce:da:7a:61:50:96:b2:4c:08:86:14:b5:3c:ff:ab:ee:
d1:d6:a4:d9:1a:1e:e1:50:d1:65:79:96:b8:47:96:71:41:45:
0e:5d:e6:c7:b3:2e:76:32:ab:74:9f:20:c2:db:57:9f:a8:3b:
eb:17:72:06:c4:96:c4:49:e5:a4:a9:14:07:5c:41:49:ba:61:
a1:2c:b6:7e:75:bb:d5:7a:99:91:98:a5:41:d3:68:d8:09:92:
f3:b4:59:da:25:cd:63:a8:76:99:56:ac:7f:20:21:5b:1a:5f:
37:f1:09:c3:1c:22:46:8d:a3:c3:80:f1:72:fd:31:13:d5:8d:
7c:0b:51:f9:bc:6b:e1:1f:66:5a:2e:6e:b9:b3:cc:35:98:eb:
c9:6f:db:fb:74:b7:27:ca:03:3b:ff:53:f0:43:70:39:d2:c3:
f0:18:12:a4:d7:e5:4d:12:92:3d:dc:f7:ac:b6:82:4a:d5:ae:
14:d3:d9:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F6CT29gJUyvL639LMZgbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YjcwZDk3ZWRmMjhjNzYwNzZjMGYwNjliNTJiY2Q4ZTI2
YWUwYmQwHhcNMjUwMTMxMTYwMDI5WhcNMjUwMjAxMTYwMDI5WjAzMTEwLwYDVQQD
Eyg4ZjgwZDNmZGJjNWQ5YWI0YWRhMDFlMGE1OGEwNWZjNTUyY2I3Mjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGHpmzJuLKQdig5A4zJ0eUuDxmfC
kag3FiQxSg4290za07R93jjiKgdJm1LxKcZwYClVtPcNk93MsL2D8KCcYxxG6ru7
6ZEgjtOhDISWNS0djq5StgcYaeYXKtdJOnrlMYY5RzGt+l9Sktr20nw0++mDMKHu
4oaRSVTziPnUcMlVVVSJcYF4FTt4N9O2WRLuxrPsBHTg4//e49P+vMKjLU6cIJ+c
JzSf06Apr+pInYz7Z5sXQOlkn3yZ8cTUo7Ku3XN1RqZi5bpPGqcSJKjPfl6ELP4k
TpE8bJhS6Lcz5P6T2Ih9hhrIbZgfORD23NUPQtISv+RT8k9OeUiy1qjcgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+A0/28XZq0raAeCligX8VSy3J1MB8GA1UdIwQY
MBaAFMm3DZft8ox2B2wPBptSvNjiauC9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWJjTmwtM3lqSFlIYkE4R20xSzgyT0pxNEwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81ZTI5YjUtZjIxNy00YjZiLThkMmYt
ODk3M2IyZDcwNjJjLzEveWJjTmwtM3lqSFlIYkE4R20xSzgyT0pxNEwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS81ZTI5YjUtZjIxNy00YjZiLThkMmYtODk3M2IyZDcwNjJj
LzEveWJjTmwtM3lqSFlIYkE4R20xSzgyT0pxNEwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoMEWq3Hq
szV9yU65+YgFX51sVOdJ/SOVEwevBRfpKzGuuQ3cgYoRo+RkNSXSfVqrgbObClyB
LPZWBesKgV+VzUHkxKnHuIsp5KzO2nphUJayTAiGFLU8/6vu0dak2Roe4VDRZXmW
uEeWcUFFDl3mx7MudjKrdJ8gwttXn6g76xdyBsSWxEnlpKkUB1xBSbphoSy2fnW7
1XqZkZilQdNo2AmS87RZ2iXNY6h2mVasfyAhWxpfN/EJwxwiRo2jw4Dxcv0xE9WN
fAtR+bxr4R9mWi5uubPMNZjryW/b+3S3J8oDO/9T8ENwOdLD8BgSpNflTRKSPdz3
rLaCStWuFNPZlw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:04 2025 by rpki-client