Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
File: y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft (raw, json)
Hash identifier: 9nBvBfdui8p5jK5GgH3cmcZCvffd8tGIP9wn+mhrQnc=
Subject key identifier: 90:71:E5:A6:48:AD:09:36:1E:D5:CB:E2:5C:0E:61:5B:E4:12:01:37
Authority key identifier: CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
Certificate issuer: /CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Certificate serial: 0194BC72E58AEAF1D865E2FBB04718E8D62D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: fkJKmh5zDN0Kqn8rotQGh7tCyI4.roa (hash: quxYWHt6uVoxRIFcZvvj9cJG53rAivUXlL4xxrWHyXs=)
2: y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl (hash: Z8Qo3R+8wcX70DL4QmIFv1aKppqtFUtKEfkvyuCXL6U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e5:8a:ea:f1:d8:65:e2:fb:b0:47:18:e8:d6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=9071e5a648ad09361ed5cbe25c0e615be4120137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:e4:79:87:e3:e9:01:7d:3a:3c:cf:e5:8b:
85:08:57:18:0a:13:38:e4:9b:bf:48:08:23:48:eb:
4d:dc:21:36:08:6a:cd:b7:92:a0:c3:28:ff:57:cb:
8c:71:42:42:08:da:34:bc:12:2b:21:50:6b:c9:86:
7f:b8:b4:3c:2c:2b:1e:87:67:62:c1:e6:f5:23:68:
25:eb:4c:2d:61:3e:f3:e8:58:95:7b:90:df:26:df:
c9:6f:dc:e2:73:34:f0:3d:2c:e1:e3:3c:f3:6e:81:
28:e0:00:04:34:41:e8:09:40:7a:33:93:38:26:f6:
0f:1b:7c:3c:32:60:0d:05:29:58:c7:72:8b:3c:ca:
9d:8e:b0:26:7e:df:fa:8c:a0:bc:45:d3:1d:9c:a4:
52:3c:05:d2:ea:d0:dc:d8:48:c5:d7:79:27:9d:d7:
2a:21:f6:b0:4b:3a:78:d2:57:a7:e5:55:4c:fb:fe:
f0:71:6e:bb:fc:88:e9:49:55:e8:03:66:94:c1:35:
86:5c:c9:db:f1:95:bf:1f:ff:f8:44:54:6f:5f:72:
09:2d:dc:5c:98:ac:17:62:e3:17:6e:84:01:b8:f6:
9d:8f:a3:39:34:6b:c6:0b:86:2e:03:71:69:63:77:
be:3f:97:0b:e7:47:df:a8:9e:3e:3f:c7:2b:b3:bf:
a1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:71:E5:A6:48:AD:09:36:1E:D5:CB:E2:5C:0E:61:5B:E4:12:01:37
X509v3 Authority Key Identifier:
keyid:CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:02:6b:75:d3:77:3d:1f:88:14:62:65:c7:f7:78:0e:d1:08:
95:94:88:4f:59:06:4e:08:11:00:db:29:eb:c7:04:fe:df:56:
3b:2f:84:9d:08:fe:73:23:b0:32:2e:65:b3:17:d2:fb:e8:93:
08:f7:2a:3b:e9:5b:aa:ab:ad:6b:37:fc:c2:01:df:8c:68:fb:
a0:5c:3c:b7:33:4d:30:19:0f:24:b2:8d:8f:cf:7a:39:4e:60:
d7:ce:72:45:3a:e0:fe:04:30:e8:bc:5a:54:94:ac:8b:9e:df:
b4:e1:02:5b:5a:81:62:89:6a:5c:4c:ab:b2:bb:e1:4e:6d:53:
29:d8:81:c4:ab:40:f0:9e:43:1c:c9:c4:3b:79:fe:19:66:ed:
fc:6b:72:22:4f:53:3a:85:fa:80:c9:97:26:61:87:50:7d:1a:
35:61:a6:c9:e8:4b:ed:5b:b6:b3:58:f4:e7:96:44:24:aa:9e:
92:5d:51:49:dc:50:37:ca:5c:94:b9:cf:52:f4:71:77:10:e8:
37:bb:86:c7:0e:23:97:be:3c:c1:57:d0:f3:2c:11:db:11:8a:
07:98:b2:7a:98:46:62:49:99:86:15:72:b2:00:51:20:32:ff:
18:0c:48:1b:d0:2f:2f:27:7f:31:24:88:00:07:07:03:9f:71:
5d:ca:d6:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cuWK6vHYZeL7sEcY6NYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDA4NTAyN2RkM2QyYjkwMTI1MzNhZGZmYzkzMDVlNWZm
MGE1NDgwHhcNMjUwMTMxMTMwMDMzWhcNMjUwMjAxMTMwMDMzWjAzMTEwLwYDVQQD
Eyg5MDcxZTVhNjQ4YWQwOTM2MWVkNWNiZTI1YzBlNjE1YmU0MTIwMTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVzkeYfj6QF9OjzP5YuFCFcYChM4
5Ju/SAgjSOtN3CE2CGrNt5Kgwyj/V8uMcUJCCNo0vBIrIVBryYZ/uLQ8LCseh2di
web1I2gl60wtYT7z6FiVe5DfJt/Jb9ziczTwPSzh4zzzboEo4AAENEHoCUB6M5M4
JvYPG3w8MmANBSlYx3KLPMqdjrAmft/6jKC8RdMdnKRSPAXS6tDc2EjF13knndcq
IfawSzp40len5VVM+/7wcW67/IjpSVXoA2aUwTWGXMnb8ZW/H//4RFRvX3IJLdxc
mKwXYuMXboQBuPadj6M5NGvGC4YuA3FpY3e+P5cL50ffqJ4+P8crs7+h3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBx5aZIrQk2HtXL4lwOYVvkEgE3MB8GA1UdIwQY
MBaAFMvQhQJ909K5ASUzrf/JMF5f8KVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlDRkFuM1QwcmtCSlRPdF84a3dYbF93cFVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYzIwODMtZjk2Ni00ZTA3LTkyMDct
NzljNDEwY2I2NDU4LzEveTlDRkFuM1QwcmtCSlRPdF84a3dYbF93cFVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jYzIwODMtZjk2Ni00ZTA3LTkyMDctNzljNDEwY2I2NDU4
LzEveTlDRkFuM1QwcmtCSlRPdF84a3dYbF93cFVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbAJrddN3
PR+IFGJlx/d4DtEIlZSIT1kGTggRANsp68cE/t9WOy+EnQj+cyOwMi5lsxfS++iT
CPcqO+lbqqutazf8wgHfjGj7oFw8tzNNMBkPJLKNj896OU5g185yRTrg/gQw6Lxa
VJSsi57ftOECW1qBYolqXEyrsrvhTm1TKdiBxKtA8J5DHMnEO3n+GWbt/GtyIk9T
OoX6gMmXJmGHUH0aNWGmyehL7Vu2s1j055ZEJKqekl1RSdxQN8pclLnPUvRxdxDo
N7uGxw4jl748wVfQ8ywR2xGKB5iyephGYkmZhhVysgBRIDL/GAxIG9AvLyd/MSSI
AAcHA59xXcrWEA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:38 2025 by rpki-client