Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
File: Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft (raw, json)
Hash identifier: TUh7nSR5FCll1a+OOA8hxlJjBIf4A+iirjDkuCf0BiY=
Subject key identifier: D9:6B:B5:4E:E8:3E:1E:DB:C6:BE:B6:6D:33:89:33:A4:0F:84:45:B6
Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
Certificate issuer: /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Certificate serial: 0194BD17BC5B112429DA7DAC71B33330EF03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
Manifest number: 0D7B
Signing time: Fri 31 Jan 2025 16:00:36 +0000
Manifest this update: Fri 31 Jan 2025 16:00:36 +0000
Manifest next update: Sat 01 Feb 2025 16:00:36 +0000
Files and hashes: 1: Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl (hash: Qx7eth9U3hiiuL3eNyiRtPDPOd/B+O8swJrhRP5jPvk=)
2: _DQ1KzWidoIdXZoVyvdN20rg8gM.roa (hash: EOelW7rq3NkXTukVpXSmytqfvzEOSEmblKrH2XLqMOI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:bc:5b:11:24:29:da:7d:ac:71:b3:33:30:ef:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Validity
Not Before: Jan 31 16:00:36 2025 GMT
Not After : Feb 1 16:00:36 2025 GMT
Subject: CN=d96bb54ee83e1edbc6beb66d338933a40f8445b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:72:b6:97:4f:1f:ad:cf:e0:f8:18:b7:6c:fe:
e7:be:f6:20:49:d8:19:fb:60:9e:69:8a:ef:93:38:
25:f6:cb:54:f9:ee:d0:7c:d3:38:7a:c5:f2:5c:a7:
7b:7a:58:c8:a6:2b:2a:67:25:69:a2:ab:66:82:b2:
0e:88:13:84:cb:72:21:92:12:e0:5a:8d:b5:33:55:
7b:ff:18:6d:1c:f9:55:6f:22:f8:9f:a6:7a:b2:0c:
7e:8e:f1:fc:25:74:e3:f5:fd:8b:05:26:72:11:35:
55:97:7b:31:ef:df:95:18:65:4e:ec:58:77:7a:62:
b8:9b:d2:b8:05:0b:9a:ff:bf:1f:8a:fc:42:93:79:
38:5e:69:62:c3:02:9c:25:12:b4:54:93:f1:e9:71:
bf:08:16:ac:ae:5a:8b:c0:ce:87:fa:a3:da:ad:19:
f3:74:37:e8:87:91:c5:14:4a:0b:04:5d:46:73:30:
7f:13:f6:4a:c2:d1:55:83:31:74:19:13:df:07:3b:
97:bb:0c:65:76:29:98:d8:71:54:57:33:75:e1:ca:
8b:60:34:7b:8a:dd:27:2f:26:6e:8e:cf:01:80:2c:
fb:a9:c7:75:c7:db:f2:4c:fc:3d:d0:67:7e:9a:4f:
b3:43:e6:ea:44:25:a7:35:75:fe:3a:24:ba:aa:60:
15:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6B:B5:4E:E8:3E:1E:DB:C6:BE:B6:6D:33:89:33:A4:0F:84:45:B6
X509v3 Authority Key Identifier:
keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d8:20:32:36:92:0b:4f:d8:33:a3:86:15:30:2f:4f:d4:51:
b6:2a:c3:f1:d4:0e:5e:9f:3c:5b:3b:92:e7:4c:3e:32:54:97:
7c:72:11:7e:8d:fe:9c:b3:f4:05:bb:b6:50:92:1e:a1:5a:13:
3f:90:ee:fb:02:ee:9a:31:96:63:5f:cb:4b:fb:7f:ad:ed:ef:
f7:de:8c:26:ae:d4:7e:41:95:fa:9a:c3:49:c2:d7:8c:43:1c:
dd:65:da:02:49:7b:c0:41:11:43:0d:47:e4:c5:a3:99:b0:45:
e5:35:15:d7:57:57:88:14:59:76:db:96:ed:98:c8:a4:45:c4:
6c:be:86:8a:86:9b:a2:2e:b3:a0:33:1f:c1:02:3e:70:98:15:
6c:d0:9c:8c:7e:d0:d6:fe:0e:94:c5:62:a8:d4:af:95:d9:54:
0c:b2:0f:7a:8d:9d:5d:21:b6:dd:8a:00:70:e0:ab:76:fe:f5:
36:f9:2c:84:4b:90:77:82:14:19:e4:31:80:1a:69:41:c1:5f:
7f:4a:75:74:9d:d3:2d:1b:d6:fa:af:38:cd:e4:fa:2c:8c:f1:
4b:47:68:28:9d:87:68:d6:7d:b2:cf:b7:60:4a:d5:f1:e2:92:
23:65:31:86:8b:51:88:a3:82:73:90:5b:97:9e:95:38:ca:8d:
bc:83:29:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F7xbESQp2n2scbMzMO8DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYWVkZmRjNzEzM2U5NWY0MjQ5OGY3NzYwZjY4ZmI4MGZh
YTg0YWMwHhcNMjUwMTMxMTYwMDM2WhcNMjUwMjAxMTYwMDM2WjAzMTEwLwYDVQQD
EyhkOTZiYjU0ZWU4M2UxZWRiYzZiZWI2NmQzMzg5MzNhNDBmODQ0NWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XK2l08frc/g+Bi3bP7nvvYgSdgZ
+2CeaYrvkzgl9stU+e7QfNM4esXyXKd7eljIpisqZyVpoqtmgrIOiBOEy3IhkhLg
Wo21M1V7/xhtHPlVbyL4n6Z6sgx+jvH8JXTj9f2LBSZyETVVl3sx79+VGGVO7Fh3
emK4m9K4BQua/78fivxCk3k4XmliwwKcJRK0VJPx6XG/CBasrlqLwM6H+qParRnz
dDfoh5HFFEoLBF1GczB/E/ZKwtFVgzF0GRPfBzuXuwxldimY2HFUVzN14cqLYDR7
it0nLyZujs8BgCz7qcd1x9vyTPw90Gd+mk+zQ+bqRCWnNXX+OiS6qmAVDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlrtU7oPh7bxr62bTOJM6QPhEW2MB8GA1UdIwQY
MBaAFGGu39xxM+lfQkmPd2D2j7gPqoSsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWE3ZjNIRXo2VjlDU1k5M1lQYVB1QS1xaEt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wMmI1MjItOWYwOC00NmZjLTk5ZWEt
OWYzZThmOWVmYzk5LzEvWWE3ZjNIRXo2VjlDU1k5M1lQYVB1QS1xaEt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8wMmI1MjItOWYwOC00NmZjLTk5ZWEtOWYzZThmOWVmYzk5
LzEvWWE3ZjNIRXo2VjlDU1k5M1lQYVB1QS1xaEt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdggMjaS
C0/YM6OGFTAvT9RRtirD8dQOXp88WzuS50w+MlSXfHIRfo3+nLP0Bbu2UJIeoVoT
P5Du+wLumjGWY1/LS/t/re3v996MJq7UfkGV+prDScLXjEMc3WXaAkl7wEERQw1H
5MWjmbBF5TUV11dXiBRZdtuW7ZjIpEXEbL6Gioaboi6zoDMfwQI+cJgVbNCcjH7Q
1v4OlMViqNSvldlUDLIPeo2dXSG23YoAcOCrdv71NvkshEuQd4IUGeQxgBppQcFf
f0p1dJ3TLRvW+q84zeT6LIzxS0doKJ2HaNZ9ss+3YErV8eKSI2UxhotRiKOCc5Bb
l56VOMqNvIMp3A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:09:22 2025 by rpki-client