Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
File: yjvKh2SUaTK6Lai9t9E82GiVr2k.mft (raw, json)
Hash identifier: EJiyrzTSxOvdY4+2D1xY/JVtmsAvXCWghGVmz7sYvnc=
Subject key identifier: F3:A5:CF:63:D0:9B:B2:7A:A4:3A:01:E7:8C:43:3B:00:43:57:C5:99
Authority key identifier: CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
Certificate issuer: /CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Certificate serial: 0194BD176D22082183B0A9FC3240665F3199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
Manifest number: 13BF
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: l3CxsRe6lXWBML9apstKtmGDLng.roa (hash: R2ig12fHn/XZc83X/g+gRKab+UR2maUGxkjxgHc5+u0=)
2: yjvKh2SUaTK6Lai9t9E82GiVr2k.crl (hash: J0SkLDcwSjPHg5CGp8oWcuClcqqlk0P47DRGF9U+BBs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6d:22:08:21:83:b0:a9:fc:32:40:66:5f:31:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=f3a5cf63d09bb27aa43a01e78c433b004357c599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:f1:88:ae:52:25:16:84:60:0a:78:3b:b0:
78:c7:04:4d:4c:68:9d:79:ce:2a:ce:a3:92:18:e0:
31:d0:c2:a7:fa:59:f7:72:12:30:87:7c:c9:52:d0:
80:c9:a6:96:92:02:60:b2:dc:cb:ef:d7:7d:3b:19:
b6:82:e0:23:fa:58:8f:7f:f5:8c:be:6d:d9:d8:56:
a8:04:3d:ca:75:50:66:a8:d5:1d:b9:80:a3:b3:03:
bc:99:b3:4d:c6:69:f2:5d:bf:ae:b0:bf:e1:d3:a4:
ff:18:bd:3f:57:0c:c3:75:70:a1:d9:4d:c7:ba:a6:
3b:1b:f7:d0:a8:00:e7:51:c7:fa:f8:8f:fd:14:21:
45:3d:a2:aa:66:cb:20:c7:1e:b6:7b:1e:cc:69:0d:
09:da:59:f3:a1:28:a4:33:8a:cd:8a:ff:5e:bd:10:
7b:cf:7c:32:a6:17:45:8e:43:97:69:45:0d:49:08:
d9:80:57:41:14:e0:82:8d:9a:16:d0:8b:85:03:9d:
4a:bf:02:69:c7:e2:f9:50:69:35:8b:20:01:e5:33:
8a:49:c9:36:ab:c3:55:35:a1:5a:1f:2c:f4:23:4d:
1e:56:d2:8c:68:5e:de:97:99:b1:0d:ac:69:f9:e6:
50:5c:26:bc:9f:5c:0f:ca:e6:54:9d:49:52:fe:cf:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A5:CF:63:D0:9B:B2:7A:A4:3A:01:E7:8C:43:3B:00:43:57:C5:99
X509v3 Authority Key Identifier:
keyid:CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0c:67:fd:21:5e:97:4b:b8:ab:31:8d:10:f8:31:ec:46:4f:
f3:70:48:26:a1:6d:e9:6a:7b:f8:e1:a3:4d:4d:74:36:0b:b8:
c6:c6:b8:0c:3b:02:53:a6:53:3c:2d:2c:8a:5d:d7:e2:51:78:
92:25:14:c5:91:6b:2b:55:8a:34:f6:3e:d9:d4:87:91:ee:53:
ab:5a:16:78:78:0d:fa:bf:71:fb:07:42:1c:73:2c:47:32:16:
01:44:69:99:a0:f8:92:c2:fd:f1:7f:3d:14:b2:b0:55:5c:74:
cd:8c:de:e6:2a:9d:87:b7:65:ef:fb:3b:f3:62:d1:10:ce:80:
5c:c6:ba:b0:6b:28:cf:aa:69:c1:6a:77:3d:c4:e4:c4:b5:86:
41:e1:1b:9e:90:08:2a:2d:47:5c:0a:e4:79:0d:5d:6c:41:fa:
85:e3:02:eb:b0:13:bf:0e:9c:4c:e5:a2:e5:7e:d0:dd:aa:d9:
7e:0b:ec:ba:d6:c8:ee:c3:4a:c9:3a:68:7c:e1:68:3d:bb:15:
5f:1d:5d:1e:9b:18:8f:97:cc:74:02:ca:1c:2c:70:a6:b6:f3:
a0:1a:df:9f:46:3e:48:13:1b:8c:26:ab:49:21:99:9c:84:7c:
04:47:84:d6:86:18:8e:6a:92:89:91:c5:7a:40:a6:5a:31:e5:
e7:cd:1e:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F20iCCGDsKn8MkBmXzGZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhM2JjYTg3NjQ5NDY5MzJiYTJkYThiZGI3ZDEzY2Q4Njg5
NWFmNjkwHhcNMjUwMTMxMTYwMDE2WhcNMjUwMjAxMTYwMDE2WjAzMTEwLwYDVQQD
EyhmM2E1Y2Y2M2QwOWJiMjdhYTQzYTAxZTc4YzQzM2IwMDQzNTdjNTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryHxiK5SJRaEYAp4O7B4xwRNTGid
ec4qzqOSGOAx0MKn+ln3chIwh3zJUtCAyaaWkgJgstzL79d9Oxm2guAj+liPf/WM
vm3Z2FaoBD3KdVBmqNUduYCjswO8mbNNxmnyXb+usL/h06T/GL0/VwzDdXCh2U3H
uqY7G/fQqADnUcf6+I/9FCFFPaKqZssgxx62ex7MaQ0J2lnzoSikM4rNiv9evRB7
z3wyphdFjkOXaUUNSQjZgFdBFOCCjZoW0IuFA51KvwJpx+L5UGk1iyAB5TOKSck2
q8NVNaFaHyz0I00eVtKMaF7el5mxDaxp+eZQXCa8n1wPyuZUnUlS/s8jiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOlz2PQm7J6pDoB54xDOwBDV8WZMB8GA1UdIwQY
MBaAFMo7yodklGkyui2ovbfRPNhola9pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWp2S2gyU1VhVEs2TGFpOXQ5RTgyR2lWcjJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80ZTBmMmYtNDBiNy00NGQ5LTlmYTAt
MDEyZGRlYWRmNzVlLzEveWp2S2gyU1VhVEs2TGFpOXQ5RTgyR2lWcjJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80ZTBmMmYtNDBiNy00NGQ5LTlmYTAtMDEyZGRlYWRmNzVl
LzEveWp2S2gyU1VhVEs2TGFpOXQ5RTgyR2lWcjJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAxn/SFe
l0u4qzGNEPgx7EZP83BIJqFt6Wp7+OGjTU10Ngu4xsa4DDsCU6ZTPC0sil3X4lF4
kiUUxZFrK1WKNPY+2dSHke5Tq1oWeHgN+r9x+wdCHHMsRzIWAURpmaD4ksL98X89
FLKwVVx0zYze5iqdh7dl7/s782LREM6AXMa6sGsoz6ppwWp3PcTkxLWGQeEbnpAI
Ki1HXArkeQ1dbEH6heMC67ATvw6cTOWi5X7Q3arZfgvsutbI7sNKyTpofOFoPbsV
Xx1dHpsYj5fMdALKHCxwprbzoBrfn0Y+SBMbjCarSSGZnIR8BEeE1oYYjmqSiZHF
ekCmWjHl580eZw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:57:34 2025 by rpki-client