Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
File: y4HR86wUr1DcBmV0T5B2t_rbH5s.mft (raw, json)
Hash identifier: 2QpBvMF3e9GbVs5B/w/2iHWSjSI0FOQWWCkoKGgfeZ4=
Subject key identifier: 43:4A:C1:56:46:4B:55:74:F2:73:08:C8:21:2F:6E:AF:CF:EB:B4:88
Authority key identifier: CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B
Certificate issuer: /CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b
Certificate serial: 0194BCA9856EF42C1A6DECE593D23205FA25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
Manifest number: 0298
Signing time: Fri 31 Jan 2025 14:00:13 +0000
Manifest this update: Fri 31 Jan 2025 14:00:13 +0000
Manifest next update: Sat 01 Feb 2025 14:00:13 +0000
Files and hashes: 1: wkYXDy6jmP0Af0Mp2rQ3k6yOAAw.roa (hash: UUIGA4ibmPpEgaOdXWNcs3JAI5RUgnFEIrwSbmNcKfs=)
2: y4HR86wUr1DcBmV0T5B2t_rbH5s.crl (hash: TaLja1sF7dgeztDsP5XbZ2R98wked/wby2qA5l3UhHw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:85:6e:f4:2c:1a:6d:ec:e5:93:d2:32:05:fa:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b
Validity
Not Before: Jan 31 14:00:13 2025 GMT
Not After : Feb 1 14:00:13 2025 GMT
Subject: CN=434ac156464b5574f27308c8212f6eafcfebb488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:14:e3:e1:8f:51:8c:e6:9a:ab:a4:de:f1:f6:
69:a2:06:bb:1d:2c:7b:dc:d5:2f:02:cf:bb:5c:00:
41:87:f4:c8:b9:14:8c:1f:98:ae:ce:15:98:c5:c4:
f0:f4:aa:cc:ff:4e:a9:ee:b4:0d:20:eb:75:94:98:
09:f5:6d:d7:00:db:de:27:38:73:90:7c:31:0d:bf:
83:ec:27:16:0a:c1:cb:15:82:52:ef:c4:ce:0a:7b:
47:a2:eb:04:5f:9d:54:48:49:51:47:9e:95:8e:93:
4a:b1:09:00:91:c8:ea:b0:1d:a3:8b:45:b8:05:ef:
a7:a7:fd:f9:b3:b4:31:b5:b1:2a:bf:23:e9:dc:f2:
fb:0a:71:55:81:11:43:1a:ab:14:4a:71:e7:63:d4:
02:59:81:14:7c:b9:c5:e5:39:67:81:02:9e:8a:ea:
07:e6:d9:af:5c:4f:6d:8c:b6:e3:f3:85:c9:a1:cf:
21:5a:38:16:24:bd:5d:85:33:16:11:87:c9:aa:59:
b2:4f:db:4a:9b:ca:be:ec:b7:41:5c:be:e9:c9:8f:
1b:52:50:4a:41:97:be:ed:d7:f1:57:e3:87:8e:c3:
25:a2:ee:f3:54:41:4b:c1:48:cd:8c:ec:25:86:c2:
da:be:7d:66:e5:90:3c:ff:df:5b:cf:9d:44:5e:34:
9b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4A:C1:56:46:4B:55:74:F2:73:08:C8:21:2F:6E:AF:CF:EB:B4:88
X509v3 Authority Key Identifier:
keyid:CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:04:ab:e1:e8:f3:63:23:55:cb:fe:1b:62:54:9e:fd:c3:6d:
80:2e:8a:d5:38:ad:f4:8b:0d:19:02:d3:1b:cd:c5:34:3b:5d:
5f:16:31:a8:b3:cf:1b:24:5d:27:ce:8e:47:2c:f7:70:cf:d1:
48:b2:ac:52:d0:57:fe:5b:04:48:de:03:28:76:12:2d:d4:86:
5d:37:ee:a5:98:c7:05:b0:07:fd:e2:2e:a5:be:27:ad:20:94:
39:f7:0a:55:0c:06:65:c5:9f:1e:67:14:4c:a2:46:93:ac:47:
f2:03:37:cd:a0:0d:ee:72:8f:61:59:2f:6d:3a:86:74:53:50:
4c:90:98:5f:68:1d:7b:69:ba:4a:12:c4:29:9d:9e:d5:a8:2b:
2b:50:c7:81:33:1e:b1:15:81:e2:f8:47:ca:77:a3:a8:1e:38:
21:98:73:f0:c4:a8:46:2f:72:fc:84:b7:11:77:71:52:52:90:
53:22:47:50:c3:fc:a5:95:49:83:83:0e:9c:d2:84:ce:05:9d:
d6:e8:da:58:d5:21:c0:64:2b:8a:cb:2b:eb:09:5b:78:cb:f3:
c1:62:f2:4e:d6:50:2c:c8:bb:f6:13:b2:f6:50:5f:3d:29:79:
79:94:23:1b:fa:05:5e:7c:b0:13:2f:8e:01:ea:5e:15:b5:51:
a5:7d:4c:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qYVu9Cwabezlk9IyBfolMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiODFkMWYzYWMxNGFmNTBkYzA2NjU3NDRmOTA3NmI3ZmFk
YjFmOWIwHhcNMjUwMTMxMTQwMDEzWhcNMjUwMjAxMTQwMDEzWjAzMTEwLwYDVQQD
Eyg0MzRhYzE1NjQ2NGI1NTc0ZjI3MzA4YzgyMTJmNmVhZmNmZWJiNDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hTj4Y9RjOaaq6Te8fZpoga7HSx7
3NUvAs+7XABBh/TIuRSMH5iuzhWYxcTw9KrM/06p7rQNIOt1lJgJ9W3XANveJzhz
kHwxDb+D7CcWCsHLFYJS78TOCntHousEX51USElRR56VjpNKsQkAkcjqsB2ji0W4
Be+np/35s7QxtbEqvyPp3PL7CnFVgRFDGqsUSnHnY9QCWYEUfLnF5TlngQKeiuoH
5tmvXE9tjLbj84XJoc8hWjgWJL1dhTMWEYfJqlmyT9tKm8q+7LdBXL7pyY8bUlBK
QZe+7dfxV+OHjsMlou7zVEFLwUjNjOwlhsLavn1m5ZA8/99bz51EXjSbnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENKwVZGS1V08nMIyCEvbq/P67SIMB8GA1UdIwQY
MBaAFMuB0fOsFK9Q3AZldE+Qdrf62x+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTRIUjg2d1VyMURjQm1WMFQ1QjJ0X3JiSDVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mODQyYzEtOWE5Ni00NGYxLWEzNmYt
YjEwODE3NTBjZTE1LzEveTRIUjg2d1VyMURjQm1WMFQ1QjJ0X3JiSDVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mODQyYzEtOWE5Ni00NGYxLWEzNmYtYjEwODE3NTBjZTE1
LzEveTRIUjg2d1VyMURjQm1WMFQ1QjJ0X3JiSDVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwSr4ejz
YyNVy/4bYlSe/cNtgC6K1Tit9IsNGQLTG83FNDtdXxYxqLPPGyRdJ86ORyz3cM/R
SLKsUtBX/lsESN4DKHYSLdSGXTfupZjHBbAH/eIupb4nrSCUOfcKVQwGZcWfHmcU
TKJGk6xH8gM3zaAN7nKPYVkvbTqGdFNQTJCYX2gde2m6ShLEKZ2e1agrK1DHgTMe
sRWB4vhHynejqB44IZhz8MSoRi9y/IS3EXdxUlKQUyJHUMP8pZVJg4MOnNKEzgWd
1ujaWNUhwGQrissr6wlbeMvzwWLyTtZQLMi79hOy9lBfPSl5eZQjG/oFXnywEy+O
AepeFbVRpX1MOA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:15 2025 by rpki-client