Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
File: y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft (raw, json)
Hash identifier: HIIYrUYiO8wOfMur94oMyBIwtH2TFcRJKmb7+ePNysU=
Subject key identifier: D6:D7:D2:56:4C:85:F8:E4:A2:03:62:58:42:9A:39:56:ED:52:47:B5
Authority key identifier: CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3
Certificate issuer: /CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3
Certificate serial: 0194BC3C7ADA1B18B371E2904FF2B1CAFBBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
Manifest number: 1144
Signing time: Fri 31 Jan 2025 12:01:07 +0000
Manifest this update: Fri 31 Jan 2025 12:01:07 +0000
Manifest next update: Sat 01 Feb 2025 12:01:07 +0000
Files and hashes: 1: 01CdWbGh7Iblu72TWh19DMuKsTg.roa (hash: UMhszvGboz7Q5LH0CKudFHnP8+S6bLFVIG5m3eTTe34=)
2: BRkboOx_3fEjuYhSpVsqCaav6Nw.roa (hash: mmNeus1/l5cYym/HIYOW1rRfvqENuE8CN24AevBAmxw=)
3: y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl (hash: Pvd09SFzW/4mEGsq8C8bS0IDS24fB1gNLDFV7OJ0ldA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7a:da:1b:18:b3:71:e2:90:4f:f2:b1:ca:fb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3
Validity
Not Before: Jan 31 12:01:07 2025 GMT
Not After : Feb 1 12:01:07 2025 GMT
Subject: CN=d6d7d2564c85f8e4a2036258429a3956ed5247b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3a:8b:ea:36:38:4e:6b:8b:5f:1f:94:2f:e2:
04:eb:0b:8d:7d:01:20:8e:00:d8:6b:e5:7c:08:39:
d5:a6:b4:1c:14:ba:83:f9:1d:59:2a:e1:f2:be:26:
27:25:ef:62:1a:be:69:8c:40:3b:2b:be:46:5a:e6:
a1:e4:9b:fd:22:33:5d:a8:f7:63:25:a1:be:d2:1b:
c3:a6:4f:65:71:79:7e:42:f2:a6:15:90:1c:18:9b:
13:25:6f:88:af:36:16:5f:b3:80:d0:19:ee:6f:d8:
9a:7b:34:76:9a:aa:c0:e4:ca:96:f7:19:9a:cc:4f:
09:db:a3:fc:67:71:ae:ef:77:71:ea:0c:b2:fb:0e:
96:58:75:60:f3:6d:ef:18:74:8f:ee:09:48:ea:c2:
f3:73:b7:45:9a:c4:2a:f8:70:81:97:a5:54:64:87:
c4:b9:f5:eb:96:8b:cc:81:ad:bf:2f:58:98:e6:67:
40:36:01:84:df:c6:7a:c6:cd:38:5d:84:fd:12:e7:
6c:05:fb:6c:ce:35:6e:62:9f:8b:41:d3:89:a3:2d:
ed:a4:47:87:1b:67:88:ca:21:e4:de:78:1f:bc:64:
12:40:2e:8c:56:72:ac:a8:67:06:be:9f:4f:a8:4c:
ad:b2:2c:9f:cc:8c:23:52:c5:4b:6b:70:19:de:6f:
51:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D7:D2:56:4C:85:F8:E4:A2:03:62:58:42:9A:39:56:ED:52:47:B5
X509v3 Authority Key Identifier:
keyid:CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:44:8a:38:b8:4e:82:70:e2:ae:84:5a:34:78:3f:68:44:7d:
c4:e6:15:18:93:e0:07:cf:f2:77:66:8d:c9:dd:94:9f:2e:84:
0a:32:25:66:5a:82:fc:90:8b:46:98:d1:64:ff:1a:32:56:24:
3f:a1:1f:e4:87:e1:40:69:86:94:9d:52:96:df:8d:8c:42:80:
14:bb:bc:b4:90:c6:6d:47:55:0e:80:11:6c:b7:27:96:e4:18:
0d:e6:6a:9e:79:b0:c6:c5:9b:fa:4a:55:c1:07:ff:91:e3:f0:
f9:76:c3:89:ab:17:3b:aa:21:ba:eb:ca:fc:f9:08:92:cd:6d:
e3:2b:75:19:8e:3b:29:d7:ab:3c:92:48:8e:c8:25:d8:23:13:
59:99:b8:73:61:fb:53:af:05:d8:7d:c6:fb:42:6c:d8:1c:7d:
b4:5e:c5:db:2c:46:e2:51:58:3a:c4:b0:9c:29:62:f2:ed:2c:
53:df:2c:ff:70:ef:97:6c:c4:0e:76:b7:b4:8f:36:41:95:b5:
83:e4:17:a7:00:08:22:a1:c8:1d:f2:9a:1e:d1:20:17:d8:fb:
d7:f7:97:47:b0:e6:ba:fa:60:a2:e1:bc:d2:73:e2:74:14:4c:
ad:ca:3b:df:c5:21:61:01:64:2c:9f:6c:63:0a:9d:77:35:79:
6b:7a:cd:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PHraGxizceKQT/Kxyvu/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNmJmMmI4OTU4NGVjOTYwODAwNDhkYzNmZGMyZTM5ODNj
Mjc3ZjMwHhcNMjUwMTMxMTIwMTA3WhcNMjUwMjAxMTIwMTA3WjAzMTEwLwYDVQQD
EyhkNmQ3ZDI1NjRjODVmOGU0YTIwMzYyNTg0MjlhMzk1NmVkNTI0N2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zqL6jY4TmuLXx+UL+IE6wuNfQEg
jgDYa+V8CDnVprQcFLqD+R1ZKuHyviYnJe9iGr5pjEA7K75GWuah5Jv9IjNdqPdj
JaG+0hvDpk9lcXl+QvKmFZAcGJsTJW+IrzYWX7OA0Bnub9iaezR2mqrA5MqW9xma
zE8J26P8Z3Gu73dx6gyy+w6WWHVg823vGHSP7glI6sLzc7dFmsQq+HCBl6VUZIfE
ufXrlovMga2/L1iY5mdANgGE38Z6xs04XYT9EudsBftszjVuYp+LQdOJoy3tpEeH
G2eIyiHk3ngfvGQSQC6MVnKsqGcGvp9PqEytsiyfzIwjUsVLa3AZ3m9RpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbX0lZMhfjkogNiWEKaOVbtUke1MB8GA1UdIwQY
MBaAFMtr8riVhOyWCABI3D/cLjmDwnfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTJ2eXVKV0U3SllJQUVqY1A5d3VPWVBDZF9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82YTg3ZjEtZTE5Ny00YTIzLTk1M2Qt
MTBmZGZjZTk0NTEzLzEveTJ2eXVKV0U3SllJQUVqY1A5d3VPWVBDZF9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC82YTg3ZjEtZTE5Ny00YTIzLTk1M2QtMTBmZGZjZTk0NTEz
LzEveTJ2eXVKV0U3SllJQUVqY1A5d3VPWVBDZF9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkUSKOLhO
gnDiroRaNHg/aER9xOYVGJPgB8/yd2aNyd2Uny6ECjIlZlqC/JCLRpjRZP8aMlYk
P6Ef5IfhQGmGlJ1Slt+NjEKAFLu8tJDGbUdVDoARbLcnluQYDeZqnnmwxsWb+kpV
wQf/kePw+XbDiasXO6ohuuvK/PkIks1t4yt1GY47KderPJJIjsgl2CMTWZm4c2H7
U68F2H3G+0Js2Bx9tF7F2yxG4lFYOsSwnCli8u0sU98s/3Dvl2zEDna3tI82QZW1
g+QXpwAIIqHIHfKaHtEgF9j71/eXR7DmuvpgouG80nPidBRMrco738UhYQFkLJ9s
YwqddzV5a3rNhQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:52 2025 by rpki-client