Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
File: YLeUkCpc09J4P8wqpLB5H3mld6I.mft (raw, json)
Hash identifier: a+SMcMqNgRu0B3Ui2dqgmltSTl5BMyJ9PDUe9bfCbiw=
Subject key identifier: B6:D6:6E:72:4F:BA:EF:0E:F2:38:C6:10:54:1C:8B:62:9A:19:63:72
Authority key identifier: 60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
Certificate issuer: /CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Certificate serial: 0194BC72FE7E4D195C9A90E53E6DA43C17F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
Manifest number: 13D5
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: YLeUkCpc09J4P8wqpLB5H3mld6I.crl (hash: xDHDtQ/Wc9hXXkF8btj0oNDxBg1g01M6njNxJKFFUzc=)
2: bx2zbgFzR2bVaPl_B5ZfOBHYjjw.roa (hash: ud4OsdTxDDqxynACtaERs5qzUlmK1nyDHD7M5p1jW+U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fe:7e:4d:19:5c:9a:90:e5:3e:6d:a4:3c:17:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=b6d66e724fbaef0ef238c610541c8b629a196372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a2:81:e9:64:ee:b9:3e:4d:ee:2a:94:5c:b8:
eb:66:94:92:e6:9d:ba:b9:14:13:b5:57:af:b1:23:
21:88:ce:e0:88:fe:c3:e8:78:27:40:9c:ff:53:88:
69:12:af:19:20:89:a7:e5:34:97:cd:b8:57:4e:20:
3e:9e:36:2b:28:62:be:5f:eb:1a:bf:17:5d:67:5e:
f4:c6:bc:bd:5d:73:72:8f:73:7f:2d:1b:35:a3:f7:
ab:79:73:52:a7:b8:bd:9c:b4:05:3f:24:43:55:6b:
04:f5:99:19:d3:d6:06:1f:54:f7:91:25:d1:54:3e:
e3:bc:f6:67:04:47:35:41:bb:a2:38:5c:95:9d:ea:
7c:69:3b:c8:69:65:5a:44:3a:e3:af:b6:53:ec:05:
f6:7e:cf:49:49:30:21:93:14:75:f3:c1:a8:3c:21:
33:92:41:43:fd:22:52:6d:b8:05:b1:cd:1f:c8:22:
0e:a3:a0:3d:7b:79:f4:c1:4a:3e:83:a1:12:9e:26:
92:75:a6:98:05:3c:bf:fe:42:0b:f0:d8:42:56:24:
22:31:4e:4d:f2:40:6e:ff:ec:83:90:74:27:ac:4f:
4f:42:05:1f:6a:de:75:08:a9:8f:71:82:7c:54:49:
c5:eb:33:e1:05:c7:b6:6d:9e:24:d3:9f:18:8e:41:
0f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D6:6E:72:4F:BA:EF:0E:F2:38:C6:10:54:1C:8B:62:9A:19:63:72
X509v3 Authority Key Identifier:
keyid:60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:47:85:a5:53:3c:0f:9f:36:63:a8:63:b9:10:51:31:86:46:
38:6e:46:c3:8a:1d:1d:b1:28:93:24:0c:b4:b3:1e:ba:c4:cc:
b5:dc:5f:7b:19:ea:eb:b2:76:0b:0c:ec:9a:9c:f4:d0:f9:df:
f6:f5:0f:b7:9b:d3:aa:73:bf:75:d6:98:ca:f8:c3:b9:7a:75:
e7:37:2d:4e:62:3a:cd:b7:3a:3f:8a:50:c8:2f:9d:4d:5e:08:
a0:d9:ae:3a:98:e0:e8:aa:56:f4:b3:b4:c7:d3:d9:a1:1e:03:
f6:5e:13:80:06:89:1e:ea:ae:f7:b1:fa:f0:0a:90:22:a1:ba:
ff:d7:32:3a:c1:7c:f1:38:96:f8:ba:ec:7a:a5:0e:d9:95:71:
e7:b3:a6:74:45:11:fe:e0:e2:24:78:9a:f2:bf:ad:7b:64:78:
d8:30:22:18:05:09:1d:f7:ee:8e:ed:52:c8:fb:46:a1:12:ee:
0b:29:8d:15:f4:97:58:85:02:52:b9:f8:14:32:02:dd:92:84:
5a:34:b7:4d:d1:06:29:4f:9e:d7:18:48:d2:16:7e:1c:42:fc:
9a:80:07:7f:43:98:49:5a:c6:13:11:12:6b:a2:e3:b9:9f:1b:
ab:de:f2:f0:dc:76:fd:70:9f:93:a3:0c:19:a8:11:ca:60:76:
67:25:d7:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cv5+TRlcmpDlPm2kPBfxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYjc5NDkwMmE1Y2QzZDI3ODNmY2MyYWE0YjA3OTFmNzlh
NTc3YTIwHhcNMjUwMTMxMTMwMDQwWhcNMjUwMjAxMTMwMDQwWjAzMTEwLwYDVQQD
EyhiNmQ2NmU3MjRmYmFlZjBlZjIzOGM2MTA1NDFjOGI2MjlhMTk2MzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaKB6WTuuT5N7iqUXLjrZpSS5p26
uRQTtVevsSMhiM7giP7D6HgnQJz/U4hpEq8ZIImn5TSXzbhXTiA+njYrKGK+X+sa
vxddZ170xry9XXNyj3N/LRs1o/ereXNSp7i9nLQFPyRDVWsE9ZkZ09YGH1T3kSXR
VD7jvPZnBEc1QbuiOFyVnep8aTvIaWVaRDrjr7ZT7AX2fs9JSTAhkxR188GoPCEz
kkFD/SJSbbgFsc0fyCIOo6A9e3n0wUo+g6ESniaSdaaYBTy//kIL8NhCViQiMU5N
8kBu/+yDkHQnrE9PQgUfat51CKmPcYJ8VEnF6zPhBce2bZ4k058YjkEPMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbWbnJPuu8O8jjGEFQci2KaGWNyMB8GA1UdIwQY
MBaAFGC3lJAqXNPSeD/MKqSweR95pXeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUxlVWtDcGMwOUo0UDh3cXBMQjVIM21sZDZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9kNzFiMmMtMjE0MC00ZTZlLWFiYzQt
NDAxNDc3NDg5MzAyLzEvWUxlVWtDcGMwOUo0UDh3cXBMQjVIM21sZDZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9kNzFiMmMtMjE0MC00ZTZlLWFiYzQtNDAxNDc3NDg5MzAy
LzEvWUxlVWtDcGMwOUo0UDh3cXBMQjVIM21sZDZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0eFpVM8
D582Y6hjuRBRMYZGOG5Gw4odHbEokyQMtLMeusTMtdxfexnq67J2Cwzsmpz00Pnf
9vUPt5vTqnO/ddaYyvjDuXp15zctTmI6zbc6P4pQyC+dTV4IoNmuOpjg6KpW9LO0
x9PZoR4D9l4TgAaJHuqu97H68AqQIqG6/9cyOsF88TiW+LrseqUO2ZVx57OmdEUR
/uDiJHia8r+te2R42DAiGAUJHffuju1SyPtGoRLuCymNFfSXWIUCUrn4FDIC3ZKE
WjS3TdEGKU+e1xhI0hZ+HEL8moAHf0OYSVrGExESa6LjuZ8bq97y8Nx2/XCfk6MM
GagRymB2ZyXXpQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:57 2025 by rpki-client