Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
File: yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft (raw, json)
Hash identifier: r1axtH+fNomeuEde9gLioAGBNMJabyLhuQg1+e7vhuU=
Subject key identifier: B3:64:1D:6A:5F:AA:7C:3A:E3:77:9F:41:6A:E5:86:4E:FE:87:A3:89
Authority key identifier: C8:7C:78:B5:B0:6A:6F:90:2C:51:0F:9B:4A:8F:80:3B:A3:2D:FA:84
Certificate issuer: /CN=c87c78b5b06a6f902c510f9b4a8f803ba32dfa84
Certificate serial: 0194BBCE50453B0CB773D4C2AE1006893E9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: 3Pz5apja5cKJYgXJqXnfQrYcWDc.roa (hash: tS0StXV35H98QzpAWS3J2vqaI9c0cKyaGDVnVfsQlWI=)
2: yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl (hash: TQb1pKESXRnqQN4ZdL0NTnLoj7W3jSYtTqrs3YIIBeY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:50:45:3b:0c:b7:73:d4:c2:ae:10:06:89:3e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87c78b5b06a6f902c510f9b4a8f803ba32dfa84
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=b3641d6a5faa7c3ae3779f416ae5864efe87a389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c4:45:bc:ca:eb:23:e4:5c:23:2d:6a:ea:0a:
0b:cc:42:8c:4b:bc:4d:43:c0:e9:2e:68:59:8f:b2:
7b:5f:cd:da:80:8f:aa:8c:c6:19:a2:27:8f:75:04:
fc:73:16:3d:2b:57:b7:53:08:6d:76:70:2a:76:e2:
07:ef:3b:4a:d3:92:0a:00:96:50:e4:10:46:df:2e:
98:7a:8e:aa:20:2e:f6:82:45:82:b6:bd:e6:c7:5e:
5c:0c:91:e7:1f:c9:e5:10:2b:b2:12:de:e5:96:3c:
45:b4:70:66:e1:35:ac:5a:d9:e9:87:ab:26:47:17:
c0:dd:07:05:3e:e2:86:9f:89:2d:46:8f:f1:ed:7e:
80:4f:39:36:92:ce:6e:05:35:b1:3f:10:1b:0c:c2:
73:14:e9:0e:d1:c1:29:e0:3e:fd:a6:31:df:df:90:
26:2c:33:6b:ce:a2:f0:3c:92:00:0d:10:7c:af:99:
4e:04:1b:18:b5:c5:20:e6:09:f9:f6:b4:3c:06:df:
b0:88:ec:7b:39:7f:49:1f:0a:43:7f:54:b7:04:f2:
14:4b:ce:e5:09:dd:86:d3:0f:d4:68:1d:7e:be:3e:
12:3c:44:19:55:30:82:f4:68:21:71:b2:74:d9:67:
5f:01:01:8c:2a:83:c0:46:b2:2b:bc:57:46:3d:12:
bc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:64:1D:6A:5F:AA:7C:3A:E3:77:9F:41:6A:E5:86:4E:FE:87:A3:89
X509v3 Authority Key Identifier:
keyid:C8:7C:78:B5:B0:6A:6F:90:2C:51:0F:9B:4A:8F:80:3B:A3:2D:FA:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ba:1f:63:fd:f4:75:c2:92:55:5d:68:15:c8:1b:f2:06:fb:
fd:79:62:7e:15:82:75:27:40:58:2e:11:e0:fe:8a:a5:8e:2e:
46:a0:6a:f3:8f:4e:c4:1e:6c:53:66:4b:34:8e:b3:92:20:b7:
6e:66:13:52:9d:a2:4f:be:d6:df:5b:8f:67:5c:2e:c0:bc:4d:
95:09:0a:db:ce:25:84:cc:7b:1a:00:1e:9a:d4:08:92:46:7f:
f7:b6:61:1f:f3:36:09:10:27:f1:ad:a4:a6:ec:f7:b1:91:ea:
81:f9:11:e0:64:23:df:49:4d:aa:13:25:19:55:37:08:f8:b7:
cd:53:5c:ad:40:0d:8b:3c:13:76:2a:de:73:78:1e:91:1f:f6:
e3:2f:f5:82:45:1c:17:11:96:8d:b3:56:4f:d1:a8:eb:82:c0:
d5:f4:01:a7:ed:62:51:42:1e:dd:fb:cf:f3:b6:4c:29:32:56:
a9:2c:57:08:f6:84:01:ba:ae:b2:45:e3:03:db:76:e6:02:a4:
e7:cb:e7:40:ec:17:d4:60:d5:3e:c1:51:df:63:ce:9f:cd:c7:
59:03:0d:b6:44:5c:60:c1:af:20:bc:e8:4f:0b:17:f4:12:98:
d7:ea:5c:78:29:0c:46:d5:f3:43:85:ad:9a:a3:e0:03:53:06:
07:65:c9:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zlBFOwy3c9TCrhAGiT6cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4N2M3OGI1YjA2YTZmOTAyYzUxMGY5YjRhOGY4MDNiYTMy
ZGZhODQwHhcNMjUwMTMxMTAwMDQ3WhcNMjUwMjAxMTAwMDQ3WjAzMTEwLwYDVQQD
EyhiMzY0MWQ2YTVmYWE3YzNhZTM3NzlmNDE2YWU1ODY0ZWZlODdhMzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MRFvMrrI+RcIy1q6goLzEKMS7xN
Q8DpLmhZj7J7X83agI+qjMYZoiePdQT8cxY9K1e3UwhtdnAqduIH7ztK05IKAJZQ
5BBG3y6Yeo6qIC72gkWCtr3mx15cDJHnH8nlECuyEt7lljxFtHBm4TWsWtnph6sm
RxfA3QcFPuKGn4ktRo/x7X6ATzk2ks5uBTWxPxAbDMJzFOkO0cEp4D79pjHf35Am
LDNrzqLwPJIADRB8r5lOBBsYtcUg5gn59rQ8Bt+wiOx7OX9JHwpDf1S3BPIUS87l
Cd2G0w/UaB1+vj4SPEQZVTCC9GghcbJ02WdfAQGMKoPARrIrvFdGPRK8AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNkHWpfqnw643efQWrlhk7+h6OJMB8GA1UdIwQY
MBaAFMh8eLWwam+QLFEPm0qPgDujLfqEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUh4NHRiQnFiNUFzVVEtYlNvLUFPNk10LW9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lMjI5ODAtZDVlNS00MWU4LWEwNmEt
NzQ2OWVmMjAzZjgyLzEveUh4NHRiQnFiNUFzVVEtYlNvLUFPNk10LW9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9lMjI5ODAtZDVlNS00MWU4LWEwNmEtNzQ2OWVmMjAzZjgy
LzEveUh4NHRiQnFiNUFzVVEtYlNvLUFPNk10LW9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrofY/30
dcKSVV1oFcgb8gb7/XlifhWCdSdAWC4R4P6KpY4uRqBq849OxB5sU2ZLNI6zkiC3
bmYTUp2iT77W31uPZ1wuwLxNlQkK284lhMx7GgAemtQIkkZ/97ZhH/M2CRAn8a2k
puz3sZHqgfkR4GQj30lNqhMlGVU3CPi3zVNcrUANizwTdirec3gekR/24y/1gkUc
FxGWjbNWT9Go64LA1fQBp+1iUUIe3fvP87ZMKTJWqSxXCPaEAbquskXjA9t25gKk
58vnQOwX1GDVPsFR32POn83HWQMNtkRcYMGvILzoTwsX9BKY1+pceCkMRtXzQ4Wt
mqPgA1MGB2XJ2A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:35:29 2025 by rpki-client