Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
File: YooI4osxu-XBgS_akOfoyKSDNeg.mft (raw, json)
Hash identifier: 8niBiWN1+Nzg+yfXXnqp9hmJY3K2WGNTKiDRRp44fq0=
Subject key identifier: 3F:CC:FD:B8:78:16:36:93:CA:B3:C6:72:1D:05:05:D5:66:BB:50:5B
Authority key identifier: 62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8
Certificate issuer: /CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
Certificate serial: 0194BCE0A370A420EA4BF7C1569E34FEBBAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
Manifest number: 0C49
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: YooI4osxu-XBgS_akOfoyKSDNeg.crl (hash: mP8Ij+ccW9ZN+035VRiX10u58FASAF7JfhO3pYbyJfs=)
2: sx-UCsH84Fo5bc2WmQwkmwlKLoA.roa (hash: Q4Kop0+uG17slbImIq2AZoEMlOj+HfQwg/st4yakPBE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a3:70:a4:20:ea:4b:f7:c1:56:9e:34:fe:bb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=3fccfdb878163693cab3c6721d0505d566bb505b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:83:42:ef:b9:05:02:a7:0c:c9:6a:09:24:
f1:02:80:e0:19:1a:13:76:08:dd:5c:6f:ff:b1:17:
ff:0b:b5:a3:ce:1e:04:3d:5c:f6:e9:e8:48:67:5b:
b9:b5:12:1c:67:04:f2:01:fc:af:64:4a:d8:6e:bb:
38:b1:d4:54:9f:21:46:95:00:43:5d:2c:85:83:53:
79:38:53:3b:da:58:d3:3b:79:68:e6:2e:3f:06:cb:
9e:12:c8:c4:b4:34:37:f5:db:a9:33:11:db:c0:c6:
c6:a9:ae:76:4e:56:10:7c:c7:93:3f:e3:ba:e7:af:
55:63:e4:d4:8b:b1:63:63:3d:94:fd:22:40:15:c8:
ea:e1:df:76:8f:db:96:0f:bd:00:ca:0a:93:39:fc:
dd:4e:5e:8f:d5:ab:f6:72:09:6a:83:1d:b7:a8:f2:
79:ab:cc:9a:bc:1a:e3:8b:11:80:93:4c:73:63:a4:
fd:c4:43:fb:92:b9:d4:0d:02:df:61:d8:c0:96:1c:
fd:93:97:fb:e3:5d:3c:d6:f4:98:f1:a4:c4:a1:9b:
ec:47:d4:88:83:32:d7:b0:39:f1:e5:5c:33:7b:d9:
1c:15:bc:d2:19:0b:ee:b9:82:3a:0b:55:ea:8f:67:
35:fc:8a:51:16:d0:ab:94:04:8e:d5:63:7c:28:45:
ea:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CC:FD:B8:78:16:36:93:CA:B3:C6:72:1D:05:05:D5:66:BB:50:5B
X509v3 Authority Key Identifier:
keyid:62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b7:da:87:59:a0:7f:1a:74:8b:2e:b5:c1:b0:bb:f5:8e:5a:
f4:f0:b2:b7:4a:3e:e7:07:20:c5:a6:31:7e:e4:9f:bf:35:f3:
65:3d:ea:41:4d:03:b7:d2:e4:a4:4c:d1:70:30:9f:7d:7d:b1:
22:a6:d5:53:a0:20:e3:b1:51:c2:37:ab:5b:02:db:30:57:ca:
ab:70:82:29:46:af:63:12:22:11:c7:5b:b2:59:c2:1c:05:65:
03:28:ff:e2:67:e9:7a:c8:84:77:a4:62:79:8c:42:f8:1b:5c:
38:62:fc:ce:6d:2b:56:44:02:76:24:7f:49:f7:a9:b3:d2:27:
d6:e8:61:1d:9f:77:be:15:57:77:d6:8c:f7:b7:98:1e:a6:54:
2a:8b:41:64:5e:7d:9a:94:54:61:94:26:2d:3f:f0:59:eb:a3:
61:e9:e7:26:fb:3c:76:e6:e2:e9:04:24:b5:5d:32:35:cc:47:
6a:0c:5d:49:35:05:cb:21:a0:58:85:26:39:3b:bd:10:fd:f2:
24:fc:fb:bf:7e:9b:f2:52:3c:f9:66:95:65:7b:bb:30:86:9f:
9d:b6:09:2a:63:6f:f4:22:ff:a6:2c:c4:a3:29:91:1e:a1:bc:
d1:32:3b:8a:f7:5e:0c:2c:17:e1:d9:db:71:9b:23:8d:c4:c3:
00:72:b2:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84KNwpCDqS/fBVp40/rutMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyOGEwOGUyOGIzMWJiZTVjMTgxMmZkYTkwZTdlOGM4YTQ4
MzM1ZTgwHhcNMjUwMTMxMTUwMDI1WhcNMjUwMjAxMTUwMDI1WjAzMTEwLwYDVQQD
EygzZmNjZmRiODc4MTYzNjkzY2FiM2M2NzIxZDA1MDVkNTY2YmI1MDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrGDQu+5BQKnDMlqCSTxAoDgGRoT
dgjdXG//sRf/C7Wjzh4EPVz26ehIZ1u5tRIcZwTyAfyvZErYbrs4sdRUnyFGlQBD
XSyFg1N5OFM72ljTO3lo5i4/BsueEsjEtDQ39dupMxHbwMbGqa52TlYQfMeTP+O6
569VY+TUi7FjYz2U/SJAFcjq4d92j9uWD70AygqTOfzdTl6P1av2cglqgx23qPJ5
q8yavBrjixGAk0xzY6T9xEP7krnUDQLfYdjAlhz9k5f741081vSY8aTEoZvsR9SI
gzLXsDnx5Vwze9kcFbzSGQvuuYI6C1Xqj2c1/IpRFtCrlASO1WN8KEXqkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/M/bh4FjaTyrPGch0FBdVmu1BbMB8GA1UdIwQY
MBaAFGKKCOKLMbvlwYEv2pDn6MikgzXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW9vSTRvc3h1LVhCZ1NfYWtPZm95S1NETmVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS84NjkzMjUtMTJjMi00ZmMwLWIxOWIt
MGExZDRjMDIyZTUxLzEvWW9vSTRvc3h1LVhCZ1NfYWtPZm95S1NETmVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS84NjkzMjUtMTJjMi00ZmMwLWIxOWItMGExZDRjMDIyZTUx
LzEvWW9vSTRvc3h1LVhCZ1NfYWtPZm95S1NETmVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbfah1mg
fxp0iy61wbC79Y5a9PCyt0o+5wcgxaYxfuSfvzXzZT3qQU0Dt9LkpEzRcDCffX2x
IqbVU6Ag47FRwjerWwLbMFfKq3CCKUavYxIiEcdbslnCHAVlAyj/4mfpesiEd6Ri
eYxC+BtcOGL8zm0rVkQCdiR/Sfeps9In1uhhHZ93vhVXd9aM97eYHqZUKotBZF59
mpRUYZQmLT/wWeujYennJvs8dubi6QQktV0yNcxHagxdSTUFyyGgWIUmOTu9EP3y
JPz7v36b8lI8+WaVZXu7MIafnbYJKmNv9CL/pizEoymRHqG80TI7ivdeDCwX4dnb
cZsjjcTDAHKyjQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:14 2025 by rpki-client