Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
File: y_I74RFfAiqiadnOpDm7i0kjB-I.mft (raw, json)
Hash identifier: Vyo3szEwksbglYGqYizWCpR5aEMOISsxA0gTHP2mSb8=
Subject key identifier: 5F:BA:DF:DC:93:A9:B0:AA:74:E9:FA:F4:7A:03:8E:E3:83:67:DE:C5
Authority key identifier: CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2
Certificate issuer: /CN=cbf23be1115f022aa269d9cea439bb8b492307e2
Certificate serial: 0194BD85434BBA12EE88DDED8DB862A4BDF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:14 +0000
Manifest this update: Fri 31 Jan 2025 18:00:14 +0000
Manifest next update: Sat 01 Feb 2025 18:00:14 +0000
Files and hashes: 1: 2wV8eUCUu5RGsjYa7-OlHblwpFo.roa (hash: 7BqtxHk5pTQN6TSTs893yWqV/YVjq+6kshvNaK8vqGo=)
2: 8qU7PW-1jRTW26c9BxYT5_0Bc9U.roa (hash: HOmxtNFCl//oq/U3tRw6KwgqtgI+NdJR6gPDxjaAFLQ=)
3: b3I98CB-8ce3VcwkD_Ch6vFhQXE.roa (hash: kqwOewNHVrTW/kfVyBv01vxgKvixRF0yFyDls6uT/Uo=)
4: y_I74RFfAiqiadnOpDm7i0kjB-I.crl (hash: diF+bfHtk4YTrqhaxX1bYxZqTB9ZJErpovMr5Lf5rEE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:43:4b:ba:12:ee:88:dd:ed:8d:b8:62:a4:bd:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf23be1115f022aa269d9cea439bb8b492307e2
Validity
Not Before: Jan 31 18:00:14 2025 GMT
Not After : Feb 1 18:00:14 2025 GMT
Subject: CN=5fbadfdc93a9b0aa74e9faf47a038ee38367dec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ff:38:39:18:99:46:c0:3e:66:c0:45:f8:ee:
ae:35:2f:fc:24:ca:b1:82:51:92:0c:c3:2d:ce:5d:
0b:4e:a2:40:e1:d2:74:9a:52:f9:0f:53:c5:f8:1b:
87:7b:b1:59:e0:01:a9:50:45:9f:ba:a3:f3:a8:26:
4e:0c:0a:72:5a:33:a0:4d:a0:4e:93:d4:3c:84:4e:
cd:1e:61:40:2f:95:ca:56:c0:9b:8e:79:ad:ef:7c:
be:07:d0:09:6c:ce:85:56:8c:80:d8:cb:ae:e1:c0:
53:ff:86:52:f7:2b:58:40:49:f0:59:bd:6c:3d:9a:
40:56:5a:60:a4:1e:f1:5a:39:db:3e:3f:bb:f3:41:
48:4d:66:62:d8:5a:86:b2:97:15:12:d3:34:df:79:
65:03:3e:07:f0:b2:f4:ce:45:9e:8b:89:e2:d7:4a:
81:12:52:e0:21:d6:d4:da:f8:16:23:7a:97:f9:16:
27:9b:ab:bc:2e:43:cc:86:fc:b4:ca:c0:a7:c5:16:
0a:d8:8a:78:84:3e:57:4d:2c:97:57:32:6c:0e:04:
9d:20:4e:e9:c0:0c:97:cc:3d:9d:45:ce:64:13:92:
fe:d7:98:fe:90:cc:85:7f:5c:6f:c1:8d:fd:c7:7f:
81:a8:d6:08:dd:f0:e7:46:8a:a5:cb:3f:d2:00:ad:
2c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BA:DF:DC:93:A9:B0:AA:74:E9:FA:F4:7A:03:8E:E3:83:67:DE:C5
X509v3 Authority Key Identifier:
keyid:CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8f:f0:a8:04:6e:24:68:54:2f:9e:19:87:bb:a2:fa:f4:ad:
3d:f7:76:89:93:2d:dc:d2:c1:db:30:b7:4d:63:9b:85:4d:27:
89:15:da:df:17:02:35:76:22:f0:91:5e:74:79:60:d5:2e:b6:
3c:bd:2d:a5:e6:46:fa:ad:65:66:7f:e7:c5:44:58:14:52:5a:
b6:35:c8:47:06:fc:c8:c5:9d:83:cf:b4:15:1f:9c:f5:29:8e:
f5:08:ee:1c:5e:93:b9:b9:e7:c5:8b:f9:55:a8:9a:41:05:bc:
8c:e2:35:4f:55:c0:83:dd:c5:27:5c:bd:91:9e:11:99:8f:06:
48:8c:3d:b2:aa:51:a5:48:9a:b8:60:e7:4a:d1:6c:49:86:b0:
df:cd:b8:8d:e9:7f:a6:c1:02:9b:76:fa:48:34:9e:65:d6:4f:
31:4b:76:b7:a3:e0:a7:b0:6b:61:a8:f8:73:91:8c:39:1c:f0:
94:d6:f4:38:f8:81:95:cd:bf:8b:6f:3f:6b:4b:c4:77:b4:ab:
77:fd:f5:93:a1:d7:a6:22:fb:e9:50:cc:05:21:61:0c:f3:9d:
56:14:97:ea:03:7f:91:d6:c5:0c:3a:b1:d7:b7:03:44:5b:13:
a1:ba:3a:75:4d:af:2f:e4:a4:b7:d3:c6:d5:1e:3f:3c:21:35:
02:e4:1a:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hUNLuhLuiN3tjbhipL31MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZjIzYmUxMTE1ZjAyMmFhMjY5ZDljZWE0MzliYjhiNDky
MzA3ZTIwHhcNMjUwMTMxMTgwMDE0WhcNMjUwMjAxMTgwMDE0WjAzMTEwLwYDVQQD
Eyg1ZmJhZGZkYzkzYTliMGFhNzRlOWZhZjQ3YTAzOGVlMzgzNjdkZWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/84ORiZRsA+ZsBF+O6uNS/8JMqx
glGSDMMtzl0LTqJA4dJ0mlL5D1PF+BuHe7FZ4AGpUEWfuqPzqCZODApyWjOgTaBO
k9Q8hE7NHmFAL5XKVsCbjnmt73y+B9AJbM6FVoyA2Muu4cBT/4ZS9ytYQEnwWb1s
PZpAVlpgpB7xWjnbPj+780FITWZi2FqGspcVEtM033llAz4H8LL0zkWei4ni10qB
ElLgIdbU2vgWI3qX+RYnm6u8LkPMhvy0ysCnxRYK2Ip4hD5XTSyXVzJsDgSdIE7p
wAyXzD2dRc5kE5L+15j+kMyFf1xvwY39x3+BqNYI3fDnRoqlyz/SAK0sVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+639yTqbCqdOn69HoDjuODZ97FMB8GA1UdIwQY
MBaAFMvyO+ERXwIqomnZzqQ5u4tJIwfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveV9JNzRSRmZBaXFpYWRuT3BEbTdpMGtqQi1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81NjMxM2YtZWM0ZS00YzFjLWIzODgt
YmUzMjUyYWM0OTgwLzEveV9JNzRSRmZBaXFpYWRuT3BEbTdpMGtqQi1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81NjMxM2YtZWM0ZS00YzFjLWIzODgtYmUzMjUyYWM0OTgw
LzEveV9JNzRSRmZBaXFpYWRuT3BEbTdpMGtqQi1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhI/wqARu
JGhUL54Zh7ui+vStPfd2iZMt3NLB2zC3TWObhU0niRXa3xcCNXYi8JFedHlg1S62
PL0tpeZG+q1lZn/nxURYFFJatjXIRwb8yMWdg8+0FR+c9SmO9QjuHF6TubnnxYv5
VaiaQQW8jOI1T1XAg93FJ1y9kZ4RmY8GSIw9sqpRpUiauGDnStFsSYaw3824jel/
psECm3b6SDSeZdZPMUt2t6Pgp7BrYaj4c5GMORzwlNb0OPiBlc2/i28/a0vEd7Sr
d/31k6HXpiL76VDMBSFhDPOdVhSX6gN/kdbFDDqx17cDRFsTobo6dU2vL+Skt9PG
1R4/PCE1AuQaTw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:11:47 2025 by rpki-client