Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
File: YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft (raw, json)
Hash identifier: Au4S93VvzsM+SO2tsPX3RauipRko0MI+iV85h0aRml4=
Subject key identifier: A3:60:25:AB:A8:92:93:99:AA:74:C3:CE:1F:7E:C4:6B:68:8D:53:01
Authority key identifier: 60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C
Certificate issuer: /CN=6052e1592b12ad2cd39f5be57c058535edb12b9c
Certificate serial: 0194BC3C4CDDF95DAA875304654936C526A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
Manifest number: 09BD
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: 4ohGnWINC3iPFe6nDpOqBOx7d2s.roa (hash: 9AbJKb6HLl4DZwmq7R7PVZTsMXxo/QDCXs2EgLL85AU=)
2: YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl (hash: T4s8y4fqz5Dh5pi1CHxFQtGYPA/u04fMFZTrkLaAFH8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4c:dd:f9:5d:aa:87:53:04:65:49:36:c5:26:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6052e1592b12ad2cd39f5be57c058535edb12b9c
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=a36025aba8929399aa74c3ce1f7ec46b688d5301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d0:5a:62:de:97:50:8e:ba:2e:4c:b9:7c:d5:
a5:11:07:05:45:e4:e8:b8:8a:88:ad:3a:4c:5f:26:
59:f4:dc:b5:29:2b:79:74:61:99:b0:35:33:68:57:
d2:f3:f4:b3:ff:05:81:62:56:19:0f:aa:35:12:ca:
00:83:60:b8:7d:7f:b3:df:84:eb:7d:0e:74:38:c4:
7c:70:ab:85:9d:2d:48:65:7a:ed:c4:ff:d1:2e:58:
ac:80:49:88:59:11:f0:a6:8b:de:af:cb:5a:e2:8d:
d9:3a:7a:4a:0e:a9:eb:3f:a9:95:01:f9:0a:ee:b4:
d1:6f:03:e3:cb:38:ad:b0:05:1f:7f:cd:a7:dc:13:
b9:be:5f:d7:5e:75:a5:d8:a6:20:08:c5:8f:4d:37:
84:d0:7c:9d:d8:04:e6:01:76:65:5c:b7:9b:60:dd:
77:84:9a:14:60:93:8b:4f:fb:9d:95:a3:eb:b4:6d:
29:64:3d:93:54:1a:bd:f5:3f:bc:56:c9:d2:56:b6:
63:f9:e6:9a:34:c2:2e:d1:a9:ed:4d:66:d3:2b:bd:
d8:d8:9c:98:5c:86:9e:ad:31:23:e1:5a:ea:0b:03:
7a:a2:b1:1d:a9:1f:8f:88:ff:1f:af:d1:59:4f:fa:
36:4c:4c:3b:c5:3f:94:5d:68:6e:6e:e8:42:aa:dc:
0c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:60:25:AB:A8:92:93:99:AA:74:C3:CE:1F:7E:C4:6B:68:8D:53:01
X509v3 Authority Key Identifier:
keyid:60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ca:03:fe:ec:dd:9a:69:49:61:25:57:20:21:7f:3b:ff:1f:
be:68:f8:2c:7f:8d:9e:dd:f0:e3:b4:2b:c3:e3:81:b7:8c:3d:
70:bd:17:e1:a3:74:ea:aa:60:66:79:d6:fb:79:40:7a:14:18:
0d:f8:26:38:a2:e7:ce:4a:0e:0f:6b:59:55:eb:dd:2f:b3:50:
7e:9f:8e:84:1d:9e:46:6f:42:0c:2c:6d:1f:43:0d:e9:e4:93:
ab:35:7a:7b:89:d4:7c:0d:97:7b:b9:ea:24:17:ba:c1:31:9b:
7c:a2:cb:a1:17:97:e0:90:8d:d8:6b:2f:09:5f:7a:e1:67:56:
70:21:14:b6:93:5b:e7:fa:91:1b:49:c1:76:2e:91:1c:18:6d:
43:76:a5:78:e6:87:a5:b7:dc:c8:77:df:dc:5c:22:25:68:2d:
97:10:46:d6:8e:4d:ec:2c:c4:b1:a9:b1:2f:33:82:22:a2:e4:
d3:1a:cf:ed:64:30:65:ff:65:9b:ec:75:9b:ee:42:56:dd:cc:
8a:02:fc:19:23:48:5e:3c:22:88:50:d4:eb:e8:a1:47:a1:9f:
2d:95:89:d2:0e:1e:47:df:98:b0:b8:ba:e9:f9:6e:dc:fd:82:
de:18:19:e1:a2:89:d3:90:2a:06:9d:a8:35:38:49:91:dd:9d:
36:75:ba:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PEzd+V2qh1MEZUk2xSalMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTJlMTU5MmIxMmFkMmNkMzlmNWJlNTdjMDU4NTM1ZWRi
MTJiOWMwHhcNMjUwMTMxMTIwMDU1WhcNMjUwMjAxMTIwMDU1WjAzMTEwLwYDVQQD
EyhhMzYwMjVhYmE4OTI5Mzk5YWE3NGMzY2UxZjdlYzQ2YjY4OGQ1MzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdBaYt6XUI66Lky5fNWlEQcFReTo
uIqIrTpMXyZZ9Ny1KSt5dGGZsDUzaFfS8/Sz/wWBYlYZD6o1EsoAg2C4fX+z34Tr
fQ50OMR8cKuFnS1IZXrtxP/RLlisgEmIWRHwpover8ta4o3ZOnpKDqnrP6mVAfkK
7rTRbwPjyzitsAUff82n3BO5vl/XXnWl2KYgCMWPTTeE0Hyd2ATmAXZlXLebYN13
hJoUYJOLT/udlaPrtG0pZD2TVBq99T+8VsnSVrZj+eaaNMIu0antTWbTK73Y2JyY
XIaerTEj4VrqCwN6orEdqR+PiP8fr9FZT/o2TEw7xT+UXWhubuhCqtwMFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNgJauokpOZqnTDzh9+xGtojVMBMB8GA1UdIwQY
MBaAFGBS4VkrEq0s059b5XwFhTXtsSucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZMaFdTc1NyU3pUbjF2bGZBV0ZOZTJ4SzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81ODNhMmMtOTQ2ZC00NTE3LTgwODMt
MjY5ODVjZTQ1OTc4LzEvWUZMaFdTc1NyU3pUbjF2bGZBV0ZOZTJ4SzV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81ODNhMmMtOTQ2ZC00NTE3LTgwODMtMjY5ODVjZTQ1OTc4
LzEvWUZMaFdTc1NyU3pUbjF2bGZBV0ZOZTJ4SzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXcoD/uzd
mmlJYSVXICF/O/8fvmj4LH+Nnt3w47Qrw+OBt4w9cL0X4aN06qpgZnnW+3lAehQY
DfgmOKLnzkoOD2tZVevdL7NQfp+OhB2eRm9CDCxtH0MN6eSTqzV6e4nUfA2Xe7nq
JBe6wTGbfKLLoReX4JCN2GsvCV964WdWcCEUtpNb5/qRG0nBdi6RHBhtQ3aleOaH
pbfcyHff3FwiJWgtlxBG1o5N7CzEsamxLzOCIqLk0xrP7WQwZf9lm+x1m+5CVt3M
igL8GSNIXjwiiFDU6+ihR6GfLZWJ0g4eR9+YsLi66flu3P2C3hgZ4aKJ05AqBp2o
NThJkd2dNnW6RQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:19:25 2025 by rpki-client