Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft
File: Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft (raw, json)
Hash identifier: w/M5GQr765DzRyCecv/EyIv2ajpnIda08oqH5DW2cZc=
Subject key identifier: B5:44:A8:AE:15:6A:A9:56:75:E4:C4:F3:F9:AA:E6:1C:A6:2D:0E:3E
Authority key identifier: 62:9E:80:E8:8B:B7:66:29:1E:5E:C8:03:38:73:25:11:E4:D4:1E:04
Certificate issuer: /CN=629e80e88bb766291e5ec80338732511e4d41e04
Certificate serial: 0194BD8578DCF18C28F8F2909812A4219BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft
Manifest number: 0947
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.crl (hash: UudFN8/i1WeM91Wy/wESJ8IkCAkW0nKO6eni3iaNtaQ=)
2: mD91GJWTGSKSHSgbgQ6P8S7ubME.roa (hash: rmUWh8AmrxJuI/WhfjCkpLYkhkimbTnBeIi7uD7XWfE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:78:dc:f1:8c:28:f8:f2:90:98:12:a4:21:9b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=629e80e88bb766291e5ec80338732511e4d41e04
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=b544a8ae156aa95675e4c4f3f9aae61ca62d0e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4f:79:9c:0f:83:2f:02:ad:d3:f8:cb:af:e3:
f2:a4:dd:68:c4:f2:dc:03:a7:6c:6e:ec:ce:fe:ec:
dd:8c:90:f2:30:16:16:1b:95:98:c2:66:02:1d:d2:
59:f7:1d:08:dc:24:28:a3:1f:87:d2:b0:8e:96:a3:
13:f4:82:bb:fd:08:03:9d:6b:86:7e:56:d0:7c:ee:
13:62:65:54:37:ac:d7:f0:5f:0c:3e:c5:b9:94:44:
1d:9f:5d:8e:2d:09:3c:cb:e7:cf:56:62:cd:89:f4:
24:c9:3d:17:10:b4:c4:6e:4b:ed:24:e4:fd:c0:55:
54:c2:20:b7:22:3c:6a:c2:c3:20:bd:26:8b:31:5c:
cc:1d:99:ad:8d:a2:32:90:3c:a6:08:71:9e:10:da:
ba:58:29:1e:83:2a:2b:3d:1b:40:b9:8b:32:0e:f1:
ad:98:b6:32:17:4b:14:ce:05:2c:3a:d4:f9:8a:11:
2a:7a:ea:f1:f9:b6:de:85:17:2c:a2:c8:9a:aa:2d:
45:31:9b:ce:e7:9a:02:71:1d:f6:c8:49:70:9a:2a:
ba:72:2c:4e:91:29:b5:e0:e4:5c:d7:59:86:3b:71:
70:cf:c3:63:e5:07:e9:b9:3f:c5:a0:bc:71:87:75:
41:95:91:f8:43:d0:2f:dc:20:87:83:f8:86:f6:80:
43:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:44:A8:AE:15:6A:A9:56:75:E4:C4:F3:F9:AA:E6:1C:A6:2D:0E:3E
X509v3 Authority Key Identifier:
keyid:62:9E:80:E8:8B:B7:66:29:1E:5E:C8:03:38:73:25:11:E4:D4:1E:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:fb:99:7a:8d:b9:7a:c4:98:94:43:2b:98:d5:f5:ec:14:ce:
b4:14:ae:93:df:6f:a3:11:ed:e6:00:c0:bf:5f:e8:f5:38:94:
62:21:0b:d4:d3:76:96:7a:1a:39:95:48:a5:d4:cd:7c:86:b7:
83:3b:74:32:05:2f:f3:83:f6:35:0e:fd:33:2d:2c:c0:f7:c1:
72:b9:28:2b:c6:b7:f7:8d:cd:bc:a1:4c:4a:54:b1:5b:aa:eb:
1a:7a:8c:ff:10:20:21:52:ce:26:a9:f1:2c:c4:b4:41:83:23:
10:d1:84:8d:99:28:af:3d:6c:3d:c6:83:41:f3:e3:11:48:6d:
de:ad:3a:f4:50:32:b2:b1:68:27:ff:2c:b6:dd:c2:14:70:a8:
00:18:7a:e6:99:0f:71:2f:3f:e0:43:ce:8c:b6:31:e0:4f:f3:
ff:cf:f0:b6:ab:02:c8:21:aa:bc:5b:15:74:4f:b8:f1:f7:0d:
39:07:66:05:82:d3:c7:51:52:68:c1:a5:af:c2:2f:5f:2c:da:
1c:ae:11:38:aa:04:39:af:bc:04:df:0f:b8:b5:62:f3:46:09:
d1:7a:33:ff:a2:27:11:38:de:ee:64:61:f9:46:9b:46:3f:66:
eb:49:9f:b2:77:d0:0e:9c:ac:ab:73:7a:a9:f2:8a:42:45:ca:
6b:7a:94:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hXjc8Ywo+PKQmBKkIZvXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyOWU4MGU4OGJiNzY2MjkxZTVlYzgwMzM4NzMyNTExZTRk
NDFlMDQwHhcNMjUwMTMxMTgwMDI4WhcNMjUwMjAxMTgwMDI4WjAzMTEwLwYDVQQD
EyhiNTQ0YThhZTE1NmFhOTU2NzVlNGM0ZjNmOWFhZTYxY2E2MmQwZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU95nA+DLwKt0/jLr+PypN1oxPLc
A6dsbuzO/uzdjJDyMBYWG5WYwmYCHdJZ9x0I3CQoox+H0rCOlqMT9IK7/QgDnWuG
flbQfO4TYmVUN6zX8F8MPsW5lEQdn12OLQk8y+fPVmLNifQkyT0XELTEbkvtJOT9
wFVUwiC3IjxqwsMgvSaLMVzMHZmtjaIykDymCHGeENq6WCkegyorPRtAuYsyDvGt
mLYyF0sUzgUsOtT5ihEqeurx+bbehRcsosiaqi1FMZvO55oCcR32yElwmiq6cixO
kSm14ORc11mGO3Fwz8Nj5QfpuT/FoLxxh3VBlZH4Q9Av3CCHg/iG9oBDPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVEqK4VaqlWdeTE8/mq5hymLQ4+MB8GA1UdIwQY
MBaAFGKegOiLt2YpHl7IAzhzJRHk1B4EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXA2QTZJdTNaaWtlWHNnRE9ITWxFZVRVSGdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9mYjg0NGEtZjM3My00ZTNjLThmNzYt
NWI3YzQzMWFiNjFlLzEvWXA2QTZJdTNaaWtlWHNnRE9ITWxFZVRVSGdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9mYjg0NGEtZjM3My00ZTNjLThmNzYtNWI3YzQzMWFiNjFl
LzEvWXA2QTZJdTNaaWtlWHNnRE9ITWxFZVRVSGdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQvuZeo25
esSYlEMrmNX17BTOtBSuk99voxHt5gDAv1/o9TiUYiEL1NN2lnoaOZVIpdTNfIa3
gzt0MgUv84P2NQ79My0swPfBcrkoK8a3943NvKFMSlSxW6rrGnqM/xAgIVLOJqnx
LMS0QYMjENGEjZkorz1sPcaDQfPjEUht3q069FAysrFoJ/8stt3CFHCoABh65pkP
cS8/4EPOjLYx4E/z/8/wtqsCyCGqvFsVdE+48fcNOQdmBYLTx1FSaMGlr8IvXyza
HK4ROKoEOa+8BN8PuLVi80YJ0Xoz/6InETje7mRh+UabRj9m60mfsnfQDpysq3N6
qfKKQkXKa3qUHg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:28 2025 by rpki-client