Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
File: Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft (raw, json)
Hash identifier: B5gQdVi/PTvMf7JFchtxgr6Z3vUiGHPAIQlAa0fb/gI=
Subject key identifier: 79:D7:11:72:B6:90:5C:A5:BE:72:0D:48:AF:BE:04:91:B4:C5:B3:32
Authority key identifier: 63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
Certificate issuer: /CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Certificate serial: 0194BD85649B27FCA2A2E0C173B5A8B2FECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
Manifest number: 135B
Signing time: Fri 31 Jan 2025 18:00:23 +0000
Manifest this update: Fri 31 Jan 2025 18:00:23 +0000
Manifest next update: Sat 01 Feb 2025 18:00:23 +0000
Files and hashes: 1: Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl (hash: TyWiuDVgCtwJVE1RmFylJ9GOO5HHX3yc3bDHQ1RpzpE=)
2: trc9WRrx0GcsdoyWUNx1ByDuLOs.roa (hash: O5foXyUGS0pgYakUN+dT6VqKLJZgwkNIaZ4jTeLOo7U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:64:9b:27:fc:a2:a2:e0:c1:73:b5:a8:b2:fe:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Validity
Not Before: Jan 31 18:00:23 2025 GMT
Not After : Feb 1 18:00:23 2025 GMT
Subject: CN=79d71172b6905ca5be720d48afbe0491b4c5b332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c2:89:03:fe:5e:4f:e5:7d:24:96:df:65:d6:
18:72:92:94:88:c1:b8:48:78:e5:11:5e:e9:d4:10:
4d:7e:9b:ac:9a:9f:45:df:75:df:8f:89:d5:e0:67:
dc:80:64:ec:5f:a6:26:0e:2e:96:d2:64:f8:4a:f7:
72:18:8e:0a:2a:64:bc:66:10:e1:d5:69:ed:5d:87:
b5:7a:a9:6b:55:d5:aa:82:cd:04:f0:3b:73:2a:99:
05:9d:9c:d0:6e:a4:39:aa:69:65:24:38:27:8e:bd:
90:33:20:0f:7b:56:e5:e2:1f:7f:68:bd:47:d1:5f:
96:0a:e2:23:25:24:2a:5d:70:97:33:b4:ae:e2:c7:
06:2b:b8:8f:d1:37:53:9c:55:62:73:24:d0:f0:3f:
97:cf:61:a2:20:eb:cf:84:35:18:14:1e:17:d3:8a:
aa:ae:78:ce:c1:60:2d:60:7e:e1:3b:18:fe:33:22:
ca:8f:8c:7e:f7:6f:30:2b:ed:4e:63:f5:22:f2:67:
dc:00:a5:8b:5e:e1:9b:ed:44:0d:48:00:f6:e6:dc:
43:07:b0:36:3d:1a:95:47:2c:f6:55:7a:e9:fb:a0:
a8:de:01:10:2c:58:29:76:1d:01:62:a0:9a:e1:fa:
77:e2:96:cc:8d:75:dd:67:3a:9c:f4:1d:8e:9f:74:
fd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D7:11:72:B6:90:5C:A5:BE:72:0D:48:AF:BE:04:91:B4:C5:B3:32
X509v3 Authority Key Identifier:
keyid:63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:32:d1:3f:08:6d:c8:64:f6:d2:37:2b:a3:76:aa:6c:47:79:
f4:6c:70:4e:c8:58:17:d5:e9:05:db:09:33:1f:59:dc:e9:3f:
89:62:d5:51:28:1a:4e:b3:91:b1:34:ce:66:82:b1:44:70:b5:
44:0c:60:9f:f5:de:ed:0d:02:ad:e9:93:0f:f6:a3:61:1e:da:
4d:68:3a:43:44:80:87:41:64:1b:de:3d:e4:53:4c:f3:3e:3f:
5f:2e:eb:f6:2d:da:a8:33:69:b6:90:91:91:1e:9a:72:d7:6a:
2c:96:19:d0:78:73:81:af:52:53:50:b0:63:cb:65:8d:9d:e6:
83:dc:34:6a:d6:da:4f:ef:1c:b7:69:b6:d9:58:c9:bf:f0:77:
42:34:cb:75:47:7d:81:a0:79:6d:c8:32:ea:80:e2:2b:70:5c:
8b:7f:8c:5e:31:6b:b5:d3:01:a2:b2:63:dc:fb:99:ba:86:13:
67:4c:5c:52:0c:6d:1f:f7:40:ce:df:69:31:f2:d4:58:e6:e3:
88:ff:f4:b6:be:31:4a:82:3f:01:17:e7:f4:e5:49:45:81:6f:
c9:3e:d3:d9:ee:0e:09:79:a4:94:64:61:67:4e:1b:17:00:cb:
25:a1:bc:d6:2b:b1:f6:d2:e1:ad:66:2d:61:c6:71:ac:80:b8:
5f:3d:b4:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hWSbJ/yiouDBc7Wosv7PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNGM1M2FiZDBkZGE2OGNhNjdmYzgwNjZiYzE2NWEyYjMy
ZGM4MmIwHhcNMjUwMTMxMTgwMDIzWhcNMjUwMjAxMTgwMDIzWjAzMTEwLwYDVQQD
Eyg3OWQ3MTE3MmI2OTA1Y2E1YmU3MjBkNDhhZmJlMDQ5MWI0YzViMzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsKJA/5eT+V9JJbfZdYYcpKUiMG4
SHjlEV7p1BBNfpusmp9F33Xfj4nV4GfcgGTsX6YmDi6W0mT4SvdyGI4KKmS8ZhDh
1WntXYe1eqlrVdWqgs0E8DtzKpkFnZzQbqQ5qmllJDgnjr2QMyAPe1bl4h9/aL1H
0V+WCuIjJSQqXXCXM7Su4scGK7iP0TdTnFVicyTQ8D+Xz2GiIOvPhDUYFB4X04qq
rnjOwWAtYH7hOxj+MyLKj4x+928wK+1OY/Ui8mfcAKWLXuGb7UQNSAD25txDB7A2
PRqVRyz2VXrp+6Co3gEQLFgpdh0BYqCa4fp34pbMjXXdZzqc9B2On3T9mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnXEXK2kFylvnINSK++BJG0xbMyMB8GA1UdIwQY
MBaAFGNMU6vQ3aaMpn/IBmvBZaKzLcgrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTB4VHE5RGRwb3ltZjhnR2E4Rmxvck10eUNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZTk2YTMtY2U4OS00NDJlLWJjNDgt
YWRkZWZhNjkxMWI5LzEvWTB4VHE5RGRwb3ltZjhnR2E4Rmxvck10eUNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85ZTk2YTMtY2U4OS00NDJlLWJjNDgtYWRkZWZhNjkxMWI5
LzEvWTB4VHE5RGRwb3ltZjhnR2E4Rmxvck10eUNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTLRPwht
yGT20jcro3aqbEd59GxwTshYF9XpBdsJMx9Z3Ok/iWLVUSgaTrORsTTOZoKxRHC1
RAxgn/Xe7Q0CremTD/ajYR7aTWg6Q0SAh0FkG9495FNM8z4/Xy7r9i3aqDNptpCR
kR6actdqLJYZ0Hhzga9SU1CwY8tljZ3mg9w0atbaT+8ct2m22VjJv/B3QjTLdUd9
gaB5bcgy6oDiK3Bci3+MXjFrtdMBorJj3PuZuoYTZ0xcUgxtH/dAzt9pMfLUWObj
iP/0tr4xSoI/ARfn9OVJRYFvyT7T2e4OCXmklGRhZ04bFwDLJaG81iux9tLhrWYt
YcZxrIC4Xz20YQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:46 2025 by rpki-client