Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
File: 7LYS4fa02D-KXVUs87YO3SO_6fQ.mft (raw, json)
Hash identifier: pVY5Gv/QhYpEGfyBWFQ3ni+i+3Vf8aTOjOQDLrgr2qA=
Subject key identifier: A9:44:97:52:E0:6A:0B:32:C0:50:5A:2D:53:84:B4:D9:68:09:BB:F4
Authority key identifier: EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
Certificate issuer: /CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
Certificate serial: 0194BD176C825661F2DB9C6F30278FE691A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
Manifest number: 1389
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: 7LYS4fa02D-KXVUs87YO3SO_6fQ.crl (hash: Oz5pIdCXSIELWXZcZ5CMilU+aYb2dZ1fZuMjZA70ES0=)
2: aG5rAcUPlfAS33bppi3npjnJwhs.roa (hash: zJztqNoDduT6a/19sVXNq9OoLdpe05NzflFeIp+fVjM=)
3: rkeCi7bAOmm8jNM4SPUix4rpKGY.roa (hash: mpdXZon8vvR8j0E2gSl7AGKnGzRDJd6WpjcomYnKKnU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6c:82:56:61:f2:db:9c:6f:30:27:8f:e6:91:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=a9449752e06a0b32c0505a2d5384b4d96809bbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:37:dd:74:f7:31:95:03:82:0a:6f:a7:31:96:
e6:b0:f7:eb:be:70:03:61:7b:b7:3d:74:1b:22:42:
5e:18:01:df:d4:59:52:13:f5:d0:b4:30:ae:5a:c2:
7a:74:0f:ba:6e:fc:5e:a0:18:74:b0:d9:77:19:c2:
f6:44:fd:47:9c:f4:52:97:75:cd:21:0b:56:23:37:
1e:8f:9a:cc:9c:5d:ba:35:61:aa:b5:a6:31:f0:45:
85:7a:85:de:32:1d:8f:31:03:66:4b:e5:59:15:77:
e8:f6:ab:4b:74:48:da:8d:57:4b:48:62:2e:ce:59:
2c:be:99:fc:05:ff:48:a7:0e:eb:7d:05:2c:4d:c0:
ed:9a:e3:d8:18:d6:b6:aa:d7:7c:8d:6f:72:13:84:
c6:f7:84:b2:63:cf:9f:3f:e6:d2:9a:12:dc:59:cf:
0b:38:80:48:4a:20:92:d8:0c:43:16:7f:5b:26:7e:
ed:7c:36:7a:fe:0b:0c:fc:5e:92:2b:71:36:71:f4:
37:d7:c9:b2:21:34:5c:a7:04:22:a8:c4:cc:65:4f:
46:75:31:8f:da:1b:47:ec:73:14:38:df:97:d6:02:
bb:20:02:92:ee:ab:c4:a8:5b:3b:f5:cf:15:31:48:
0d:a7:95:52:b3:65:07:04:07:4a:99:64:bc:1e:86:
14:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:44:97:52:E0:6A:0B:32:C0:50:5A:2D:53:84:B4:D9:68:09:BB:F4
X509v3 Authority Key Identifier:
keyid:EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:06:8a:c5:4a:cf:bc:8b:be:6b:ee:db:1f:b2:a0:10:45:dd:
90:19:42:63:d0:5a:d0:3a:02:7d:ff:d7:00:c1:ea:3b:a9:7f:
8e:b4:bf:11:95:14:7f:d0:99:3a:d7:12:58:6a:ac:52:df:ee:
90:33:ce:41:8b:96:da:3f:2d:62:f2:6a:6b:64:83:8e:53:88:
bf:ab:19:c5:61:a3:d5:95:d5:51:bd:34:ef:28:c5:9e:1f:33:
79:65:32:47:45:46:3b:a8:e3:a6:8d:3b:a6:f0:d5:c9:f9:23:
41:ba:67:ac:9a:e8:22:07:0b:24:05:7d:f0:0e:5f:ba:e0:cf:
c7:fc:1a:a8:82:21:94:0d:32:82:00:2f:c6:8d:45:0d:ec:b4:
94:a1:8a:06:d6:b3:d2:b6:f4:4c:da:f8:ce:c2:be:e3:31:23:
88:4a:1e:66:56:26:d4:1a:ef:56:e4:42:82:e4:43:86:f2:55:
d9:92:1b:df:4a:25:a6:7e:02:92:31:b3:87:7e:52:13:7c:38:
32:a5:41:d1:47:ee:e9:a3:d0:ea:04:ca:b9:38:d7:ed:23:6c:
69:b9:de:9b:c8:2a:db:ea:5e:eb:3d:41:ae:47:03:22:0b:19:
93:42:c3:22:4b:0a:13:00:d8:89:93:e2:35:74:b0:fe:6f:31:
64:14:d5:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F2yCVmHy25xvMCeP5pGmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYjYxMmUxZjZiNGQ4M2Y4YTVkNTUyY2YzYjYwZWRkMjNi
ZmU5ZjQwHhcNMjUwMTMxMTYwMDE2WhcNMjUwMjAxMTYwMDE2WjAzMTEwLwYDVQQD
EyhhOTQ0OTc1MmUwNmEwYjMyYzA1MDVhMmQ1Mzg0YjRkOTY4MDliYmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jfddPcxlQOCCm+nMZbmsPfrvnAD
YXu3PXQbIkJeGAHf1FlSE/XQtDCuWsJ6dA+6bvxeoBh0sNl3GcL2RP1HnPRSl3XN
IQtWIzcej5rMnF26NWGqtaYx8EWFeoXeMh2PMQNmS+VZFXfo9qtLdEjajVdLSGIu
zlksvpn8Bf9Ipw7rfQUsTcDtmuPYGNa2qtd8jW9yE4TG94SyY8+fP+bSmhLcWc8L
OIBISiCS2AxDFn9bJn7tfDZ6/gsM/F6SK3E2cfQ318myITRcpwQiqMTMZU9GdTGP
2htH7HMUON+X1gK7IAKS7qvEqFs79c8VMUgNp5VSs2UHBAdKmWS8HoYUXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlEl1LgagsywFBaLVOEtNloCbv0MB8GA1UdIwQY
MBaAFOy2EuH2tNg/il1VLPO2Dt0jv+n0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0xZUzRmYTAyRC1LWFZVczg3WU8zU09fNmZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81Y2Q4ODQtNzlmNS00ODNkLTkwNGEt
OTZmZTE5MTFkMGIzLzEvN0xZUzRmYTAyRC1LWFZVczg3WU8zU09fNmZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS81Y2Q4ODQtNzlmNS00ODNkLTkwNGEtOTZmZTE5MTFkMGIz
LzEvN0xZUzRmYTAyRC1LWFZVczg3WU8zU09fNmZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQaKxUrP
vIu+a+7bH7KgEEXdkBlCY9Ba0DoCff/XAMHqO6l/jrS/EZUUf9CZOtcSWGqsUt/u
kDPOQYuW2j8tYvJqa2SDjlOIv6sZxWGj1ZXVUb007yjFnh8zeWUyR0VGO6jjpo07
pvDVyfkjQbpnrJroIgcLJAV98A5fuuDPx/waqIIhlA0yggAvxo1FDey0lKGKBtaz
0rb0TNr4zsK+4zEjiEoeZlYm1BrvVuRCguRDhvJV2ZIb30olpn4CkjGzh35SE3w4
MqVB0Ufu6aPQ6gTKuTjX7SNsabnem8gq2+pe6z1BrkcDIgsZk0LDIksKEwDYiZPi
NXSw/m8xZBTVNA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:33 2025 by rpki-client