Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
File: yPGA3UiWddR5NSX-5s__Rpcv8zw.mft (raw, json)
Hash identifier: PBPoEFS3eIclJW47c4+t8XD799q26dzKjJPHQRnIqNE=
Subject key identifier: A0:74:30:34:DC:AA:81:70:9E:10:8B:AD:02:FD:E3:B6:14:64:C1:7A
Authority key identifier: C8:F1:80:DD:48:96:75:D4:79:35:25:FE:E6:CF:FF:46:97:2F:F3:3C
Certificate issuer: /CN=c8f180dd489675d4793525fee6cfff46972ff33c
Certificate serial: 0194BC3C9226ED55C4FC2CCB20AC4E182206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:01:13 +0000
Manifest this update: Fri 31 Jan 2025 12:01:13 +0000
Manifest next update: Sat 01 Feb 2025 12:01:13 +0000
Files and hashes: 1: yPGA3UiWddR5NSX-5s__Rpcv8zw.crl (hash: /cQJg3BxbDHzkck1WKJyJ1s9g9idpgZCcaNakQW6ijE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:92:26:ed:55:c4:fc:2c:cb:20:ac:4e:18:22:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f180dd489675d4793525fee6cfff46972ff33c
Validity
Not Before: Jan 31 12:01:13 2025 GMT
Not After : Feb 1 12:01:13 2025 GMT
Subject: CN=a0743034dcaa81709e108bad02fde3b61464c17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:6a:50:e6:ec:c2:24:f6:69:cc:c2:0e:5c:
69:37:1e:58:d0:db:15:59:71:a2:e7:5c:5d:23:27:
ca:23:9e:c5:96:2a:e0:c2:01:b5:20:27:28:34:b7:
cd:48:9b:eb:40:40:cb:32:76:4b:ec:b9:8c:3f:2a:
58:59:38:21:35:60:da:67:ef:7a:51:d9:e4:8d:dc:
08:93:3c:17:cb:d0:86:6f:8b:05:3b:d7:ec:88:e4:
57:a7:2b:c7:30:70:d6:ca:72:d0:23:60:c9:ce:e8:
a3:9c:97:8c:ed:87:ac:75:7e:d6:34:26:c8:08:c1:
f2:63:2f:39:07:dd:e4:b8:4d:8d:23:80:15:89:09:
5d:ac:a9:fa:3e:fc:02:4b:a2:bf:59:29:19:5c:62:
a5:47:f5:d8:75:f5:09:e7:d5:4b:e4:80:25:9e:0e:
0f:6f:6a:54:77:ac:d7:97:32:51:b0:bb:90:1e:b7:
29:c0:ae:3c:57:32:1c:fa:ae:01:c5:c0:05:7d:99:
90:dd:a2:e3:48:0c:2a:17:79:8f:6c:c3:0a:b4:f8:
07:49:8d:ac:4c:16:6f:fb:0e:97:40:30:e9:7d:de:
46:ae:4f:9a:87:30:b6:b1:cd:cb:54:c4:a8:80:36:
46:5f:05:e7:dd:33:9e:12:0a:2b:64:9a:d0:38:57:
37:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:74:30:34:DC:AA:81:70:9E:10:8B:AD:02:FD:E3:B6:14:64:C1:7A
X509v3 Authority Key Identifier:
keyid:C8:F1:80:DD:48:96:75:D4:79:35:25:FE:E6:CF:FF:46:97:2F:F3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:2f:03:e1:1f:2e:ca:9b:fb:c5:da:a4:73:5c:76:e2:29:c1:
cd:67:30:50:af:c3:5a:9b:82:3e:c9:fa:57:3c:df:5d:60:38:
04:3d:06:84:73:0d:57:a9:35:46:a8:f9:7b:e3:26:f0:ff:fd:
11:3e:6c:87:fb:45:64:ac:93:f4:50:1b:0f:8e:7d:38:f9:a5:
03:2a:7e:9d:c5:39:14:8c:e4:61:27:ad:2f:8f:52:3f:e7:69:
dc:98:08:c6:1a:27:0d:f9:f8:bc:f2:17:99:0f:11:3c:3e:b5:
af:3e:1c:b4:d0:9f:76:74:6a:15:3d:83:8a:15:84:32:59:68:
a6:a4:21:97:d5:3e:97:55:b0:75:17:bb:ce:65:06:cc:76:09:
18:7c:64:d8:dc:0b:8e:17:93:7d:df:49:db:ae:81:77:a4:56:
59:c3:43:6a:d6:65:b7:4d:56:61:b0:2d:b1:87:b0:23:b9:61:
e0:98:04:37:c3:d9:9c:84:8c:43:ac:90:65:de:9b:80:89:00:
f3:4a:7b:17:c0:1c:73:06:22:8d:73:d9:86:7e:11:dd:ed:ec:
7f:79:fa:fa:a3:ce:fa:d6:38:77:32:44:52:94:2c:b4:9e:94:
b3:35:89:74:87:f9:dd:b0:7e:10:a0:38:85:46:05:1f:36:55:
f2:07:35:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PJIm7VXE/CzLIKxOGCIGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZjE4MGRkNDg5Njc1ZDQ3OTM1MjVmZWU2Y2ZmZjQ2OTcy
ZmYzM2MwHhcNMjUwMTMxMTIwMTEzWhcNMjUwMjAxMTIwMTEzWjAzMTEwLwYDVQQD
EyhhMDc0MzAzNGRjYWE4MTcwOWUxMDhiYWQwMmZkZTNiNjE0NjRjMTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJVqUObswiT2aczCDlxpNx5Y0NsV
WXGi51xdIyfKI57FlirgwgG1ICcoNLfNSJvrQEDLMnZL7LmMPypYWTghNWDaZ+96
UdnkjdwIkzwXy9CGb4sFO9fsiORXpyvHMHDWynLQI2DJzuijnJeM7YesdX7WNCbI
CMHyYy85B93kuE2NI4AViQldrKn6PvwCS6K/WSkZXGKlR/XYdfUJ59VL5IAlng4P
b2pUd6zXlzJRsLuQHrcpwK48VzIc+q4BxcAFfZmQ3aLjSAwqF3mPbMMKtPgHSY2s
TBZv+w6XQDDpfd5Grk+ahzC2sc3LVMSogDZGXwXn3TOeEgorZJrQOFc32QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKB0MDTcqoFwnhCLrQL947YUZMF6MB8GA1UdIwQY
MBaAFMjxgN1IlnXUeTUl/ubP/0aXL/M8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVBHQTNVaVdkZFI1TlNYLTVzX19ScGN2OHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS82N2YxYzUtODIyOS00MTczLTk5YzEt
ZGJkNzYwMDQ1ZWI3LzEveVBHQTNVaVdkZFI1TlNYLTVzX19ScGN2OHp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS82N2YxYzUtODIyOS00MTczLTk5YzEtZGJkNzYwMDQ1ZWI3
LzEveVBHQTNVaVdkZFI1TlNYLTVzX19ScGN2OHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiy8D4R8u
ypv7xdqkc1x24inBzWcwUK/DWpuCPsn6VzzfXWA4BD0GhHMNV6k1Rqj5e+Mm8P/9
ET5sh/tFZKyT9FAbD459OPmlAyp+ncU5FIzkYSetL49SP+dp3JgIxhonDfn4vPIX
mQ8RPD61rz4ctNCfdnRqFT2DihWEMllopqQhl9U+l1WwdRe7zmUGzHYJGHxk2NwL
jheTfd9J266Bd6RWWcNDatZlt01WYbAtsYewI7lh4JgEN8PZnISMQ6yQZd6bgIkA
80p7F8AccwYijXPZhn4R3e3sf3n6+qPO+tY4dzJEUpQstJ6UszWJdIf53bB+EKA4
hUYFHzZV8gc1Cw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:51 2025 by rpki-client