Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
File: yzNdxv6zhfaiM0QFahPCxZUCjpE.mft (raw, json)
Hash identifier: byI3c+UPKLlUtP+KVM7kdD8FJR9kXSuLgHcb3YWUXmY=
Subject key identifier: CD:4F:2F:A6:D4:A7:AC:8B:4B:EF:F2:21:F2:E2:31:89:DC:31:2A:30
Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91
Certificate serial: 0194BD177417EA3AC7DD428F634C9280864F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 16:00:18 +0000
Manifest this update: Fri 31 Jan 2025 16:00:18 +0000
Manifest next update: Sat 01 Feb 2025 16:00:18 +0000
Files and hashes: 1: 174WdkpYr9777ZFQazXJ-iMRM-8.roa (hash: /zP6InCFbWaOP8FrHR5Yt4Nt/uR42z5t9/lR4P3NjaA=)
2: Dt3_ZkBEBRp0R0_CDkNOquu1bQM.roa (hash: uiOI0uk8eYds16+TqWf+6h0vN+dm+2r3lmxvhrKa8Qc=)
3: k5xMorPADX6pjlz13eIpCR1YD6Y.roa (hash: zYtUaU0ku4oMSnzZFqoPkHIdrXIDxibBJ6DcraKtexc=)
4: yzNdxv6zhfaiM0QFahPCxZUCjpE.crl (hash: PCIU2bBY1XLt2K4bRd48pHq7TqdhKMbVDuLxTdTAj88=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:74:17:ea:3a:c7:dd:42:8f:63:4c:92:80:86:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91
Validity
Not Before: Jan 31 16:00:18 2025 GMT
Not After : Feb 1 16:00:18 2025 GMT
Subject: CN=cd4f2fa6d4a7ac8b4beff221f2e23189dc312a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f6:7a:f7:80:d7:34:47:15:27:51:5d:9a:2d:
a7:e7:08:fa:0c:54:f3:cb:e6:21:fe:32:da:ac:51:
8f:70:f9:de:d6:ee:10:d4:93:ca:8c:1f:33:2d:11:
e8:21:c6:7a:9f:a7:a0:23:0c:f6:50:71:5f:57:5c:
c9:c6:8d:3b:59:57:28:84:02:62:d4:1c:fd:6e:f6:
c8:23:e6:71:8d:de:ac:c2:a9:68:a4:99:01:ef:09:
7a:cc:c6:13:ce:13:aa:5e:a6:d4:0b:aa:0f:ce:9e:
1b:ef:19:29:c3:a6:b3:83:46:6e:b7:6f:86:34:bb:
69:d7:b2:ac:29:d6:26:86:69:35:3e:4f:07:5f:d7:
0e:a3:d1:a5:46:57:60:16:4e:6b:85:bb:02:ce:48:
26:6b:a1:d1:cd:69:04:fe:c7:1f:c8:71:f9:20:f0:
70:1f:fe:2c:1f:1c:8f:f4:33:77:fa:36:3c:0f:ee:
99:15:ad:65:d8:f5:bb:6a:ce:93:cc:95:cd:e0:48:
20:de:db:cc:8b:c2:44:a6:8f:60:7a:a8:cc:ce:9e:
f0:ac:82:6b:af:00:c8:56:57:ed:8f:a0:68:4b:e2:
c2:e8:e3:5a:87:55:1c:e3:a3:db:09:bf:a4:4e:02:
c8:ea:84:78:2e:86:bd:86:9d:56:3d:27:2c:71:d7:
20:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4F:2F:A6:D4:A7:AC:8B:4B:EF:F2:21:F2:E2:31:89:DC:31:2A:30
X509v3 Authority Key Identifier:
keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:09:f4:4f:de:26:db:82:64:87:2c:1b:e6:4b:92:74:3e:ee:
bd:18:2c:8f:e8:6c:5e:5f:8b:af:cb:b2:ff:36:6d:3b:c2:6b:
69:76:99:40:4b:27:32:30:42:5c:4f:89:de:e7:ad:1e:91:48:
2a:61:2e:ac:c9:f2:2b:95:7b:4b:94:ae:bc:fb:12:5e:84:92:
d7:3b:1a:3f:43:aa:7a:8c:cb:93:6b:f8:4c:14:db:9d:f3:54:
e3:b4:dc:9c:2f:54:7f:4a:a6:6b:0b:2c:80:e7:8b:c7:70:5a:
29:2e:04:f4:73:18:09:e3:06:80:fb:27:87:5d:1f:65:5e:ed:
42:cc:08:f6:2b:b5:1e:e4:cf:aa:fd:04:68:ab:a0:72:2c:98:
e9:60:b4:e8:14:17:a5:81:d5:75:a4:8d:66:6c:57:33:3d:a3:
c0:0d:4f:4b:d2:4c:54:ae:27:67:cf:71:2b:53:5f:fb:c4:fc:
c6:13:e5:e8:96:dc:c5:4f:27:39:70:5a:ea:bf:5a:72:34:c9:
06:d0:55:76:14:52:f6:44:2a:f7:64:0e:1a:d2:58:2a:35:c7:
65:5e:46:22:5a:c7:67:73:13:58:3a:2f:5d:36:8e:32:5a:37:
93:e8:e1:0f:d9:95:ad:be:00:37:36:fc:79:01:d6:02:d2:a1:
f0:b2:76:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F3QX6jrH3UKPY0ySgIZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzM1ZGM2ZmViMzg1ZjZhMjMzNDQwNTZhMTNjMmM1OTUw
MjhlOTEwHhcNMjUwMTMxMTYwMDE4WhcNMjUwMjAxMTYwMDE4WjAzMTEwLwYDVQQD
EyhjZDRmMmZhNmQ0YTdhYzhiNGJlZmYyMjFmMmUyMzE4OWRjMzEyYTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/Z694DXNEcVJ1Fdmi2n5wj6DFTz
y+Yh/jLarFGPcPne1u4Q1JPKjB8zLRHoIcZ6n6egIwz2UHFfV1zJxo07WVcohAJi
1Bz9bvbII+Zxjd6swqlopJkB7wl6zMYTzhOqXqbUC6oPzp4b7xkpw6azg0Zut2+G
NLtp17KsKdYmhmk1Pk8HX9cOo9GlRldgFk5rhbsCzkgma6HRzWkE/scfyHH5IPBw
H/4sHxyP9DN3+jY8D+6ZFa1l2PW7as6TzJXN4Egg3tvMi8JEpo9geqjMzp7wrIJr
rwDIVlftj6BoS+LC6ONah1Uc46PbCb+kTgLI6oR4Loa9hp1WPScscdcgJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1PL6bUp6yLS+/yIfLiMYncMSowMB8GA1UdIwQY
MBaAFMszXcb+s4X2ojNEBWoTwsWVAo6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmIt
ODg1NGM4MmI1NDVkLzEveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmItODg1NGM4MmI1NDVk
LzEveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOgn0T94m
24Jkhywb5kuSdD7uvRgsj+hsXl+Lr8uy/zZtO8JraXaZQEsnMjBCXE+J3uetHpFI
KmEurMnyK5V7S5SuvPsSXoSS1zsaP0OqeozLk2v4TBTbnfNU47TcnC9Uf0qmawss
gOeLx3BaKS4E9HMYCeMGgPsnh10fZV7tQswI9iu1HuTPqv0EaKugciyY6WC06BQX
pYHVdaSNZmxXMz2jwA1PS9JMVK4nZ89xK1Nf+8T8xhPl6JbcxU8nOXBa6r9acjTJ
BtBVdhRS9kQq92QOGtJYKjXHZV5GIlrHZ3MTWDovXTaOMlo3k+jhD9mVrb4ANzb8
eQHWAtKh8LJ2Ow==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:54 2025 by rpki-client