Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a95f77-591b-411e-bfb0-7e14d3598f09/1/Y3HS--zy-Q3H9JUXpEDaUzn0psc.mft
File: Y3HS--zy-Q3H9JUXpEDaUzn0psc.mft (raw, json)
Hash identifier: G64bF5csp4k1cj6BiGo6UdLOuOwDVO1v1j0JsON5AXA=
Subject key identifier: E9:3F:B5:19:FC:92:D9:E5:15:12:36:82:55:E1:E9:2A:F0:43:99:27
Authority key identifier: 63:71:D2:FB:EC:F2:F9:0D:C7:F4:95:17:A4:40:DA:53:39:F4:A6:C7
Certificate issuer: /CN=6371d2fbecf2f90dc7f49517a440da5339f4a6c7
Certificate serial: 0194BBCEA5FD22FB64BC8ADD683833B2D3A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3HS--zy-Q3H9JUXpEDaUzn0psc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a95f77-591b-411e-bfb0-7e14d3598f09/1/Y3HS--zy-Q3H9JUXpEDaUzn0psc.mft
Manifest number: 090A
Signing time: Fri 31 Jan 2025 10:01:09 +0000
Manifest this update: Fri 31 Jan 2025 10:01:09 +0000
Manifest next update: Sat 01 Feb 2025 10:01:09 +0000
Files and hashes: 1: Y3HS--zy-Q3H9JUXpEDaUzn0psc.crl (hash: dK8G/tDIlkwSHW6rMIwBwXoZ0hTwaFNEo9+LbRG5vvI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a5:fd:22:fb:64:bc:8a:dd:68:38:33:b2:d3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6371d2fbecf2f90dc7f49517a440da5339f4a6c7
Validity
Not Before: Jan 31 10:01:09 2025 GMT
Not After : Feb 1 10:01:09 2025 GMT
Subject: CN=e93fb519fc92d9e51512368255e1e92af0439927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a8:a8:b9:d4:da:00:7c:e1:7e:36:e3:0b:ca:
e9:78:2c:65:35:c7:58:d0:70:e5:cc:f4:43:0c:a4:
e2:c8:17:6b:8a:1c:7e:6c:98:8a:57:1e:37:f5:79:
54:96:32:30:b3:ff:9f:2b:26:01:f2:14:63:c7:2b:
96:0a:f9:5b:b9:27:26:8d:ce:a6:a3:8b:de:9c:c8:
4d:e6:1d:23:0d:a9:2e:01:e8:1a:9d:dd:91:27:76:
d0:7f:b7:8e:7d:40:d5:6b:e2:cf:66:fc:e9:d2:0f:
10:b9:b0:14:f0:e6:1d:d9:58:54:40:6f:ef:f0:fb:
0a:fe:5e:18:e3:e7:c9:18:18:41:13:d1:72:dd:fd:
6d:09:e6:09:c8:06:a8:22:5a:4b:26:2d:d3:0c:70:
8b:e8:72:c4:ee:bb:82:55:a4:b6:53:09:c2:8f:3b:
ca:17:92:02:d0:00:78:8a:60:45:57:d9:c0:94:09:
ae:b2:a0:ca:02:4b:20:af:ee:74:3d:88:a9:13:be:
c1:3a:37:1b:f4:15:f3:be:c2:3c:14:76:5e:49:df:
8e:13:10:98:e5:83:b6:fa:bd:eb:db:6f:06:93:17:
bc:bb:80:c8:11:26:4a:5e:ee:d3:92:b8:04:c9:7d:
4b:5a:55:50:57:fa:91:c4:a3:aa:f6:db:2d:73:3c:
98:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3F:B5:19:FC:92:D9:E5:15:12:36:82:55:E1:E9:2A:F0:43:99:27
X509v3 Authority Key Identifier:
keyid:63:71:D2:FB:EC:F2:F9:0D:C7:F4:95:17:A4:40:DA:53:39:F4:A6:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3HS--zy-Q3H9JUXpEDaUzn0psc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a95f77-591b-411e-bfb0-7e14d3598f09/1/Y3HS--zy-Q3H9JUXpEDaUzn0psc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a95f77-591b-411e-bfb0-7e14d3598f09/1/Y3HS--zy-Q3H9JUXpEDaUzn0psc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:dc:16:f8:96:89:08:2e:1e:56:49:34:a9:54:fa:36:25:19:
76:f5:b5:57:78:b0:93:88:cc:b8:a6:bd:0b:4a:07:99:94:15:
c6:00:16:48:b9:3f:57:46:dd:1d:b9:34:d3:ac:21:c8:c3:d1:
0b:71:83:5b:d7:9d:14:62:d0:b5:55:b1:c2:00:29:08:f9:d6:
26:29:16:96:36:50:fb:e7:53:18:45:63:82:34:04:72:a6:43:
c7:ff:71:cf:b0:24:c9:0a:99:d0:55:08:e8:43:bb:36:79:e8:
1b:ec:bb:28:2d:2f:d0:0e:0a:a1:3c:c0:12:84:73:93:f2:65:
70:75:39:95:42:0b:53:5f:de:f5:e6:cc:08:97:29:28:61:64:
ee:d3:0b:98:df:51:90:92:d3:8f:d5:58:32:20:b5:13:9e:f6:
7d:a8:0d:cb:06:99:c3:2a:79:ab:3d:d7:3c:47:98:cd:be:bc:
bf:23:de:51:70:7c:fd:48:95:af:66:56:df:f9:d9:e6:07:26:
cf:0c:c6:16:f3:21:f5:01:c8:61:0a:04:d5:12:83:2c:fb:d8:
15:e2:8e:e2:ba:7f:aa:bd:4b:98:5f:a3:fe:54:b1:d9:fb:85:
a8:00:85:4d:68:3f:9c:2e:20:71:3d:5c:c2:e0:b9:30:b6:39:
4d:b1:cc:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zqX9IvtkvIrdaDgzstOoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNzFkMmZiZWNmMmY5MGRjN2Y0OTUxN2E0NDBkYTUzMzlm
NGE2YzcwHhcNMjUwMTMxMTAwMTA5WhcNMjUwMjAxMTAwMTA5WjAzMTEwLwYDVQQD
EyhlOTNmYjUxOWZjOTJkOWU1MTUxMjM2ODI1NWUxZTkyYWYwNDM5OTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26ioudTaAHzhfjbjC8rpeCxlNcdY
0HDlzPRDDKTiyBdrihx+bJiKVx439XlUljIws/+fKyYB8hRjxyuWCvlbuScmjc6m
o4venMhN5h0jDakuAegand2RJ3bQf7eOfUDVa+LPZvzp0g8QubAU8OYd2VhUQG/v
8PsK/l4Y4+fJGBhBE9Fy3f1tCeYJyAaoIlpLJi3TDHCL6HLE7ruCVaS2UwnCjzvK
F5IC0AB4imBFV9nAlAmusqDKAksgr+50PYipE77BOjcb9BXzvsI8FHZeSd+OExCY
5YO2+r3r228Gkxe8u4DIESZKXu7TkrgEyX1LWlVQV/qRxKOq9tstczyYswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOk/tRn8ktnlFRI2glXh6SrwQ5knMB8GA1UdIwQY
MBaAFGNx0vvs8vkNx/SVF6RA2lM59KbHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTNIUy0tenktUTNIOUpVWHBFRGFVem4wcHNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hOTVmNzctNTkxYi00MTFlLWJmYjAt
N2UxNGQzNTk4ZjA5LzEvWTNIUy0tenktUTNIOUpVWHBFRGFVem4wcHNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9hOTVmNzctNTkxYi00MTFlLWJmYjAtN2UxNGQzNTk4ZjA5
LzEvWTNIUy0tenktUTNIOUpVWHBFRGFVem4wcHNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdwW+JaJ
CC4eVkk0qVT6NiUZdvW1V3iwk4jMuKa9C0oHmZQVxgAWSLk/V0bdHbk006whyMPR
C3GDW9edFGLQtVWxwgApCPnWJikWljZQ++dTGEVjgjQEcqZDx/9xz7AkyQqZ0FUI
6EO7NnnoG+y7KC0v0A4KoTzAEoRzk/JlcHU5lUILU1/e9ebMCJcpKGFk7tMLmN9R
kJLTj9VYMiC1E572fagNywaZwyp5qz3XPEeYzb68vyPeUXB8/UiVr2ZW3/nZ5gcm
zwzGFvMh9QHIYQoE1RKDLPvYFeKO4rp/qr1LmF+j/lSx2fuFqACFTWg/nC4gcT1c
wuC5MLY5TbHMiQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:02:12 2025 by rpki-client