Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/82eed1-d9d5-40d8-ba58-3f9960865d0f/1/yj7NoA-sC_tjsoVD6itdXx5N9ss.mft
File: yj7NoA-sC_tjsoVD6itdXx5N9ss.mft (raw, json)
Hash identifier: wM/bDdriletTh42D3PyvbUrDE/6UoYCKPP8IVEp3ejU=
Subject key identifier: 8F:5C:4B:37:D1:EB:EC:74:27:C3:FF:39:1C:CA:FD:94:DD:0D:65:24
Authority key identifier: CA:3E:CD:A0:0F:AC:0B:FB:63:B2:85:43:EA:2B:5D:5F:1E:4D:F6:CB
Certificate issuer: /CN=ca3ecda00fac0bfb63b28543ea2b5d5f1e4df6cb
Certificate serial: 0194BCE0C9EC7D8D71E998643A6F7EFE63E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yj7NoA-sC_tjsoVD6itdXx5N9ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/82eed1-d9d5-40d8-ba58-3f9960865d0f/1/yj7NoA-sC_tjsoVD6itdXx5N9ss.mft
Manifest number: 27
Signing time: Fri 31 Jan 2025 15:00:35 +0000
Manifest this update: Fri 31 Jan 2025 15:00:35 +0000
Manifest next update: Sat 01 Feb 2025 15:00:35 +0000
Files and hashes: 1: yj7NoA-sC_tjsoVD6itdXx5N9ss.crl (hash: h2GLJRnypWQr8QFMcsBzFzU/6VejN80zMYXRUb41EYI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c9:ec:7d:8d:71:e9:98:64:3a:6f:7e:fe:63:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3ecda00fac0bfb63b28543ea2b5d5f1e4df6cb
Validity
Not Before: Jan 31 15:00:35 2025 GMT
Not After : Feb 1 15:00:35 2025 GMT
Subject: CN=8f5c4b37d1ebec7427c3ff391ccafd94dd0d6524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b0:59:19:d0:93:8b:80:ce:36:24:72:78:f7:
7b:5d:c4:0f:09:55:04:e8:64:b4:67:4f:57:04:8e:
d0:66:28:4b:08:7e:53:99:c0:d5:17:d6:09:38:70:
89:8b:3e:83:15:1a:a1:ef:5f:48:db:33:2d:2d:06:
71:48:9a:ff:5d:86:54:82:b9:8c:dd:15:51:8a:6c:
d3:86:b6:4b:a9:bf:90:00:2b:24:3b:9b:e9:13:61:
cc:50:71:ae:a7:bf:71:dd:90:92:53:c1:33:79:e5:
c1:63:2b:95:2a:b7:b7:ce:35:d5:21:5f:0b:59:e3:
8d:b0:84:82:e5:16:e3:cb:d2:41:69:82:98:77:84:
dc:9c:ef:cb:90:aa:9d:c2:f7:28:04:d1:2f:e8:4d:
54:f4:25:38:7a:15:a6:2a:64:5e:77:6c:44:b8:24:
c2:f9:e7:43:75:b7:a9:7f:13:7e:0c:4d:ca:a5:ad:
11:39:6d:91:09:e7:8f:48:a2:12:91:dc:4a:8c:bb:
17:49:7a:65:8c:32:ef:75:87:66:5d:34:d5:5c:f2:
c1:c6:b1:97:bc:cd:61:63:8e:38:fa:e7:54:d0:ea:
28:18:85:93:0f:66:52:08:a3:17:47:e3:9a:8e:ee:
ef:11:c2:2b:94:30:65:a7:8c:ff:dc:76:fb:06:21:
3e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5C:4B:37:D1:EB:EC:74:27:C3:FF:39:1C:CA:FD:94:DD:0D:65:24
X509v3 Authority Key Identifier:
keyid:CA:3E:CD:A0:0F:AC:0B:FB:63:B2:85:43:EA:2B:5D:5F:1E:4D:F6:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yj7NoA-sC_tjsoVD6itdXx5N9ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/82eed1-d9d5-40d8-ba58-3f9960865d0f/1/yj7NoA-sC_tjsoVD6itdXx5N9ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/82eed1-d9d5-40d8-ba58-3f9960865d0f/1/yj7NoA-sC_tjsoVD6itdXx5N9ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:90:fa:15:b7:04:56:0c:f9:33:e5:cf:36:d1:07:9c:d2:7b:
9d:b0:b0:44:a8:8a:00:a5:c1:93:94:9c:5f:81:c4:e0:e0:27:
4a:e6:54:70:45:dc:03:a7:05:ad:55:15:cc:04:c3:df:f3:4e:
e5:00:f2:a5:45:84:81:1e:52:df:3f:e9:37:e4:01:88:ec:92:
92:16:22:75:40:1a:ff:29:8b:ae:ae:6e:93:94:b7:82:ef:9b:
23:cd:ae:82:b6:8b:3a:7d:b4:17:3b:e9:bc:1c:0e:e0:d9:01:
50:00:70:25:88:3e:83:f7:5b:03:f3:ac:3b:3a:01:19:b3:bc:
97:0a:56:5f:5d:f5:93:06:5e:9b:f7:fd:ad:11:93:fa:9f:35:
42:ee:bf:9c:66:0f:bd:61:39:2c:32:42:e4:61:3b:de:91:9d:
74:6e:07:fd:c6:ae:28:dd:33:ac:c0:38:a6:ea:ed:2d:b3:fb:
be:14:61:f2:68:07:04:ed:b8:49:cc:01:7a:fc:83:0a:b8:4c:
9b:87:12:0b:8c:48:47:0b:45:1a:4c:16:ac:e5:99:8a:64:47:
33:45:4f:a5:bb:01:a6:6a:b5:0e:f3:da:2b:3b:04:d4:72:a5:
af:d2:eb:bf:42:13:bf:92:af:8f:26:8f:f1:c7:e6:61:28:12:
0f:e1:67:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84MnsfY1x6ZhkOm9+/mPpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhM2VjZGEwMGZhYzBiZmI2M2IyODU0M2VhMmI1ZDVmMWU0
ZGY2Y2IwHhcNMjUwMTMxMTUwMDM1WhcNMjUwMjAxMTUwMDM1WjAzMTEwLwYDVQQD
Eyg4ZjVjNGIzN2QxZWJlYzc0MjdjM2ZmMzkxY2NhZmQ5NGRkMGQ2NTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7BZGdCTi4DONiRyePd7XcQPCVUE
6GS0Z09XBI7QZihLCH5TmcDVF9YJOHCJiz6DFRqh719I2zMtLQZxSJr/XYZUgrmM
3RVRimzThrZLqb+QACskO5vpE2HMUHGup79x3ZCSU8EzeeXBYyuVKre3zjXVIV8L
WeONsISC5Rbjy9JBaYKYd4TcnO/LkKqdwvcoBNEv6E1U9CU4ehWmKmRed2xEuCTC
+edDdbepfxN+DE3Kpa0ROW2RCeePSKISkdxKjLsXSXpljDLvdYdmXTTVXPLBxrGX
vM1hY444+udU0OooGIWTD2ZSCKMXR+Oaju7vEcIrlDBlp4z/3Hb7BiE+6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9cSzfR6+x0J8P/ORzK/ZTdDWUkMB8GA1UdIwQY
MBaAFMo+zaAPrAv7Y7KFQ+orXV8eTfbLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWo3Tm9BLXNDX3Rqc29WRDZpdGRYeDVOOXNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84MmVlZDEtZDlkNS00MGQ4LWJhNTgt
M2Y5OTYwODY1ZDBmLzEveWo3Tm9BLXNDX3Rqc29WRDZpdGRYeDVOOXNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny84MmVlZDEtZDlkNS00MGQ4LWJhNTgtM2Y5OTYwODY1ZDBm
LzEveWo3Tm9BLXNDX3Rqc29WRDZpdGRYeDVOOXNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxpD6FbcE
Vgz5M+XPNtEHnNJ7nbCwRKiKAKXBk5ScX4HE4OAnSuZUcEXcA6cFrVUVzATD3/NO
5QDypUWEgR5S3z/pN+QBiOySkhYidUAa/ymLrq5uk5S3gu+bI82ugraLOn20Fzvp
vBwO4NkBUABwJYg+g/dbA/OsOzoBGbO8lwpWX131kwZem/f9rRGT+p81Qu6/nGYP
vWE5LDJC5GE73pGddG4H/cauKN0zrMA4purtLbP7vhRh8mgHBO24ScwBevyDCrhM
m4cSC4xIRwtFGkwWrOWZimRHM0VPpbsBpmq1DvPaKzsE1HKlr9Lrv0ITv5KvjyaP
8cfmYSgSD+Fnsw==
-----END CERTIFICATE-----
Generated at Thu May 1 11:03:25 2025 by rpki-client