Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
File: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft (raw, json)
Hash identifier: XkACKCQF0IsPDxCnhlP8hVi+/4zFA/4Phh0dp7bAPvY=
Subject key identifier: 51:00:97:2D:98:92:16:42:04:86:04:B8:D1:3E:E2:0E:65:82:FE:05
Authority key identifier: 63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
Certificate issuer: /CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Certificate serial: 0194BD4E54430C09BAFA3BFB4FEB6426F4B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
Manifest number: 1179
Signing time: Fri 31 Jan 2025 17:00:14 +0000
Manifest this update: Fri 31 Jan 2025 17:00:14 +0000
Manifest next update: Sat 01 Feb 2025 17:00:14 +0000
Files and hashes: 1: 1-G1EzE1WSewj5LvnP7WS6jNd8Ug.roa (hash: jwy+yhw+XcZ5VX6F4NLidpXSZAqbXddtjz7nb2RmNdw=)
2: S7ra6Ov-UpB_vWrQKASj1i2bpWU.roa (hash: kepYC+QCOG1xoHVARWHcfGe1QSDNXlo9WvXDhx0i4AA=)
3: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl (hash: 0iHHWp4OKpZMvFW3+Y2gFV1sP2gxVNqWptU6IVeqcL8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:54:43:0c:09:ba:fa:3b:fb:4f:eb:64:26:f4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Validity
Not Before: Jan 31 17:00:14 2025 GMT
Not After : Feb 1 17:00:14 2025 GMT
Subject: CN=5100972d98921642048604b8d13ee20e6582fe05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:32:c7:4a:8b:75:e7:f1:9b:ef:69:27:b1:
4a:9c:b7:8c:49:dd:57:a0:17:60:f8:83:b9:c8:ac:
e0:a6:15:59:a7:e3:a4:b2:94:b3:f8:b9:c1:d2:fc:
a5:a1:98:20:29:fe:5f:9c:2a:70:c8:82:d3:ea:ac:
97:ff:36:f3:e4:2c:7d:a8:e6:22:47:fb:d9:10:f5:
ba:7c:23:6f:a0:c0:83:4e:13:e2:7f:9f:a0:b3:44:
7e:e5:df:22:3f:b5:db:e9:cc:ea:de:84:c0:12:e0:
8a:f7:d2:f3:85:0d:26:00:a2:c4:e2:29:a4:02:3b:
a7:87:70:8b:7f:a0:7c:0a:a3:50:83:8d:c2:bb:8a:
59:52:eb:00:db:7c:5c:80:50:21:d7:f0:d3:5e:43:
29:2e:7f:89:08:96:dd:1f:7a:14:91:39:e4:18:6a:
05:e3:f9:5a:93:33:52:60:d3:d9:3a:c9:b9:d4:be:
84:19:14:d4:31:46:88:9a:c1:83:b6:19:2a:be:c6:
c7:cc:75:a8:3d:d8:f3:d8:27:50:65:67:61:25:0b:
ea:b8:3f:80:32:9c:51:22:c5:eb:3b:4d:36:c1:8b:
7d:0f:a3:ea:94:3b:27:26:a1:8e:c4:77:9f:58:50:
76:05:1b:88:b7:0e:2e:2c:3c:99:14:e1:ac:56:57:
ba:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:00:97:2D:98:92:16:42:04:86:04:B8:D1:3E:E2:0E:65:82:FE:05
X509v3 Authority Key Identifier:
keyid:63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fa:f5:93:3b:2b:5b:6e:5f:fe:b8:b2:9a:3e:ae:32:81:7f:
d7:0d:eb:98:c3:35:20:66:5e:60:e3:8d:10:58:2e:08:25:65:
aa:ce:1a:9a:f5:65:93:b5:4c:20:fe:54:42:81:44:6c:f7:b7:
71:93:a4:63:5b:0d:b6:2e:66:de:ac:5c:5e:ff:29:ad:34:d7:
46:41:bc:56:46:88:ee:2c:4c:8b:03:e4:bb:7b:0e:51:56:3c:
75:ee:de:c0:40:18:76:be:96:ec:0e:67:e7:c1:d7:80:db:2d:
dd:9a:68:c7:00:5e:b9:9b:ee:86:1a:3e:3f:60:dc:4d:e2:13:
93:c6:84:8f:c8:a4:48:fa:60:6b:ba:c2:02:4d:44:02:2b:23:
fe:28:69:27:56:46:42:e5:12:b0:25:48:cf:88:75:86:d5:b1:
1b:93:f6:c5:9c:c5:10:13:f2:7e:e2:23:37:42:57:fb:ac:54:
a4:52:a3:f9:74:e6:8c:4b:ba:1d:dd:85:6f:1b:83:18:3b:dd:
23:12:e9:cf:a1:13:42:46:aa:48:06:25:a3:00:77:cb:7c:95:
f0:12:19:d5:35:43:99:ea:9b:e7:08:9b:d2:3a:b6:45:6b:3c:
4d:73:6e:cc:7d:f5:0a:15:69:49:69:4a:db:9c:1c:27:1e:bb:
04:aa:52:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TlRDDAm6+jv7T+tkJvS4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZDViNDg4NDgxMDdiODZlMTQyZDFjMDZjMjlkNGI3MGU3
Mzk0ZDMwHhcNMjUwMTMxMTcwMDE0WhcNMjUwMjAxMTcwMDE0WjAzMTEwLwYDVQQD
Eyg1MTAwOTcyZDk4OTIxNjQyMDQ4NjA0YjhkMTNlZTIwZTY1ODJmZTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti0yx0qLdefxm+9pJ7FKnLeMSd1X
oBdg+IO5yKzgphVZp+OkspSz+LnB0vyloZggKf5fnCpwyILT6qyX/zbz5Cx9qOYi
R/vZEPW6fCNvoMCDThPif5+gs0R+5d8iP7Xb6czq3oTAEuCK99LzhQ0mAKLE4imk
Ajunh3CLf6B8CqNQg43Cu4pZUusA23xcgFAh1/DTXkMpLn+JCJbdH3oUkTnkGGoF
4/lakzNSYNPZOsm51L6EGRTUMUaImsGDthkqvsbHzHWoPdjz2CdQZWdhJQvquD+A
MpxRIsXrO002wYt9D6PqlDsnJqGOxHefWFB2BRuItw4uLDyZFOGsVle6BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEAly2YkhZCBIYEuNE+4g5lgv4FMB8GA1UdIwQY
MBaAFGPVtIhIEHuG4ULRwGwp1LcOc5TTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTlXMGlFZ1FlNGJoUXRIQWJDblV0dzV6bE5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wMmNkYzItNDBhOC00NzgxLTg2MGIt
MjM4OGM5MDZiYzYyLzEvWTlXMGlFZ1FlNGJoUXRIQWJDblV0dzV6bE5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8wMmNkYzItNDBhOC00NzgxLTg2MGItMjM4OGM5MDZiYzYy
LzEvWTlXMGlFZ1FlNGJoUXRIQWJDblV0dzV6bE5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifr1kzsr
W25f/riymj6uMoF/1w3rmMM1IGZeYOONEFguCCVlqs4amvVlk7VMIP5UQoFEbPe3
cZOkY1sNti5m3qxcXv8prTTXRkG8VkaI7ixMiwPku3sOUVY8de7ewEAYdr6W7A5n
58HXgNst3ZpoxwBeuZvuhho+P2DcTeITk8aEj8ikSPpga7rCAk1EAisj/ihpJ1ZG
QuUSsCVIz4h1htWxG5P2xZzFEBPyfuIjN0JX+6xUpFKj+XTmjEu6Hd2FbxuDGDvd
IxLpz6ETQkaqSAYlowB3y3yV8BIZ1TVDmeqb5wib0jq2RWs8TXNuzH31ChVpSWlK
25wcJx67BKpSWA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:13 2025 by rpki-client