Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft
File: YjqxggzkjFedpAxm2FJl8cLPy04.mft (raw, json)
Hash identifier: Ljpe5vI9BYb6TC1uDmtiq8wLoNwHsOHzpWWPlJgEhOY=
Subject key identifier: 4E:8A:9D:7A:5A:EF:8D:E3:EC:EE:13:7E:68:EF:9D:85:38:53:19:6F
Authority key identifier: 62:3A:B1:82:0C:E4:8C:57:9D:A4:0C:66:D8:52:65:F1:C2:CF:CB:4E
Certificate issuer: /CN=623ab1820ce48c579da40c66d85265f1c2cfcb4e
Certificate serial: 0194BCA9F15FAF74C4D588E426B883C19FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjqxggzkjFedpAxm2FJl8cLPy04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft
Manifest number: 04AF
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: YjqxggzkjFedpAxm2FJl8cLPy04.crl (hash: gnMxDztIu8KZgywcTt3jOWq6QsX10TiPOvOOfPsIEds=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f1:5f:af:74:c4:d5:88:e4:26:b8:83:c1:9f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623ab1820ce48c579da40c66d85265f1c2cfcb4e
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=4e8a9d7a5aef8de3ecee137e68ef9d853853196f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ab:0c:11:fb:97:8a:5e:fa:2b:24:ea:a2:e9:
13:78:20:3b:62:20:f2:7d:f4:d5:46:52:86:9f:b1:
79:27:e7:09:dd:13:d4:41:c0:5b:b9:65:17:91:ef:
32:e9:39:4c:46:bb:80:79:e3:2c:b5:c1:ba:e1:7c:
b4:65:5d:ce:01:5d:59:f2:14:53:91:a1:ee:3b:24:
e3:fd:29:b2:fc:be:51:08:3e:48:5f:a1:0a:09:64:
f4:6d:cc:e8:4c:d8:fa:ac:92:dd:ef:21:52:33:0c:
a1:69:f5:11:5d:f3:71:9e:39:a5:4c:bf:eb:c8:6e:
5f:b4:97:9a:ce:70:d0:c5:c0:c4:67:77:ea:09:78:
46:f1:a1:ab:f3:c3:23:49:be:09:55:2d:1a:7c:95:
46:1c:30:3b:ec:74:8d:5d:22:78:77:09:c2:59:af:
c4:d3:33:7f:1b:aa:fb:10:44:21:53:86:ec:13:5b:
03:56:49:be:50:df:73:f9:fe:c8:a6:36:5b:2d:f4:
ee:73:f7:76:ea:9a:55:fa:b1:f3:f4:d0:5c:ab:2c:
b5:80:e1:8c:44:dd:8f:d3:09:da:86:b9:e7:eb:28:
bc:f5:65:f3:f4:43:aa:57:4b:9d:0c:fe:31:aa:52:
8e:1f:f5:6a:bc:f5:02:19:a4:79:e2:94:a4:cb:2c:
39:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8A:9D:7A:5A:EF:8D:E3:EC:EE:13:7E:68:EF:9D:85:38:53:19:6F
X509v3 Authority Key Identifier:
keyid:62:3A:B1:82:0C:E4:8C:57:9D:A4:0C:66:D8:52:65:F1:C2:CF:CB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjqxggzkjFedpAxm2FJl8cLPy04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:05:3b:2d:f9:39:a3:3e:9b:b8:25:45:79:f6:07:d4:37:11:
44:6f:1e:3f:bc:8c:a8:48:76:fe:91:b4:2b:cb:58:c4:d1:05:
54:cd:bb:92:c6:60:c3:f8:51:95:9d:28:2e:c4:df:b8:d6:cf:
a3:70:00:e1:ea:56:8e:9c:b1:2e:ff:77:ca:ad:71:78:9e:20:
9d:7a:5c:bf:89:f1:83:23:24:96:3e:ee:58:95:61:64:1e:5c:
88:e7:f6:ae:41:3b:ac:0f:eb:9b:da:29:4d:6f:0e:8f:65:9d:
f4:9c:3b:f5:c3:54:3d:74:a7:6c:60:ac:2f:a9:f8:6b:d8:97:
36:9e:17:23:52:6a:8c:bf:ff:f8:cf:5c:17:28:31:4d:02:8c:
85:da:5f:13:dd:dc:4c:d9:e2:77:a2:e0:81:dc:7b:89:6f:c1:
1e:b4:4b:fe:81:2d:d9:20:4f:70:ae:2f:30:c1:73:56:85:45:
8d:bc:7d:0d:56:89:21:34:eb:fa:3a:4b:95:e9:76:0b:d1:36:
44:2b:69:05:1e:f3:f7:04:ae:a7:31:08:72:c1:00:22:3c:ba:
f9:65:ba:80:7b:41:3a:0d:3d:ff:41:31:e3:9b:dd:3a:bb:63:
e0:3d:87:e8:4a:c6:e2:92:4e:ef:d3:cd:9a:6b:4d:9f:92:f5:
d2:62:2e:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qfFfr3TE1YjkJriDwZ+pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyM2FiMTgyMGNlNDhjNTc5ZGE0MGM2NmQ4NTI2NWYxYzJj
ZmNiNGUwHhcNMjUwMTMxMTQwMDQxWhcNMjUwMjAxMTQwMDQxWjAzMTEwLwYDVQQD
Eyg0ZThhOWQ3YTVhZWY4ZGUzZWNlZTEzN2U2OGVmOWQ4NTM4NTMxOTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxasMEfuXil76KyTqoukTeCA7YiDy
ffTVRlKGn7F5J+cJ3RPUQcBbuWUXke8y6TlMRruAeeMstcG64Xy0ZV3OAV1Z8hRT
kaHuOyTj/Smy/L5RCD5IX6EKCWT0bczoTNj6rJLd7yFSMwyhafURXfNxnjmlTL/r
yG5ftJeaznDQxcDEZ3fqCXhG8aGr88MjSb4JVS0afJVGHDA77HSNXSJ4dwnCWa/E
0zN/G6r7EEQhU4bsE1sDVkm+UN9z+f7IpjZbLfTuc/d26ppV+rHz9NBcqyy1gOGM
RN2P0wnahrnn6yi89WXz9EOqV0udDP4xqlKOH/VqvPUCGaR54pSkyyw5uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6KnXpa743j7O4TfmjvnYU4UxlvMB8GA1UdIwQY
MBaAFGI6sYIM5IxXnaQMZthSZfHCz8tOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWpxeGdnemtqRmVkcEF4bTJGSmw4Y0xQeTA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNGM5ZDUtZTI3Zi00NGJmLWJhNDIt
NmMzZDExZDQwZDc4LzEvWWpxeGdnemtqRmVkcEF4bTJGSmw4Y0xQeTA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iNGM5ZDUtZTI3Zi00NGJmLWJhNDItNmMzZDExZDQwZDc4
LzEvWWpxeGdnemtqRmVkcEF4bTJGSmw4Y0xQeTA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgU7Lfk5
oz6buCVFefYH1DcRRG8eP7yMqEh2/pG0K8tYxNEFVM27ksZgw/hRlZ0oLsTfuNbP
o3AA4epWjpyxLv93yq1xeJ4gnXpcv4nxgyMklj7uWJVhZB5ciOf2rkE7rA/rm9op
TW8Oj2Wd9Jw79cNUPXSnbGCsL6n4a9iXNp4XI1JqjL//+M9cFygxTQKMhdpfE93c
TNnid6Lggdx7iW/BHrRL/oEt2SBPcK4vMMFzVoVFjbx9DVaJITTr+jpLlel2C9E2
RCtpBR7z9wSupzEIcsEAIjy6+WW6gHtBOg09/0Ex45vdOrtj4D2H6ErG4pJO79PN
mmtNn5L10mIuug==
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:05:03 2025 by rpki-client