Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
File: yh79jmMWnY_b-YtxOfzd7a8BbLI.mft (raw, json)
Hash identifier: R96+OlToLV1pX3VocVKBAuZemlMKQJ4qks2RU9aLZqA=
Subject key identifier: F7:F0:A5:FC:5D:56:C5:9F:6A:89:35:2C:4F:2D:BA:1E:46:5E:0A:46
Authority key identifier: CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2
Certificate issuer: /CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2
Certificate serial: 0194BD17F92A91C4E76AF1EC9429EF2EE793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: BUbgMU6qyG1ptU2dIWwVh8i-Kjc.roa (hash: rqwF60FwzB+zZQwtQI8AX0k6qPeHy+PObyrOxNB5ovY=)
2: yh79jmMWnY_b-YtxOfzd7a8BbLI.crl (hash: zz2sYVqHO7aDXsBt8FNWIt8swMNq62iKY1vVxvbTmFU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f9:2a:91:c4:e7:6a:f1:ec:94:29:ef:2e:e7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=f7f0a5fc5d56c59f6a89352c4f2dba1e465e0a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c0:5c:72:00:27:9c:59:6e:89:a0:b5:01:57:
57:8a:8a:c1:32:f4:51:7a:89:03:64:92:70:3c:ff:
3e:15:5c:e7:e6:3a:19:06:7e:be:db:56:a1:69:be:
d3:7d:60:fb:7e:49:1f:c8:1d:e9:23:e3:39:b4:29:
d5:70:2b:e7:74:bc:b6:dd:33:4a:44:95:81:0b:77:
29:58:49:8c:d0:96:f2:92:83:9a:a5:4e:a6:20:dd:
2c:2a:ea:19:9b:17:9f:f5:23:2b:7e:21:01:f9:31:
71:d3:75:08:c3:b8:c4:b3:75:bb:b9:ab:99:4e:ed:
a3:db:cb:94:de:41:bc:8f:c5:cd:22:90:1a:8f:83:
64:23:4d:63:00:6d:ec:23:99:81:0f:00:70:18:75:
c5:6f:df:c3:d2:ea:c2:07:a5:dd:36:d2:69:e1:f7:
44:87:80:fa:c2:cf:41:35:4f:1e:07:27:6d:ce:1d:
80:1d:c5:ad:48:ad:20:d7:f2:c9:94:fc:da:b2:23:
4e:1b:ab:f3:2c:54:ec:e3:a6:a3:43:27:5f:46:cd:
f1:c3:83:6c:87:2a:4b:f3:1a:fc:97:cf:f4:f9:f7:
16:28:8e:15:41:d7:5a:94:74:b6:5a:37:d0:b0:db:
09:9b:2d:18:26:37:cb:bc:d9:95:37:6b:cf:b3:2c:
84:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F0:A5:FC:5D:56:C5:9F:6A:89:35:2C:4F:2D:BA:1E:46:5E:0A:46
X509v3 Authority Key Identifier:
keyid:CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:12:a5:53:4f:62:7d:d1:56:e5:be:0f:1e:cb:57:59:ae:19:
a1:74:00:c5:85:04:95:03:c4:98:a4:da:eb:fd:f0:26:7f:ab:
f8:4a:35:57:18:f9:0c:f7:cc:80:ef:cb:0b:fc:14:5b:34:9f:
a7:88:bd:12:42:91:84:a0:cd:82:17:b0:e9:36:2c:c7:4a:e2:
10:e9:4a:ba:1b:0f:5c:7b:44:3d:09:9e:ea:00:d9:c2:ad:f5:
19:9f:0f:c4:ed:7a:9a:97:c2:23:29:78:b0:5c:7d:44:2f:a0:
62:cc:12:66:76:21:b1:82:d3:03:52:02:a6:54:10:16:40:23:
7e:95:b1:04:26:5c:0f:b5:67:dc:e8:2e:8f:75:24:48:3b:e8:
79:4e:65:e1:83:7f:cc:36:68:47:e8:b9:32:ef:bc:10:b9:d1:
fc:11:1b:9a:44:41:8a:db:c8:21:09:b4:08:87:a4:30:65:35:
c7:eb:b1:2c:e4:22:aa:3b:9a:38:af:fe:2b:90:0a:bf:cb:bd:
e3:b4:ad:39:b3:31:ec:01:ed:cf:8a:77:f0:c0:be:6a:9c:2e:
7e:a6:9c:b6:7e:56:6c:82:1c:77:12:b2:60:8c:98:d3:34:11:
b9:de:d7:ea:9b:b4:66:98:78:43:26:b6:d3:64:82:6c:66:9b:
4c:e7:0b:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F/kqkcTnavHslCnvLueTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMWVmZDhlNjMxNjlkOGZkYmY5OGI3MTM5ZmNkZGVkYWYw
MTZjYjIwHhcNMjUwMTMxMTYwMDUyWhcNMjUwMjAxMTYwMDUyWjAzMTEwLwYDVQQD
EyhmN2YwYTVmYzVkNTZjNTlmNmE4OTM1MmM0ZjJkYmExZTQ2NWUwYTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusBccgAnnFluiaC1AVdXiorBMvRR
eokDZJJwPP8+FVzn5joZBn6+21ahab7TfWD7fkkfyB3pI+M5tCnVcCvndLy23TNK
RJWBC3cpWEmM0JbykoOapU6mIN0sKuoZmxef9SMrfiEB+TFx03UIw7jEs3W7uauZ
Tu2j28uU3kG8j8XNIpAaj4NkI01jAG3sI5mBDwBwGHXFb9/D0urCB6XdNtJp4fdE
h4D6ws9BNU8eBydtzh2AHcWtSK0g1/LJlPzasiNOG6vzLFTs46ajQydfRs3xw4Ns
hypL8xr8l8/0+fcWKI4VQddalHS2WjfQsNsJmy0YJjfLvNmVN2vPsyyERwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfwpfxdVsWfaok1LE8tuh5GXgpGMB8GA1UdIwQY
MBaAFMoe/Y5jFp2P2/mLcTn83e2vAWyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWg3OWptTVduWV9iLVl0eE9memQ3YThCYkxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9kOTYxZmUtZDhhYS00OGU1LTk2ZmQt
ZjA3ZjA2Y2JlYTJkLzEveWg3OWptTVduWV9iLVl0eE9memQ3YThCYkxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9kOTYxZmUtZDhhYS00OGU1LTk2ZmQtZjA3ZjA2Y2JlYTJk
LzEveWg3OWptTVduWV9iLVl0eE9memQ3YThCYkxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBKlU09i
fdFW5b4PHstXWa4ZoXQAxYUElQPEmKTa6/3wJn+r+Eo1Vxj5DPfMgO/LC/wUWzSf
p4i9EkKRhKDNghew6TYsx0riEOlKuhsPXHtEPQme6gDZwq31GZ8PxO16mpfCIyl4
sFx9RC+gYswSZnYhsYLTA1ICplQQFkAjfpWxBCZcD7Vn3Oguj3UkSDvoeU5l4YN/
zDZoR+i5Mu+8ELnR/BEbmkRBitvIIQm0CIekMGU1x+uxLOQiqjuaOK/+K5AKv8u9
47StObMx7AHtz4p38MC+apwufqactn5WbIIcdxKyYIyY0zQRud7X6pu0Zph4Qya2
02SCbGabTOcLaQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:12:14 2025 by rpki-client