Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
File: YddkoENCcsEymumSiNCSvD7yIo8.mft (raw, json)
Hash identifier: aBgan21lVKTEjNsDGaobkJMITRs5xbuAb1BFGZ0+gXE=
Subject key identifier: 6E:58:D2:AB:E4:59:E3:83:5E:FE:9A:A0:94:DA:AD:52:25:CE:D6:71
Authority key identifier: 61:D7:64:A0:43:42:72:C1:32:9A:E9:92:88:D0:92:BC:3E:F2:22:8F
Certificate issuer: /CN=61d764a0434272c1329ae99288d092bc3ef2228f
Certificate serial: 0194BC052863D1C5053ED8812402B05B9366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
Manifest number: 1382
Signing time: Fri 31 Jan 2025 11:00:42 +0000
Manifest this update: Fri 31 Jan 2025 11:00:42 +0000
Manifest next update: Sat 01 Feb 2025 11:00:42 +0000
Files and hashes: 1: REqtYQmRREKLJc9dQnOchbRCd38.roa (hash: CsFmG2TMLbA2Znbnw8r80UkQYTzgJ0VzpR3kBwBlHwY=)
2: YddkoENCcsEymumSiNCSvD7yIo8.crl (hash: 4cJ4kEPwxEfg3f6REjt9Wv7QeW9mE5r5aSgbbP5s+jo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:28:63:d1:c5:05:3e:d8:81:24:02:b0:5b:93:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d764a0434272c1329ae99288d092bc3ef2228f
Validity
Not Before: Jan 31 11:00:42 2025 GMT
Not After : Feb 1 11:00:42 2025 GMT
Subject: CN=6e58d2abe459e3835efe9aa094daad5225ced671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:55:f3:6e:f3:bc:c9:e4:90:cd:fa:c8:bc:
c4:09:76:93:38:53:53:94:a4:ba:9a:3f:92:be:6c:
7b:e5:57:8f:26:c5:47:27:8e:28:d8:02:a6:c7:e7:
29:4e:30:c5:08:b0:24:e8:c9:2f:af:49:0f:c0:2f:
57:91:9a:b6:be:6a:02:96:39:30:98:6d:6d:09:8d:
a8:35:7c:cc:41:0c:3a:b2:e5:69:a7:23:c1:0b:c0:
c7:13:8e:23:d8:77:1a:b6:62:82:fb:7a:8b:d6:c0:
9a:7d:e9:4c:ec:1f:fc:0d:5c:d4:e2:1c:20:d2:e9:
d1:b4:65:d0:67:d0:ec:5f:65:6a:27:0b:65:f6:dc:
a7:19:07:19:08:aa:5e:3b:3c:dd:d6:2e:3f:74:95:
40:cf:d1:51:46:49:dd:53:da:65:f7:c2:de:da:a1:
21:9e:ac:f9:67:08:77:2a:1b:18:ca:67:cc:9d:4d:
86:c2:d6:b7:51:d8:b6:b7:3f:33:9c:fb:39:64:97:
a1:f5:2d:76:df:0e:48:46:fb:69:de:c5:10:e0:87:
9f:08:a8:d7:a0:c0:d2:ff:2e:50:89:98:88:dd:2c:
ac:f2:14:ae:b7:b1:bf:f7:74:f1:54:75:bd:9c:9c:
db:08:17:ee:08:8e:16:d7:18:34:13:0d:1a:43:d7:
9a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:58:D2:AB:E4:59:E3:83:5E:FE:9A:A0:94:DA:AD:52:25:CE:D6:71
X509v3 Authority Key Identifier:
keyid:61:D7:64:A0:43:42:72:C1:32:9A:E9:92:88:D0:92:BC:3E:F2:22:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:49:99:91:96:dc:b9:07:d8:9e:b2:c7:2f:ff:7a:ca:88:ab:
eb:86:81:11:b6:0b:36:f4:78:8e:5a:68:37:6b:e4:e1:56:ce:
db:5e:d9:62:fe:18:bf:ab:1a:06:f9:3d:69:e4:a8:77:e8:3e:
ee:c4:5b:94:49:a3:fe:40:ff:b2:ef:76:6b:d2:e6:64:ca:79:
f1:6a:1e:bc:9c:a3:33:3f:8c:a9:c0:57:c8:a2:44:d7:94:87:
9a:61:c2:3e:98:52:49:c7:d2:b3:00:f7:78:88:38:ef:e8:90:
56:71:75:3b:2e:1f:ab:e2:12:b1:ac:5e:53:c4:81:46:58:a0:
60:07:cc:e4:d4:eb:13:c3:01:87:2c:cd:15:f2:de:8a:93:d9:
c3:f9:97:44:54:2b:b2:88:61:a2:67:5d:c7:f3:62:1f:39:69:
88:cb:f9:83:28:48:3e:81:0d:c4:72:45:37:10:2b:08:62:ae:
ef:3f:b0:f9:cc:29:a6:ff:e1:63:c7:f9:0f:9d:34:1f:7c:38:
8c:24:77:af:ea:a4:2b:45:a2:c4:32:e8:22:f8:90:83:28:89:
62:14:94:6f:ba:df:89:44:fd:38:f2:ac:9b:65:e4:70:d3:55:
fd:7b:8a:7f:2a:f5:85:d8:37:d9:09:12:e6:f0:f8:44:52:c2:
9a:38:ba:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BShj0cUFPtiBJAKwW5NmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZDc2NGEwNDM0MjcyYzEzMjlhZTk5Mjg4ZDA5MmJjM2Vm
MjIyOGYwHhcNMjUwMTMxMTEwMDQyWhcNMjUwMjAxMTEwMDQyWjAzMTEwLwYDVQQD
Eyg2ZTU4ZDJhYmU0NTllMzgzNWVmZTlhYTA5NGRhYWQ1MjI1Y2VkNjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDFV827zvMnkkM36yLzECXaTOFNT
lKS6mj+Svmx75VePJsVHJ44o2AKmx+cpTjDFCLAk6Mkvr0kPwC9XkZq2vmoCljkw
mG1tCY2oNXzMQQw6suVppyPBC8DHE44j2HcatmKC+3qL1sCafelM7B/8DVzU4hwg
0unRtGXQZ9DsX2VqJwtl9tynGQcZCKpeOzzd1i4/dJVAz9FRRkndU9pl98Le2qEh
nqz5Zwh3KhsYymfMnU2Gwta3Udi2tz8znPs5ZJeh9S123w5IRvtp3sUQ4IefCKjX
oMDS/y5QiZiI3Sys8hSut7G/93TxVHW9nJzbCBfuCI4W1xg0Ew0aQ9eauQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5Y0qvkWeODXv6aoJTarVIlztZxMB8GA1UdIwQY
MBaAFGHXZKBDQnLBMprpkojQkrw+8iKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWRka29FTkNjc0V5bXVtU2lOQ1N2RDd5SW84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80MzMxMmYtOTkxZC00ZTk1LTkzZGYt
MmM3ZWY5ZmYwM2Y1LzEvWWRka29FTkNjc0V5bXVtU2lOQ1N2RDd5SW84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80MzMxMmYtOTkxZC00ZTk1LTkzZGYtMmM3ZWY5ZmYwM2Y1
LzEvWWRka29FTkNjc0V5bXVtU2lOQ1N2RDd5SW84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQUmZkZbc
uQfYnrLHL/96yoir64aBEbYLNvR4jlpoN2vk4VbO217ZYv4Yv6saBvk9aeSod+g+
7sRblEmj/kD/su92a9LmZMp58WoevJyjMz+MqcBXyKJE15SHmmHCPphSScfSswD3
eIg47+iQVnF1Oy4fq+ISsaxeU8SBRligYAfM5NTrE8MBhyzNFfLeipPZw/mXRFQr
sohhomddx/NiHzlpiMv5gyhIPoENxHJFNxArCGKu7z+w+cwppv/hY8f5D500H3w4
jCR3r+qkK0WixDLoIviQgyiJYhSUb7rfiUT9OPKsm2XkcNNV/XuKfyr1hdg32QkS
5vD4RFLCmji6YA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:59 2025 by rpki-client