Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
File: Yf61N-NjXsgAFRDDGSt36xeXwKo.mft (raw, json)
Hash identifier: 66FJhkmM9Q39kyMwvtYNnGtyCvwTktfsfSxhMPFjuOE=
Subject key identifier: 54:A1:A2:DE:10:7C:0E:16:7D:06:5B:90:A2:5B:BF:3C:59:90:71:AA
Authority key identifier: 61:FE:B5:37:E3:63:5E:C8:00:15:10:C3:19:2B:77:EB:17:97:C0:AA
Certificate issuer: /CN=61feb537e3635ec8001510c3192b77eb1797c0aa
Certificate serial: 0194BD17BBAA9C2FF22FFC8F95816A3784A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
Manifest number: 0A28
Signing time: Fri 31 Jan 2025 16:00:36 +0000
Manifest this update: Fri 31 Jan 2025 16:00:36 +0000
Manifest next update: Sat 01 Feb 2025 16:00:36 +0000
Files and hashes: 1: Yf61N-NjXsgAFRDDGSt36xeXwKo.crl (hash: ckCFRLilRCRi3GkMFN7OHIqOiY/HjMXa82l/lObq7oU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:bb:aa:9c:2f:f2:2f:fc:8f:95:81:6a:37:84:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61feb537e3635ec8001510c3192b77eb1797c0aa
Validity
Not Before: Jan 31 16:00:36 2025 GMT
Not After : Feb 1 16:00:36 2025 GMT
Subject: CN=54a1a2de107c0e167d065b90a25bbf3c599071aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:c6:26:77:11:78:0a:cc:66:2a:9c:2b:3b:
3b:cb:05:bc:d0:bd:69:b5:f6:4b:a2:32:e3:51:be:
4b:ec:15:73:21:4c:36:14:b2:18:54:2f:a3:5f:db:
4a:c4:a4:db:ab:60:48:2d:a6:16:a5:06:6e:cc:db:
7d:b6:5f:7d:3b:3c:14:25:e7:8b:02:ab:c5:92:ba:
b1:37:cd:cb:d9:4f:97:41:5c:08:ac:cc:ba:41:06:
4f:11:ed:42:aa:8e:65:37:8c:6a:7b:0f:0d:a9:d2:
83:be:10:bb:ab:dd:65:73:d5:1c:4e:0c:90:4a:7a:
c8:57:db:fa:ae:0c:ac:73:34:46:34:47:22:a3:6e:
35:d7:07:1b:05:4e:fa:91:16:ec:21:3e:1b:0b:32:
b5:9e:e4:4a:7b:06:d9:cf:68:93:15:cd:ff:dd:0e:
64:67:c9:52:41:11:b7:38:25:ac:80:aa:26:de:dd:
1d:40:82:71:0e:41:ff:30:32:f2:5a:fd:c9:c1:57:
86:9b:c2:b3:ee:5f:a6:73:ef:e9:9c:58:4d:0c:a8:
9c:e8:37:97:a2:14:ee:b8:e8:25:85:3d:a4:94:2b:
7a:2a:02:7c:8a:cc:ba:07:db:c8:0b:7a:05:a4:b7:
56:ae:3f:88:07:7a:2a:b0:47:34:44:dd:ee:0a:bb:
e6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A1:A2:DE:10:7C:0E:16:7D:06:5B:90:A2:5B:BF:3C:59:90:71:AA
X509v3 Authority Key Identifier:
keyid:61:FE:B5:37:E3:63:5E:C8:00:15:10:C3:19:2B:77:EB:17:97:C0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:2a:e9:d3:1d:e9:70:07:30:68:3e:e4:91:12:43:f2:fe:01:
14:e2:e4:fd:78:14:00:04:27:0c:76:75:2d:9f:6a:3a:20:70:
52:2f:16:dc:14:f0:86:ef:7b:62:ed:25:54:5e:06:46:37:72:
8f:01:a4:47:81:f5:23:43:82:45:f8:7e:b9:77:52:c6:0d:54:
9a:70:1d:91:7c:95:0d:dd:d2:96:27:2c:3a:ec:2f:f5:fe:18:
e3:cb:75:e2:5f:ed:7c:ca:03:c4:0f:04:30:b2:19:a9:38:1d:
75:95:3d:62:dd:8b:a9:1a:2d:a5:9a:19:f0:0c:d5:99:46:e7:
36:87:89:ed:6a:93:cc:fe:b9:c3:91:9f:eb:1b:8f:57:b6:e3:
7f:81:16:fd:8c:57:8c:5e:d8:cb:c3:d3:4b:75:26:8d:62:6c:
6a:ed:91:21:74:f3:09:8b:ac:53:f2:62:a3:d4:de:d3:e1:b4:
1c:07:56:48:e4:98:27:93:8a:1f:44:a7:2a:1d:2e:d3:3a:c6:
ef:e5:1e:e2:bd:22:04:9f:08:93:19:41:fb:9c:08:36:ee:82:
f9:6b:8f:83:15:74:a8:bd:13:00:73:22:df:9a:5c:f6:09:e7:
5a:5f:5f:f3:4d:15:aa:ec:ec:d8:6b:c5:c7:d9:71:a2:49:f6:
15:02:21:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F7uqnC/yL/yPlYFqN4SoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZmViNTM3ZTM2MzVlYzgwMDE1MTBjMzE5MmI3N2ViMTc5
N2MwYWEwHhcNMjUwMTMxMTYwMDM2WhcNMjUwMjAxMTYwMDM2WjAzMTEwLwYDVQQD
Eyg1NGExYTJkZTEwN2MwZTE2N2QwNjViOTBhMjViYmYzYzU5OTA3MWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2DGJncReArMZiqcKzs7ywW80L1p
tfZLojLjUb5L7BVzIUw2FLIYVC+jX9tKxKTbq2BILaYWpQZuzNt9tl99OzwUJeeL
AqvFkrqxN83L2U+XQVwIrMy6QQZPEe1Cqo5lN4xqew8NqdKDvhC7q91lc9UcTgyQ
SnrIV9v6rgysczRGNEcio2411wcbBU76kRbsIT4bCzK1nuRKewbZz2iTFc3/3Q5k
Z8lSQRG3OCWsgKom3t0dQIJxDkH/MDLyWv3JwVeGm8Kz7l+mc+/pnFhNDKic6DeX
ohTuuOglhT2klCt6KgJ8isy6B9vIC3oFpLdWrj+IB3oqsEc0RN3uCrvm1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFShot4QfA4WfQZbkKJbvzxZkHGqMB8GA1UdIwQY
MBaAFGH+tTfjY17IABUQwxkrd+sXl8CqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWY2MU4tTmpYc2dBRlJEREdTdDM2eGVYd0tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xODIwNDQtOWNiZi00NTc5LWIzYjQt
Nzg1Njc4N2EyZTYzLzEvWWY2MU4tTmpYc2dBRlJEREdTdDM2eGVYd0tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8xODIwNDQtOWNiZi00NTc5LWIzYjQtNzg1Njc4N2EyZTYz
LzEvWWY2MU4tTmpYc2dBRlJEREdTdDM2eGVYd0tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuSrp0x3p
cAcwaD7kkRJD8v4BFOLk/XgUAAQnDHZ1LZ9qOiBwUi8W3BTwhu97Yu0lVF4GRjdy
jwGkR4H1I0OCRfh+uXdSxg1UmnAdkXyVDd3SlicsOuwv9f4Y48t14l/tfMoDxA8E
MLIZqTgddZU9Yt2LqRotpZoZ8AzVmUbnNoeJ7WqTzP65w5Gf6xuPV7bjf4EW/YxX
jF7Yy8PTS3UmjWJsau2RIXTzCYusU/Jio9Te0+G0HAdWSOSYJ5OKH0SnKh0u0zrG
7+Ue4r0iBJ8IkxlB+5wINu6C+WuPgxV0qL0TAHMi35pc9gnnWl9f800Vquzs2GvF
x9lxokn2FQIhvA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:31:06 2025 by rpki-client