Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
File: y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft (raw, json)
Hash identifier: nhAkrN4lhfsU7/XGEpR5oEwAm7wWyz6nvLxN+bwcnfM=
Subject key identifier: A5:13:FB:AB:60:8A:ED:D4:F5:6F:C3:87:B0:F6:92:F5:3B:D3:4E:12
Authority key identifier: CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30
Certificate issuer: /CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30
Certificate serial: 0194BCA9B08F5A0290C74A8E34DA887B1454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
Manifest number: 0386
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: meIfpWGWvt-OCR5hELolYg558lc.roa (hash: b6ypOtwfgJ3TZwPfNgJCJZ3JwL1dV4492jTSEMjG2cE=)
2: y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl (hash: 9BS5q486O0muox1w7iwr9SJEr3DWzcDelRnSJSg/muQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b0:8f:5a:02:90:c7:4a:8e:34:da:88:7b:14:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=a513fbab608aedd4f56fc387b0f692f53bd34e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:37:65:c6:31:ee:3b:2e:24:4b:ed:ab:47:7f:
c1:48:19:44:da:af:90:08:62:32:c8:66:cc:60:fe:
47:16:45:d0:f5:59:d0:eb:eb:20:ec:b2:8e:4c:7b:
d3:06:dc:74:34:c5:ef:c4:93:1c:53:10:e3:18:3e:
3a:e9:e3:0c:b0:f5:45:80:55:dd:09:94:33:39:bc:
81:42:32:92:1a:9e:26:3a:02:f1:32:6d:a0:a2:e4:
b2:cf:e6:a2:e6:d4:a6:e0:02:93:0a:b0:7f:b6:3e:
6a:06:e3:28:ce:82:c4:40:e8:f3:dc:f7:54:c1:6f:
bb:d2:43:7d:32:84:00:dd:59:e3:71:b3:a6:94:5c:
b5:d0:08:97:92:d1:68:3d:bf:57:a8:2f:34:a6:fa:
b1:a4:09:83:6a:ea:42:2a:70:79:5a:5a:c1:e5:36:
8a:ab:7b:44:46:f3:72:af:5f:0f:dd:7a:f7:af:cb:
22:36:26:2c:69:b2:97:a4:a3:0d:56:87:82:9c:54:
81:62:1a:98:2a:b2:c9:b8:1e:ca:a3:e2:63:9d:1c:
52:56:db:ff:d0:5e:6d:55:c7:ab:9a:bb:d3:7a:0e:
6f:6d:e4:7d:0f:4a:fb:75:38:35:2f:b2:b2:fb:3d:
d4:f3:ac:08:75:8e:ad:b1:9a:2b:c7:e5:0a:73:88:
73:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:13:FB:AB:60:8A:ED:D4:F5:6F:C3:87:B0:F6:92:F5:3B:D3:4E:12
X509v3 Authority Key Identifier:
keyid:CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:1b:14:08:90:71:3d:df:40:31:9b:c0:14:3c:fc:11:de:6b:
e8:4a:a0:24:7f:f0:e0:06:10:f0:fe:7d:70:5d:b3:91:5a:be:
73:cc:48:bd:fe:a2:bd:85:c5:e5:77:a1:88:27:33:2a:5d:ee:
92:80:c2:37:15:ac:f4:ed:e7:93:21:1a:36:ea:45:45:f4:db:
c4:d0:18:14:fb:56:c2:80:08:9b:92:ec:cb:bb:86:81:36:c8:
c1:83:92:f5:c3:45:78:f4:2f:b8:2a:4e:c8:2b:a1:ec:65:20:
6e:f0:84:2a:f0:db:99:3a:f3:ba:c2:b8:7a:a9:d8:9a:fe:ec:
2b:7d:10:29:9d:c5:02:e6:21:c4:b3:53:ed:42:46:37:e0:9f:
0a:8f:d4:d6:88:e8:93:f1:dd:05:d3:2c:8f:52:15:b3:e7:a2:
91:56:18:1b:b5:37:be:fb:80:54:b4:ca:a2:1f:bd:3b:27:36:
86:49:44:02:78:5f:e2:14:d7:21:e7:a2:d6:f7:4b:66:f8:57:
be:5b:b7:09:6b:3e:85:85:ed:87:cf:db:91:fc:ea:df:52:22:
81:05:a0:07:0b:39:e9:05:14:2a:cd:ec:f7:1f:bb:b4:e9:38:
15:18:a3:b5:4b:db:28:fc:9a:ff:a1:4f:52:87:c3:48:01:2d:
d9:5d:24:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qbCPWgKQx0qONNqIexRUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZmY3ZmQ3ZWUxMWVmZjg5MTRhMzE1MGZjZDE2YTY0OGEz
YzdmMzAwHhcNMjUwMTMxMTQwMDI0WhcNMjUwMjAxMTQwMDI0WjAzMTEwLwYDVQQD
EyhhNTEzZmJhYjYwOGFlZGQ0ZjU2ZmMzODdiMGY2OTJmNTNiZDM0ZTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zdlxjHuOy4kS+2rR3/BSBlE2q+Q
CGIyyGbMYP5HFkXQ9VnQ6+sg7LKOTHvTBtx0NMXvxJMcUxDjGD466eMMsPVFgFXd
CZQzObyBQjKSGp4mOgLxMm2gouSyz+ai5tSm4AKTCrB/tj5qBuMozoLEQOjz3PdU
wW+70kN9MoQA3VnjcbOmlFy10AiXktFoPb9XqC80pvqxpAmDaupCKnB5WlrB5TaK
q3tERvNyr18P3Xr3r8siNiYsabKXpKMNVoeCnFSBYhqYKrLJuB7Ko+JjnRxSVtv/
0F5tVcermrvTeg5vbeR9D0r7dTg1L7Ky+z3U86wIdY6tsZorx+UKc4hzbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUT+6tgiu3U9W/Dh7D2kvU7004SMB8GA1UdIwQY
MBaAFMv/f9fuEe/4kUoxUPzRamSKPH8wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveV85XzEtNFI3X2lSU2pGUV9ORnFaSW84ZnpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NTgxNDMtYWYwYy00OTNlLThlZDEt
OWY1Zjc4MDU2OWExLzEveV85XzEtNFI3X2lSU2pGUV9ORnFaSW84ZnpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NTgxNDMtYWYwYy00OTNlLThlZDEtOWY1Zjc4MDU2OWEx
LzEveV85XzEtNFI3X2lSU2pGUV9ORnFaSW84ZnpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBsUCJBx
Pd9AMZvAFDz8Ed5r6EqgJH/w4AYQ8P59cF2zkVq+c8xIvf6ivYXF5XehiCczKl3u
koDCNxWs9O3nkyEaNupFRfTbxNAYFPtWwoAIm5Lsy7uGgTbIwYOS9cNFePQvuCpO
yCuh7GUgbvCEKvDbmTrzusK4eqnYmv7sK30QKZ3FAuYhxLNT7UJGN+CfCo/U1ojo
k/HdBdMsj1IVs+eikVYYG7U3vvuAVLTKoh+9Oyc2hklEAnhf4hTXIeei1vdLZvhX
vlu3CWs+hYXth8/bkfzq31IigQWgBws56QUUKs3s9x+7tOk4FRijtUvbKPya/6FP
UofDSAEt2V0kjg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:24 2025 by rpki-client