Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
File: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft (raw, json)
Hash identifier: 6VYGzNLnkx2xWc+onSEvvIwGDeYIUSefRwAulZQVJaE=
Subject key identifier: 86:23:15:61:AB:D2:F2:70:8C:C3:B0:86:9A:F4:89:62:A4:CF:AF:5A
Authority key identifier: FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
Certificate issuer: /CN=fb280c05b76912a09cb12934db33c8e520acdd96
Certificate serial: 0194BBCDD5587946D8662CF6162A92B525A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
Manifest number: 0759
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl (hash: u/sDCkMCTTEQSQ+yOI7Kdei9rsI37OIDUJyNlB0fzko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d5:58:79:46:d8:66:2c:f6:16:2a:92:b5:25:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb280c05b76912a09cb12934db33c8e520acdd96
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=86231561abd2f2708cc3b0869af48962a4cfaf5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:9e:9a:d8:1e:18:c0:95:01:fe:27:61:2f:
d4:84:51:68:54:fa:4c:66:d5:d2:53:31:ef:cf:58:
e4:f7:58:cf:90:f5:b0:bf:e2:5e:1e:1b:4f:9d:0a:
29:9d:4c:d7:67:55:b8:e3:4f:79:fa:08:9b:7e:97:
aa:40:4f:ba:a8:24:d2:70:94:c2:66:b4:da:9f:f3:
f5:0a:37:e3:4a:5e:d9:d6:10:5d:8c:14:b2:90:1d:
3a:28:64:c8:2a:d6:05:03:65:53:1a:d3:05:be:d9:
04:a3:e2:fc:24:91:ec:07:d9:f9:f0:45:d0:0e:40:
aa:d7:cd:8c:8d:c3:28:06:4e:18:2f:20:84:63:0d:
49:5e:50:2a:9f:c5:a2:f7:cf:df:d0:f4:16:91:ba:
03:46:de:a1:bb:2c:52:61:c1:e1:be:3f:a2:16:12:
0c:61:1e:f0:b7:b1:7c:14:bd:6b:ff:d3:6b:41:58:
86:3a:53:96:6d:ab:29:39:6b:52:02:70:97:5a:95:
fe:da:06:e4:58:9b:5d:e4:c6:e0:63:8c:39:59:f2:
d5:9f:af:85:8c:63:df:41:84:d6:19:57:53:1e:fd:
c9:75:5b:0e:35:19:0a:18:9f:91:19:2b:c7:1f:c7:
89:12:e0:ee:ca:cf:c2:27:78:e7:b1:aa:ab:d7:10:
e7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:23:15:61:AB:D2:F2:70:8C:C3:B0:86:9A:F4:89:62:A4:CF:AF:5A
X509v3 Authority Key Identifier:
keyid:FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:fb:6e:98:64:89:c6:5c:40:65:13:84:ff:64:3f:be:d4:42:
74:d6:c8:aa:5a:fb:22:f2:dd:ad:f3:d4:bd:7d:f3:13:77:5c:
db:7a:68:35:d2:cd:e5:5a:db:c7:8c:fc:05:86:26:91:36:b3:
33:99:fb:e7:42:7c:e3:5a:6b:ab:01:9a:11:d6:cd:cd:20:54:
3a:46:12:ee:02:27:e7:be:3b:31:71:ba:f9:47:0d:2b:6b:03:
dd:9b:24:d7:c6:84:d1:cd:48:fc:c0:ca:83:76:39:82:6a:f6:
6d:6b:b6:3c:2d:3b:cd:3e:79:45:d7:d5:6e:83:da:7c:26:c3:
cc:fa:01:74:00:83:1d:cc:67:46:31:27:93:86:3b:66:7a:dd:
d6:15:b4:c3:92:fb:32:47:06:b7:7f:51:de:cb:a7:cb:a3:42:
a8:20:ae:52:09:4d:0f:39:90:21:dc:e1:7a:b4:74:3b:09:25:
40:6f:42:90:66:1b:65:df:ed:da:5e:04:cf:b5:43:6f:87:6b:
35:c7:73:1d:24:0b:aa:a0:56:a6:3c:d3:4c:0c:6c:da:12:20:
e5:a4:75:8e:6f:54:ad:02:44:01:e4:8d:37:9c:40:f7:c6:d4:
d6:8e:1e:a1:0a:86:74:55:cf:e5:07:be:f8:19:e1:d2:a7:13:
73:b9:92:9e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS7zdVYeUbYZiz2FiqStSWnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMjgwYzA1Yjc2OTEyYTA5Y2IxMjkzNGRiMzNjOGU1MjBh
Y2RkOTYwHhcNMjUwMTMxMTAwMDE2WhcNMjUwMjAxMTAwMDE2WjAzMTEwLwYDVQQD
Eyg4NjIzMTU2MWFiZDJmMjcwOGNjM2IwODY5YWY0ODk2MmE0Y2ZhZjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3SemtgeGMCVAf4nYS/UhFFoVPpM
ZtXSUzHvz1jk91jPkPWwv+JeHhtPnQopnUzXZ1W44095+gibfpeqQE+6qCTScJTC
ZrTan/P1CjfjSl7Z1hBdjBSykB06KGTIKtYFA2VTGtMFvtkEo+L8JJHsB9n58EXQ
DkCq182MjcMoBk4YLyCEYw1JXlAqn8Wi98/f0PQWkboDRt6huyxSYcHhvj+iFhIM
YR7wt7F8FL1r/9NrQViGOlOWbaspOWtSAnCXWpX+2gbkWJtd5MbgY4w5WfLVn6+F
jGPfQYTWGVdTHv3JdVsONRkKGJ+RGSvHH8eJEuDuys/CJ3jnsaqr1xDnvwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIYjFWGr0vJwjMOwhpr0iWKkz69aMB8GA1UdIwQY
MBaAFPsoDAW3aRKgnLEpNNszyOUgrN2WMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS15Z01CYmRwRXFDY3NTazAyelBJNVNDczNaWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvZjQ4Nzg0LWY1ODktNGFiNi1iZTI2
LTI1ZDJmZGJlYTdkMi8xLzEteWdNQmJkcEVxQ2NzU2swMnpQSTVTQ3MzWlkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JiL2Y0ODc4NC1mNTg5LTRhYjYtYmUyNi0yNWQyZmRiZWE3
ZDIvMS8xLXlnTUJiZHBFcUNjc1NrMDJ6UEk1U0NzM1pZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPvtu
mGSJxlxAZROE/2Q/vtRCdNbIqlr7IvLdrfPUvX3zE3dc23poNdLN5Vrbx4z8BYYm
kTazM5n750J841prqwGaEdbNzSBUOkYS7gIn5747MXG6+UcNK2sD3Zsk18aE0c1I
/MDKg3Y5gmr2bWu2PC07zT55RdfVboPafCbDzPoBdACDHcxnRjEnk4Y7Znrd1hW0
w5L7MkcGt39R3suny6NCqCCuUglNDzmQIdzherR0OwklQG9CkGYbZd/t2l4Ez7VD
b4drNcdzHSQLqqBWpjzTTAxs2hIg5aR1jm9UrQJEAeSNN5xA98bU1o4eoQqGdFXP
5Qe++Bnh0qcTc7mSng==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:08 2025 by rpki-client