Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
File: DyKg7jvG4y2JLt3iV8u3mRefLNY.mft (raw, json)
Hash identifier: pPl5oWcunD+rWv+LMHM9zrB9cjLXWhb8mQGdZhEYt3w=
Subject key identifier: 41:D5:E9:A9:5B:CA:FC:2F:A4:5A:C8:6B:0E:EF:79:17:70:A0:00:AE
Authority key identifier: 0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6
Certificate issuer: /CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
Certificate serial: 0194BD4E5AFA714612498065BF296D5648F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
Manifest number: 0595
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: 3ybDPKiA0wDv8fgYqqJjrGlrgZo.roa (hash: Lzgk9VM3/0+YuHabQnt8dL/9QNx4stqWd1uOafztoy0=)
2: DyKg7jvG4y2JLt3iV8u3mRefLNY.crl (hash: KJBtdVU34mHMr35mA8wL2RJUSrEM5tIrBTcgFd9/zh0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5a:fa:71:46:12:49:80:65:bf:29:6d:56:48:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=41d5e9a95bcafc2fa45ac86b0eef791770a000ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:87:85:b5:47:4c:33:f0:b2:cb:67:30:e3:29:
23:fd:ce:20:e8:01:8f:e1:4f:e1:2f:8e:b8:16:25:
98:3f:5d:e4:8c:6e:e5:9d:77:2a:9a:21:fd:85:33:
ba:b2:80:d3:16:0a:d6:fa:96:9e:3e:eb:6b:c9:37:
a7:89:5e:9e:e3:7f:c3:60:dd:f0:a9:a2:18:4c:ba:
b0:f2:cb:88:7a:7c:1d:46:21:6f:fa:8f:b1:30:67:
db:29:68:0c:df:d9:31:00:a7:de:e7:7e:17:a3:55:
52:7d:83:ab:f1:00:21:f4:e1:c6:f7:1d:28:e7:91:
63:06:49:58:9c:9c:50:64:10:db:a2:3d:bb:33:ab:
c1:b0:d4:e0:c9:03:3d:0d:ab:5d:a6:db:ad:c5:2c:
08:21:68:8b:a3:fb:7a:3b:e1:10:46:8b:86:fa:31:
82:8d:0a:c8:f6:f8:14:26:ea:86:8c:91:aa:d7:6f:
e0:d5:7d:1d:af:34:06:29:6a:7a:61:a5:70:08:76:
c9:50:63:5a:9c:e6:06:56:53:bb:e3:c6:d4:94:7e:
0c:21:5c:e9:5a:3f:5e:4a:e9:35:97:32:09:e7:f5:
c2:cd:0a:8d:d5:03:c5:2c:b4:43:a7:b3:fb:b8:6e:
d2:68:d8:2b:3e:1f:98:6f:0f:08:ba:5a:5f:99:4b:
43:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D5:E9:A9:5B:CA:FC:2F:A4:5A:C8:6B:0E:EF:79:17:70:A0:00:AE
X509v3 Authority Key Identifier:
keyid:0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3d:21:dc:80:c0:e0:cc:69:dd:a2:96:7a:74:86:b0:7e:74:
f4:e8:aa:d7:ad:2d:8a:c8:2c:f3:c7:8f:43:88:35:a1:01:6e:
75:2c:18:c6:b8:a6:b2:f8:e4:ac:ff:43:70:0b:ac:1b:94:44:
f0:09:fc:b2:51:b1:38:7c:4b:af:db:df:df:77:db:dd:06:90:
92:46:ed:cc:6f:3d:01:a1:a1:5a:16:4c:8b:6f:99:5a:a5:7d:
be:68:ff:ab:66:30:83:54:f1:68:a8:16:d1:b4:4a:ce:dd:77:
90:d3:fe:4b:46:ef:9a:41:75:90:80:2e:99:29:76:ac:4a:05:
ff:90:8a:70:8a:f8:6f:41:db:dd:33:66:7f:87:76:eb:54:1b:
19:e4:a6:37:4f:d7:88:d5:ce:ea:f3:19:7a:25:6c:bb:a2:51:
74:b3:04:fb:43:2e:40:1a:35:52:9b:4e:94:24:79:26:a8:59:
99:2a:67:0c:23:b6:1c:4f:cb:38:4e:55:e0:1b:33:ca:ea:8b:
bd:e9:a4:39:09:83:ab:00:62:04:6c:b1:55:9c:e5:52:19:a7:
dc:9b:16:4f:ac:f0:dd:e1:24:23:f8:b2:6a:8c:47:e5:ce:88:
76:75:b6:51:2c:88:9e:f2:19:55:1a:44:d7:7b:f5:0d:5c:3c:
67:16:8e:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tlr6cUYSSYBlvyltVkj5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMjJhMGVlM2JjNmUzMmQ4OTJlZGRlMjU3Y2JiNzk5MTc5
ZjJjZDYwHhcNMjUwMTMxMTcwMDE2WhcNMjUwMjAxMTcwMDE2WjAzMTEwLwYDVQQD
Eyg0MWQ1ZTlhOTViY2FmYzJmYTQ1YWM4NmIwZWVmNzkxNzcwYTAwMGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIeFtUdMM/Cyy2cw4ykj/c4g6AGP
4U/hL464FiWYP13kjG7lnXcqmiH9hTO6soDTFgrW+paePutryTeniV6e43/DYN3w
qaIYTLqw8suIenwdRiFv+o+xMGfbKWgM39kxAKfe534Xo1VSfYOr8QAh9OHG9x0o
55FjBklYnJxQZBDboj27M6vBsNTgyQM9DatdptutxSwIIWiLo/t6O+EQRouG+jGC
jQrI9vgUJuqGjJGq12/g1X0drzQGKWp6YaVwCHbJUGNanOYGVlO748bUlH4MIVzp
Wj9eSuk1lzIJ5/XCzQqN1QPFLLRDp7P7uG7SaNgrPh+Ybw8IulpfmUtDqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHV6albyvwvpFrIaw7veRdwoACuMB8GA1UdIwQY
MBaAFA8ioO47xuMtiS7d4lfLt5kXnyzWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHlLZzdqdkc0eTJKTHQzaVY4dTNtUmVmTE5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zMDg0ZGUtYjE1OS00ZTU0LTllZDct
NDJkNjc4NDA5NDRkLzEvRHlLZzdqdkc0eTJKTHQzaVY4dTNtUmVmTE5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8zMDg0ZGUtYjE1OS00ZTU0LTllZDctNDJkNjc4NDA5NDRk
LzEvRHlLZzdqdkc0eTJKTHQzaVY4dTNtUmVmTE5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPD0h3IDA
4Mxp3aKWenSGsH509Oiq160tisgs88ePQ4g1oQFudSwYxrimsvjkrP9DcAusG5RE
8An8slGxOHxLr9vf33fb3QaQkkbtzG89AaGhWhZMi2+ZWqV9vmj/q2Ywg1TxaKgW
0bRKzt13kNP+S0bvmkF1kIAumSl2rEoF/5CKcIr4b0Hb3TNmf4d261QbGeSmN0/X
iNXO6vMZeiVsu6JRdLME+0MuQBo1UptOlCR5JqhZmSpnDCO2HE/LOE5V4BszyuqL
vemkOQmDqwBiBGyxVZzlUhmn3JsWT6zw3eEkI/iyaoxH5c6IdnW2USyInvIZVRpE
13v1DVw8ZxaOfA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:07 2025 by rpki-client