Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a17ddf-9ba6-4395-aae6-566f6cf431c0/1/YNJSouMVOM2lhXutCYPIvfVYsXs.mft
File: YNJSouMVOM2lhXutCYPIvfVYsXs.mft (raw, json)
Hash identifier: o9+k5QZAde6LSny/Uc+FJbkcUPjw13E30T8Ly0nO3aE=
Subject key identifier: B2:86:32:5C:9B:CA:7C:4F:5C:F9:E8:35:6F:75:66:CF:39:84:31:7B
Authority key identifier: 60:D2:52:A2:E3:15:38:CD:A5:85:7B:AD:09:83:C8:BD:F5:58:B1:7B
Certificate issuer: /CN=60d252a2e31538cda5857bad0983c8bdf558b17b
Certificate serial: 0194BBCE4044A2824C67CE55CB79011D4082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNJSouMVOM2lhXutCYPIvfVYsXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a17ddf-9ba6-4395-aae6-566f6cf431c0/1/YNJSouMVOM2lhXutCYPIvfVYsXs.mft
Manifest number: 076B
Signing time: Fri 31 Jan 2025 10:00:43 +0000
Manifest this update: Fri 31 Jan 2025 10:00:43 +0000
Manifest next update: Sat 01 Feb 2025 10:00:43 +0000
Files and hashes: 1: YNJSouMVOM2lhXutCYPIvfVYsXs.crl (hash: AZmKuQ5Filwdk2zWMjQ1pMDu1+/def4dmPw3c4iDhws=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:40:44:a2:82:4c:67:ce:55:cb:79:01:1d:40:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d252a2e31538cda5857bad0983c8bdf558b17b
Validity
Not Before: Jan 31 10:00:43 2025 GMT
Not After : Feb 1 10:00:43 2025 GMT
Subject: CN=b286325c9bca7c4f5cf9e8356f7566cf3984317b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:4c:0a:2a:c2:cc:3b:40:6f:61:03:a4:bf:
9c:a6:1c:07:86:b0:df:c8:b7:2b:97:23:c3:3b:f4:
97:35:83:45:f5:98:a4:27:7e:4c:d9:7b:e3:3f:b8:
2d:60:67:e2:3a:8f:aa:2e:a7:91:23:5b:66:50:1b:
dd:61:52:6d:8a:56:0d:21:71:45:d1:5a:c4:cb:9d:
d0:d2:0e:9b:47:9c:e7:6d:06:3b:d0:5b:06:ac:81:
9f:29:68:ef:01:b0:ca:70:29:f3:cd:9b:49:33:88:
dc:07:3c:b5:e6:97:80:4a:cd:c7:ba:3d:a8:eb:85:
3f:b8:79:24:3b:c2:b6:f5:4c:82:82:1e:95:a7:6f:
2c:b1:43:d1:88:e1:0c:f2:39:0e:cd:e4:5f:73:73:
5f:01:fd:38:66:b3:88:ab:25:b0:6e:72:be:03:e0:
84:73:dc:a1:a4:38:0e:05:2a:c5:23:87:51:4a:aa:
ff:2d:7f:ad:7e:9d:4d:35:ec:fa:38:bd:aa:99:72:
9d:e4:d4:b9:5a:83:cf:94:d6:45:c5:a2:1a:d0:f3:
91:6a:9e:0b:a6:23:a8:96:c4:33:81:33:d7:d1:be:
c5:42:84:4e:83:f8:47:e4:50:50:7d:70:a9:22:58:
b9:54:b6:91:d9:01:be:29:fa:8d:26:b6:27:77:ff:
99:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:86:32:5C:9B:CA:7C:4F:5C:F9:E8:35:6F:75:66:CF:39:84:31:7B
X509v3 Authority Key Identifier:
keyid:60:D2:52:A2:E3:15:38:CD:A5:85:7B:AD:09:83:C8:BD:F5:58:B1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNJSouMVOM2lhXutCYPIvfVYsXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a17ddf-9ba6-4395-aae6-566f6cf431c0/1/YNJSouMVOM2lhXutCYPIvfVYsXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a17ddf-9ba6-4395-aae6-566f6cf431c0/1/YNJSouMVOM2lhXutCYPIvfVYsXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:5a:09:7e:b4:00:f4:7e:27:7a:36:a0:f7:cd:0c:98:44:09:
58:12:11:5b:54:40:f0:d3:35:7a:39:73:18:bd:d2:88:09:56:
8d:bc:13:63:ab:9b:fe:44:c8:a4:f2:3b:8c:84:3f:14:a9:87:
bb:54:22:43:f0:68:1d:86:45:5b:e5:ca:1d:00:ce:fd:df:6e:
76:5f:63:0f:4d:32:69:c8:d8:69:26:70:9f:1d:d9:23:74:32:
25:f0:39:75:04:99:e3:20:2d:e4:02:09:2c:ca:ea:75:77:c9:
ff:4e:e3:5b:58:ab:d4:c4:fd:27:42:a9:85:8e:9f:31:c1:18:
30:54:0a:1b:e5:0d:ce:2c:75:aa:19:c9:29:dc:d9:63:9a:2d:
2a:62:ae:f9:79:48:3e:00:4b:04:7b:10:a7:fd:f3:51:2f:7a:
69:01:4a:b8:00:3a:b4:ab:11:c9:e9:46:89:5f:b9:bf:5e:31:
ea:cd:ac:ab:2e:6e:25:40:29:65:13:16:d3:0d:4f:d8:49:8c:
f6:43:5e:ce:05:ed:c4:f6:4c:e5:d0:6e:b4:12:39:95:6b:88:
c9:2f:23:ab:10:6e:fb:0a:52:53:43:f7:15:8a:31:05:9d:30:
b3:f0:d9:a1:53:f5:ae:a3:9a:03:16:d4:ce:74:83:bb:53:53:
4c:41:41:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zkBEooJMZ85Vy3kBHUCCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZDI1MmEyZTMxNTM4Y2RhNTg1N2JhZDA5ODNjOGJkZjU1
OGIxN2IwHhcNMjUwMTMxMTAwMDQzWhcNMjUwMjAxMTAwMDQzWjAzMTEwLwYDVQQD
EyhiMjg2MzI1YzliY2E3YzRmNWNmOWU4MzU2Zjc1NjZjZjM5ODQzMTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTtMCirCzDtAb2EDpL+cphwHhrDf
yLcrlyPDO/SXNYNF9ZikJ35M2XvjP7gtYGfiOo+qLqeRI1tmUBvdYVJtilYNIXFF
0VrEy53Q0g6bR5znbQY70FsGrIGfKWjvAbDKcCnzzZtJM4jcBzy15peASs3Huj2o
64U/uHkkO8K29UyCgh6Vp28ssUPRiOEM8jkOzeRfc3NfAf04ZrOIqyWwbnK+A+CE
c9yhpDgOBSrFI4dRSqr/LX+tfp1NNez6OL2qmXKd5NS5WoPPlNZFxaIa0PORap4L
piOolsQzgTPX0b7FQoROg/hH5FBQfXCpIli5VLaR2QG+KfqNJrYnd/+ZawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKGMlybynxPXPnoNW91Zs85hDF7MB8GA1UdIwQY
MBaAFGDSUqLjFTjNpYV7rQmDyL31WLF7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU5KU291TVZPTTJsaFh1dENZUEl2ZlZZc1hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9hMTdkZGYtOWJhNi00Mzk1LWFhZTYt
NTY2ZjZjZjQzMWMwLzEvWU5KU291TVZPTTJsaFh1dENZUEl2ZlZZc1hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9hMTdkZGYtOWJhNi00Mzk1LWFhZTYtNTY2ZjZjZjQzMWMw
LzEvWU5KU291TVZPTTJsaFh1dENZUEl2ZlZZc1hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMloJfrQA
9H4nejag980MmEQJWBIRW1RA8NM1ejlzGL3SiAlWjbwTY6ub/kTIpPI7jIQ/FKmH
u1QiQ/BoHYZFW+XKHQDO/d9udl9jD00yacjYaSZwnx3ZI3QyJfA5dQSZ4yAt5AIJ
LMrqdXfJ/07jW1ir1MT9J0KphY6fMcEYMFQKG+UNzix1qhnJKdzZY5otKmKu+XlI
PgBLBHsQp/3zUS96aQFKuAA6tKsRyelGiV+5v14x6s2sqy5uJUApZRMW0w1P2EmM
9kNezgXtxPZM5dButBI5lWuIyS8jqxBu+wpSU0P3FYoxBZ0ws/DZoVP1rqOaAxbU
znSDu1NTTEFBWg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:53:35 2025 by rpki-client