Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
File: yVcXmb2ok6GGC0phbFYnivXsksU.mft (raw, json)
Hash identifier: caVHZnpGhwQpCftily608MrdtfZ2jcvtlofDdG0meFA=
Subject key identifier: 70:1F:D9:D0:A0:8F:4D:14:EF:DE:1E:C5:8E:FE:FA:06:69:EA:CA:DD
Authority key identifier: C9:57:17:99:BD:A8:93:A1:86:0B:4A:61:6C:56:27:8A:F5:EC:92:C5
Certificate issuer: /CN=c9571799bda893a1860b4a616c56278af5ec92c5
Certificate serial: 0194BD17E63C557AF449EB5D01FF7BAB83A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
Manifest number: 092F
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: yVcXmb2ok6GGC0phbFYnivXsksU.crl (hash: 3YowTlaGoDQGcZT9qEN32fdm59r2kXapUzmh+pFenpM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e6:3c:55:7a:f4:49:eb:5d:01:ff:7b:ab:83:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9571799bda893a1860b4a616c56278af5ec92c5
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=701fd9d0a08f4d14efde1ec58efefa0669eacadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fa:65:7e:bf:28:d5:ec:4d:e2:e1:cd:d2:13:
3e:e5:af:cc:d1:eb:a4:81:97:f4:09:2a:50:56:00:
48:c3:b9:d5:4b:e7:de:59:6e:3e:25:61:5e:e7:32:
e7:35:b6:24:53:63:dd:47:c5:a2:9f:d7:34:8c:3e:
59:13:ab:b3:4d:dc:36:d6:a0:09:e9:b5:3c:ad:a7:
88:3c:d3:f9:8e:4e:54:cf:57:c7:cd:9f:e8:b6:30:
bd:40:23:3d:d7:b9:59:8e:0e:e5:33:71:fa:eb:c8:
fb:2f:6e:79:fa:06:5d:00:20:33:26:74:ba:9a:0f:
13:96:96:27:8c:96:ac:74:a8:8e:9f:a5:82:85:92:
30:f5:07:07:cb:92:33:ee:b2:58:51:79:c6:1e:59:
9d:48:71:de:52:f3:ac:6d:95:0f:a3:da:0a:0f:fd:
19:92:54:d0:04:67:5d:c2:d3:4b:49:71:00:f2:74:
4d:68:6d:db:28:b8:aa:06:d9:5a:7d:b6:1a:91:0e:
96:22:81:2e:a0:da:ee:88:40:4e:aa:26:16:03:95:
bf:44:06:44:ee:05:8f:34:d3:b4:2c:89:fc:97:49:
8b:e1:94:c4:28:72:61:e7:31:57:ce:36:c1:97:fa:
fb:65:0d:fa:f5:03:8a:75:22:27:22:b0:d9:3b:5a:
fb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1F:D9:D0:A0:8F:4D:14:EF:DE:1E:C5:8E:FE:FA:06:69:EA:CA:DD
X509v3 Authority Key Identifier:
keyid:C9:57:17:99:BD:A8:93:A1:86:0B:4A:61:6C:56:27:8A:F5:EC:92:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:fd:05:60:58:00:f9:71:82:4f:a7:a6:66:17:08:bb:f1:20:
9c:56:03:7b:1a:10:b1:b2:d3:ca:2e:0b:fe:0e:dc:dd:03:02:
39:89:70:32:f2:a2:e6:6b:df:fa:21:e2:f7:28:ef:88:08:99:
21:b5:4f:bb:21:f0:c1:3e:47:bd:02:29:96:58:b5:4f:d5:a7:
81:f9:99:8c:42:ed:44:a4:f6:62:16:e7:33:38:a3:af:8b:bb:
33:6e:9a:5d:e1:ea:3a:8d:a5:98:56:47:8d:51:f1:be:c9:c2:
d9:8d:af:b2:ae:cd:b8:e8:e1:1d:3d:a9:4a:bd:c5:51:4e:ba:
10:7c:6e:19:72:27:16:75:c1:80:53:60:81:c2:17:9e:62:06:
51:43:f0:89:29:b0:dd:aa:a2:98:f8:85:d0:9a:b4:e9:60:ce:
e5:38:ef:a5:b8:c5:c4:44:70:25:aa:18:a8:90:5a:5c:5f:71:
60:75:99:a9:0e:9c:29:5d:e1:ea:37:c0:50:78:9a:a6:41:45:
21:7f:24:b5:42:fe:14:76:0d:25:a2:3a:c3:6b:64:4c:e4:7c:
97:78:19:b1:10:87:ba:a9:06:56:12:63:da:6d:60:e4:2f:ad:
11:8c:2e:a9:b7:be:1f:f6:2f:62:75:b1:3b:49:6d:68:d3:0e:
a6:4f:9d:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F+Y8VXr0SetdAf97q4OgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NTcxNzk5YmRhODkzYTE4NjBiNGE2MTZjNTYyNzhhZjVl
YzkyYzUwHhcNMjUwMTMxMTYwMDQ3WhcNMjUwMjAxMTYwMDQ3WjAzMTEwLwYDVQQD
Eyg3MDFmZDlkMGEwOGY0ZDE0ZWZkZTFlYzU4ZWZlZmEwNjY5ZWFjYWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvplfr8o1exN4uHN0hM+5a/M0euk
gZf0CSpQVgBIw7nVS+feWW4+JWFe5zLnNbYkU2PdR8Win9c0jD5ZE6uzTdw21qAJ
6bU8raeIPNP5jk5Uz1fHzZ/otjC9QCM917lZjg7lM3H668j7L255+gZdACAzJnS6
mg8TlpYnjJasdKiOn6WChZIw9QcHy5Iz7rJYUXnGHlmdSHHeUvOsbZUPo9oKD/0Z
klTQBGddwtNLSXEA8nRNaG3bKLiqBtlafbYakQ6WIoEuoNruiEBOqiYWA5W/RAZE
7gWPNNO0LIn8l0mL4ZTEKHJh5zFXzjbBl/r7ZQ369QOKdSInIrDZO1r7tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAf2dCgj00U794exY7++gZp6srdMB8GA1UdIwQY
MBaAFMlXF5m9qJOhhgtKYWxWJ4r17JLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVZjWG1iMm9rNkdHQzBwaGJGWW5pdlhza3NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wOGVmODctY2Y1NS00YjVkLTk4MjEt
MDM3NDZkN2JkMjk0LzEveVZjWG1iMm9rNkdHQzBwaGJGWW5pdlhza3NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wOGVmODctY2Y1NS00YjVkLTk4MjEtMDM3NDZkN2JkMjk0
LzEveVZjWG1iMm9rNkdHQzBwaGJGWW5pdlhza3NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXv0FYFgA
+XGCT6emZhcIu/EgnFYDexoQsbLTyi4L/g7c3QMCOYlwMvKi5mvf+iHi9yjviAiZ
IbVPuyHwwT5HvQIplli1T9WngfmZjELtRKT2YhbnMzijr4u7M26aXeHqOo2lmFZH
jVHxvsnC2Y2vsq7NuOjhHT2pSr3FUU66EHxuGXInFnXBgFNggcIXnmIGUUPwiSmw
3aqimPiF0Jq06WDO5TjvpbjFxERwJaoYqJBaXF9xYHWZqQ6cKV3h6jfAUHiapkFF
IX8ktUL+FHYNJaI6w2tkTOR8l3gZsRCHuqkGVhJj2m1g5C+tEYwuqbe+H/YvYnWx
O0ltaNMOpk+dlw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:45:54 2025 by rpki-client