Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier: pc8IMeABzpz/SB0c4aeKfvGon2G8yecMZi+s9HiC7mA=
Subject key identifier: D7:27:14:4A:65:61:4F:9A:D0:B6:16:89:39:EC:23:B6:BC:2C:78:CA
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial: 0194BC04F3CC4C6FFEF1DE10DFFE0354E4D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number: 0587
Signing time: Fri 31 Jan 2025 11:00:28 +0000
Manifest this update: Fri 31 Jan 2025 11:00:28 +0000
Manifest next update: Sat 01 Feb 2025 11:00:28 +0000
Files and hashes: 1: Ub0gH6-o6KhNINtjYTwnJ-uCkZU.roa (hash: 7B5163r4ydWZZiBZS3F/kHEKa3lRTXllycuzchBVe18=)
2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: WJ6vLkGvRPk0ODIqPZDpKljVGvSJ7geuxaNrgSvW+uY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f3:cc:4c:6f:fe:f1:de:10:df:fe:03:54:e4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Validity
Not Before: Jan 31 11:00:28 2025 GMT
Not After : Feb 1 11:00:28 2025 GMT
Subject: CN=d727144a65614f9ad0b6168939ec23b6bc2c78ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dd:f2:55:e8:53:cc:92:16:d6:1f:98:ec:69:
e7:d2:f8:9c:20:69:3a:40:1e:25:64:0c:fc:85:77:
d6:68:36:d7:8f:6d:45:b4:ca:b4:0d:96:f9:e4:48:
ce:17:c8:df:a3:80:96:f0:38:ec:14:70:33:49:56:
19:de:cf:47:82:4b:6f:a6:cf:d9:c6:34:59:d2:be:
f6:a9:a5:2f:17:24:0c:71:d2:6a:48:d4:b1:16:ad:
bd:ba:a6:ef:58:87:e6:d7:4d:ff:6c:bd:b9:16:30:
d6:07:58:cc:fc:01:e7:b6:95:d8:5c:93:e6:0b:a2:
17:6b:63:96:78:f2:de:8b:b8:0f:01:fd:65:8c:95:
b2:2d:92:cc:44:6d:d6:ff:f7:c8:cd:42:e1:27:bb:
b7:91:1c:90:40:5c:67:b0:da:fa:0d:09:31:6e:98:
62:cb:b2:3a:af:97:88:18:c9:3b:71:08:ad:7a:85:
d9:3a:8b:05:70:4f:6d:f0:43:14:4d:a3:b9:1e:b4:
2a:1e:12:08:5e:85:ab:a8:10:84:fe:5a:c0:99:73:
61:b8:19:3d:a4:f5:6a:f8:51:e3:ee:a7:b4:df:21:
e6:14:93:b0:9b:27:b3:18:55:69:55:99:aa:b5:fd:
10:06:36:83:68:08:58:c6:7e:f1:3b:76:cb:4b:e9:
fd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:27:14:4A:65:61:4F:9A:D0:B6:16:89:39:EC:23:B6:BC:2C:78:CA
X509v3 Authority Key Identifier:
keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8e:e4:a8:11:43:6b:a7:5e:ca:7e:0a:56:71:f7:6b:5a:75:
de:5f:7c:d3:e5:f6:7b:44:d1:14:2e:73:26:7a:0e:cc:cc:64:
46:0f:bd:72:d5:a5:1f:9e:00:77:b5:5b:15:44:6b:99:50:c0:
98:d5:ac:f8:18:cb:ca:6a:b2:82:2f:12:c0:7d:5a:28:c0:96:
58:8e:4a:7e:3f:d9:3f:ff:5d:6e:bb:d4:90:74:ae:78:ef:cb:
69:84:a9:00:ed:7f:4d:12:71:8b:ee:b6:a4:fe:a4:18:6c:d7:
7e:6b:b8:e0:af:6f:4c:ad:ff:a6:bb:01:bf:a2:aa:d7:91:af:
f1:6d:ca:3a:06:4b:a4:55:92:4d:ac:15:d0:38:d8:0f:99:3e:
80:f0:3e:32:cc:79:38:6a:0e:d2:c7:da:91:1f:6b:9e:07:94:
15:46:de:58:4a:3f:6f:d3:dd:f9:b8:64:fa:75:37:38:1e:65:
e6:fb:13:5b:a7:7b:05:73:53:71:59:b3:ba:44:53:f3:df:16:
18:72:0c:06:73:d8:6f:e8:2e:75:5e:99:06:9a:4b:5a:99:8b:
9c:ff:2b:a3:e6:e2:a9:c9:6b:9f:07:b7:17:b8:bd:25:2a:e5:
3f:a6:f3:3f:35:09:0c:61:7a:a2:3d:aa:10:0b:65:8d:d2:dd:
01:94:ad:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BPPMTG/+8d4Q3/4DVOTVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZmRjMDlhZDU0YTM5N2M2MDRlOTRhMWM5NjZlMmMyOTYw
NTljYzEwHhcNMjUwMTMxMTEwMDI4WhcNMjUwMjAxMTEwMDI4WjAzMTEwLwYDVQQD
EyhkNzI3MTQ0YTY1NjE0ZjlhZDBiNjE2ODkzOWVjMjNiNmJjMmM3OGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx93yVehTzJIW1h+Y7Gnn0vicIGk6
QB4lZAz8hXfWaDbXj21FtMq0DZb55EjOF8jfo4CW8DjsFHAzSVYZ3s9Hgktvps/Z
xjRZ0r72qaUvFyQMcdJqSNSxFq29uqbvWIfm103/bL25FjDWB1jM/AHntpXYXJPm
C6IXa2OWePLei7gPAf1ljJWyLZLMRG3W//fIzULhJ7u3kRyQQFxnsNr6DQkxbphi
y7I6r5eIGMk7cQiteoXZOosFcE9t8EMUTaO5HrQqHhIIXoWrqBCE/lrAmXNhuBk9
pPVq+FHj7qe03yHmFJOwmyezGFVpVZmqtf0QBjaDaAhYxn7xO3bLS+n9ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcnFEplYU+a0LYWiTnsI7a8LHjKMB8GA1UdIwQY
MBaAFGP9wJrVSjl8YE6Uoclm4sKWBZzBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV8zQW10VktPWHhnVHBTaHlXYml3cFlGbk1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yZDBkYTQtYTUzMi00YjAzLTkwNTUt
NGE1Y2JkYjUwZTI5LzEvWV8zQW10VktPWHhnVHBTaHlXYml3cFlGbk1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yZDBkYTQtYTUzMi00YjAzLTkwNTUtNGE1Y2JkYjUwZTI5
LzEvWV8zQW10VktPWHhnVHBTaHlXYml3cFlGbk1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVo7kqBFD
a6deyn4KVnH3a1p13l980+X2e0TRFC5zJnoOzMxkRg+9ctWlH54Ad7VbFURrmVDA
mNWs+BjLymqygi8SwH1aKMCWWI5Kfj/ZP/9dbrvUkHSueO/LaYSpAO1/TRJxi+62
pP6kGGzXfmu44K9vTK3/prsBv6Kq15Gv8W3KOgZLpFWSTawV0DjYD5k+gPA+Msx5
OGoO0sfakR9rngeUFUbeWEo/b9Pd+bhk+nU3OB5l5vsTW6d7BXNTcVmzukRT898W
GHIMBnPYb+gudV6ZBppLWpmLnP8ro+biqclrnwe3F7i9JSrlP6bzPzUJDGF6oj2q
EAtljdLdAZStQA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:21 2025 by rpki-client