Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
File: yBi-GcEJgPFbze4HZpAHhJGoqiE.mft (raw, json)
Hash identifier: nA6UCeBDVWRGgcUTaNjqyjw7wpMNEFtu8og9ZEHTCos=
Subject key identifier: A2:46:3C:66:70:2D:AC:E8:18:CC:BA:4B:B2:04:2C:29:CA:96:42:90
Authority key identifier: C8:18:BE:19:C1:09:80:F1:5B:CD:EE:07:66:90:07:84:91:A8:AA:21
Certificate issuer: /CN=c818be19c10980f15bcdee076690078491a8aa21
Certificate serial: 0194BC72CA56F8FB67E7E96E5B25B6C32F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
Manifest number: 0A58
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: gZMQxr61w0P4Si-B6lBsVj_b8vM.roa (hash: 3Vc/pW8ygtdQIimX5iqQ/MSW6PLhJ2nbGCIzRJsZshI=)
2: yBi-GcEJgPFbze4HZpAHhJGoqiE.crl (hash: zlq3v6gG+OL6zBDEz9MGvWOCRiyzvvqOKJ/eA1MrF94=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ca:56:f8:fb:67:e7:e9:6e:5b:25:b6:c3:2f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c818be19c10980f15bcdee076690078491a8aa21
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=a2463c66702dace818ccba4bb2042c29ca964290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:62:f7:2a:88:cb:f6:58:ec:b5:c0:dc:37:49:
3d:61:28:38:98:12:90:5b:e0:02:c3:30:11:cc:7a:
97:f6:d0:3f:3d:56:b7:2f:14:e8:ed:b0:60:64:70:
8e:38:2e:ff:e0:0a:01:60:0d:b5:6e:82:f3:3a:7c:
c2:ab:31:17:c7:5d:03:82:df:d9:05:a3:da:ef:f4:
d1:12:4d:b6:cb:e3:0a:4a:73:9c:67:51:d6:e9:15:
af:4e:a1:1b:e4:77:c8:f7:2c:4c:8a:f4:bd:67:6a:
f0:cd:92:bb:6f:56:a3:f7:04:a3:7f:c3:2f:d3:1f:
23:f8:42:8c:45:a0:53:77:04:3d:91:82:9c:6f:06:
21:23:29:00:df:30:f8:9f:0c:e6:ed:a2:4e:db:36:
68:c4:e2:b0:6d:de:ea:15:73:9e:3f:4b:3d:94:b9:
98:d2:05:fe:8f:18:69:12:a8:9b:0c:9e:ab:48:20:
92:c9:c9:3b:b5:8d:da:8a:26:57:ac:a6:ba:c5:f1:
7d:b9:55:94:92:eb:0d:7f:8a:d4:4a:cd:15:99:8c:
0f:20:22:66:8d:bb:fe:fc:b6:34:8f:86:44:1f:bc:
00:ff:bb:7e:42:a4:82:b2:9d:ab:64:7c:0c:27:f2:
70:0c:af:f3:e3:2f:05:31:b4:c8:50:32:c4:61:be:
e8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:46:3C:66:70:2D:AC:E8:18:CC:BA:4B:B2:04:2C:29:CA:96:42:90
X509v3 Authority Key Identifier:
keyid:C8:18:BE:19:C1:09:80:F1:5B:CD:EE:07:66:90:07:84:91:A8:AA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:21:e6:c5:cf:c3:f1:4b:63:9b:6f:e6:cb:21:41:de:ee:9c:
b2:bc:cc:84:65:d1:b6:20:78:8d:4d:28:20:35:a0:e6:79:c8:
ca:ef:d6:65:2e:df:fc:34:0a:03:24:55:cc:2f:65:e3:08:01:
af:08:58:e8:ad:15:e3:b4:88:6c:5a:3e:59:fe:d6:31:f5:a4:
31:61:cf:73:01:c2:13:fb:82:de:19:2a:df:3b:eb:aa:c8:69:
ce:f4:ad:88:75:12:d8:2f:d8:b7:94:b0:80:5e:a2:51:64:36:
b8:77:e6:b3:ee:53:a6:1a:b7:00:9a:a5:17:6f:7b:5c:84:d8:
dc:de:98:6a:65:15:b6:3a:04:74:89:d1:bc:f4:ff:2c:0e:39:
ab:02:87:77:1c:a0:1e:04:39:63:d7:59:7c:89:dd:7e:58:dc:
ed:e1:9b:12:14:81:6a:cc:17:42:26:31:21:d7:87:75:60:f7:
16:f4:4b:5b:eb:1e:ee:ce:d0:2d:dd:f3:89:5f:a1:27:27:a5:
91:ec:ca:f9:b7:d5:94:23:70:14:62:e3:64:fe:85:42:09:e8:
85:ce:5b:49:7b:1d:4b:bc:ec:61:04:4b:11:d8:31:34:8d:3d:
0b:f9:a9:c3:b8:16:89:10:bd:d8:57:63:b1:71:31:77:d9:90:
f4:e0:5e:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cspW+Ptn5+luWyW2wy9FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MThiZTE5YzEwOTgwZjE1YmNkZWUwNzY2OTAwNzg0OTFh
OGFhMjEwHhcNMjUwMTMxMTMwMDI2WhcNMjUwMjAxMTMwMDI2WjAzMTEwLwYDVQQD
EyhhMjQ2M2M2NjcwMmRhY2U4MThjY2JhNGJiMjA0MmMyOWNhOTY0MjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWL3KojL9ljstcDcN0k9YSg4mBKQ
W+ACwzARzHqX9tA/PVa3LxTo7bBgZHCOOC7/4AoBYA21boLzOnzCqzEXx10Dgt/Z
BaPa7/TREk22y+MKSnOcZ1HW6RWvTqEb5HfI9yxMivS9Z2rwzZK7b1aj9wSjf8Mv
0x8j+EKMRaBTdwQ9kYKcbwYhIykA3zD4nwzm7aJO2zZoxOKwbd7qFXOeP0s9lLmY
0gX+jxhpEqibDJ6rSCCSyck7tY3aiiZXrKa6xfF9uVWUkusNf4rUSs0VmYwPICJm
jbv+/LY0j4ZEH7wA/7t+QqSCsp2rZHwMJ/JwDK/z4y8FMbTIUDLEYb7ogwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJGPGZwLazoGMy6S7IELCnKlkKQMB8GA1UdIwQY
MBaAFMgYvhnBCYDxW83uB2aQB4SRqKohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUJpLUdjRUpnUEZiemU0SFpwQUhoSkdvcWlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84ODQwZjAtMjcxZS00NTI3LWE0MTMt
NmM0NzE5YmNmOWVlLzEveUJpLUdjRUpnUEZiemU0SFpwQUhoSkdvcWlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi84ODQwZjAtMjcxZS00NTI3LWE0MTMtNmM0NzE5YmNmOWVl
LzEveUJpLUdjRUpnUEZiemU0SFpwQUhoSkdvcWlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAryHmxc/D
8Utjm2/myyFB3u6csrzMhGXRtiB4jU0oIDWg5nnIyu/WZS7f/DQKAyRVzC9l4wgB
rwhY6K0V47SIbFo+Wf7WMfWkMWHPcwHCE/uC3hkq3zvrqshpzvStiHUS2C/Yt5Sw
gF6iUWQ2uHfms+5Tphq3AJqlF297XITY3N6YamUVtjoEdInRvPT/LA45qwKHdxyg
HgQ5Y9dZfIndfljc7eGbEhSBaswXQiYxIdeHdWD3FvRLW+se7s7QLd3ziV+hJyel
kezK+bfVlCNwFGLjZP6FQgnohc5bSXsdS7zsYQRLEdgxNI09C/mpw7gWiRC92Fdj
sXExd9mQ9OBeug==
-----END CERTIFICATE-----
Generated at Sat May 10 20:21:05 2025 by rpki-client