Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
File: yRdwDdwOcosHKtQaPR6LaoCqdRA.mft (raw, json)
Hash identifier: iM0QekvdozsEcBgi96u0F9llFkSCnqcxvMYvghCmgew=
Subject key identifier: CC:B3:9E:C7:29:83:B5:93:26:E8:6D:DA:F1:FD:44:8D:3A:7B:98:E2
Authority key identifier: C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
Certificate issuer: /CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Certificate serial: 0194BC04CB7A6ED43758ABDDBB0D571C1778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 11:00:18 +0000
Manifest this update: Fri 31 Jan 2025 11:00:18 +0000
Manifest next update: Sat 01 Feb 2025 11:00:18 +0000
Files and hashes: 1: yRdwDdwOcosHKtQaPR6LaoCqdRA.crl (hash: 5QZm4KI8GCI1cs0US4FehT0cG8LY/YoujqfGpQHXghA=)
2: ytmASWO-QKILd5rnuuSzVSLNI5E.roa (hash: tETrgwolkFpG3feggXgRkY5gabUm+sqdabBiUwH4GeY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:cb:7a:6e:d4:37:58:ab:dd:bb:0d:57:1c:17:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Validity
Not Before: Jan 31 11:00:18 2025 GMT
Not After : Feb 1 11:00:18 2025 GMT
Subject: CN=ccb39ec72983b59326e86ddaf1fd448d3a7b98e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d2:12:17:90:b3:5e:5d:8a:44:db:05:12:08:
ef:c5:d2:17:86:8a:72:a2:96:d1:90:e1:01:61:71:
08:74:9e:97:90:e1:a6:ec:3c:c8:82:5d:b8:72:74:
a7:25:07:b7:68:67:24:00:36:0c:f9:d6:a0:b7:12:
63:3b:de:ee:34:65:48:9f:49:7c:e4:ed:c5:b7:12:
0e:6b:e4:ee:c6:cc:cc:c9:e2:a9:77:b1:bc:79:63:
be:ff:ad:29:27:c1:62:e8:b7:5a:1d:c5:34:9c:20:
8a:d3:34:df:e1:de:b3:bb:9e:40:53:16:9f:91:04:
11:fd:ba:65:36:20:d5:1c:20:33:39:93:c6:d6:90:
c9:b5:1e:fa:a6:7e:27:6a:85:f2:73:21:fb:e5:46:
e3:d9:ac:f2:1a:e4:7b:f4:c6:e0:af:bc:81:57:e7:
27:4c:73:63:f0:69:a5:c2:1c:f7:a0:1e:62:5b:cd:
95:af:25:d0:5a:34:88:b4:4c:d9:dd:cc:02:0c:00:
e4:46:ba:c8:e0:1f:9e:68:a8:ed:d4:6b:30:57:c8:
9a:fb:d3:d5:db:11:25:a2:a4:34:d5:14:02:be:d4:
a5:ea:bf:f3:4d:61:09:56:23:f3:fe:dd:49:0b:df:
f5:c1:23:aa:3b:9e:d8:9d:5e:f5:0d:30:bf:e3:ce:
2d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B3:9E:C7:29:83:B5:93:26:E8:6D:DA:F1:FD:44:8D:3A:7B:98:E2
X509v3 Authority Key Identifier:
keyid:C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9b:9c:4b:43:b1:05:9b:00:84:26:6c:6d:7f:29:c4:e3:c9:
bd:26:41:2a:50:63:a4:34:7f:dc:d4:35:0e:c7:e8:79:55:74:
74:5f:61:13:a5:16:ee:6e:73:6e:df:0b:d4:77:fc:fc:43:cd:
c8:84:62:9c:fd:03:24:c1:56:d0:bf:54:2d:45:5f:9b:7c:02:
ec:cf:f4:9d:7c:42:b4:a6:39:8c:32:bd:bf:97:54:90:fc:47:
16:26:bb:71:f8:62:43:3e:6d:25:a6:dc:04:7f:9c:01:ba:d2:
d0:f0:00:6f:31:e4:38:e1:65:12:a2:4d:b1:f4:e3:a7:9a:57:
b0:7d:80:cd:4c:5d:d1:e1:74:f9:1d:6c:da:87:09:90:e4:89:
1b:0f:29:a4:84:4f:95:88:a9:34:6a:74:a6:36:2a:45:43:4c:
e2:2e:28:88:d0:6b:e8:52:31:97:05:08:0e:df:7f:02:99:f6:
7b:56:d3:72:2f:3f:5b:e5:fa:fe:f4:e8:25:83:83:60:29:ff:
a8:39:95:1a:cf:99:40:d1:ea:3e:ac:76:6c:03:f0:47:25:98:
0a:39:29:01:a3:0c:7a:90:07:4c:9d:70:43:ea:c5:76:41:86:
d4:7f:ec:78:e7:96:e8:f3:cf:13:2e:2f:08:d2:d0:ff:93:3b:
ee:90:be:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BMt6btQ3WKvduw1XHBd4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MTc3MDBkZGMwZTcyOGIwNzJhZDQxYTNkMWU4YjZhODBh
YTc1MTAwHhcNMjUwMTMxMTEwMDE4WhcNMjUwMjAxMTEwMDE4WjAzMTEwLwYDVQQD
EyhjY2IzOWVjNzI5ODNiNTkzMjZlODZkZGFmMWZkNDQ4ZDNhN2I5OGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdISF5CzXl2KRNsFEgjvxdIXhopy
opbRkOEBYXEIdJ6XkOGm7DzIgl24cnSnJQe3aGckADYM+dagtxJjO97uNGVIn0l8
5O3FtxIOa+TuxszMyeKpd7G8eWO+/60pJ8Fi6LdaHcU0nCCK0zTf4d6zu55AUxaf
kQQR/bplNiDVHCAzOZPG1pDJtR76pn4naoXycyH75Ubj2azyGuR79Mbgr7yBV+cn
THNj8Gmlwhz3oB5iW82VryXQWjSItEzZ3cwCDADkRrrI4B+eaKjt1GswV8ia+9PV
2xEloqQ01RQCvtSl6r/zTWEJViPz/t1JC9/1wSOqO57YnV71DTC/484tZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyznscpg7WTJuht2vH9RI06e5jiMB8GA1UdIwQY
MBaAFMkXcA3cDnKLByrUGj0ei2qAqnUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVJkd0Rkd09jb3NIS3RRYVBSNkxhb0NxZFJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lZmU2ZTYtMDMwNi00NzY5LTgwYWIt
N2ViZWMwZTI3YjI4LzEveVJkd0Rkd09jb3NIS3RRYVBSNkxhb0NxZFJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lZmU2ZTYtMDMwNi00NzY5LTgwYWItN2ViZWMwZTI3YjI4
LzEveVJkd0Rkd09jb3NIS3RRYVBSNkxhb0NxZFJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5ucS0Ox
BZsAhCZsbX8pxOPJvSZBKlBjpDR/3NQ1DsfoeVV0dF9hE6UW7m5zbt8L1Hf8/EPN
yIRinP0DJMFW0L9ULUVfm3wC7M/0nXxCtKY5jDK9v5dUkPxHFia7cfhiQz5tJabc
BH+cAbrS0PAAbzHkOOFlEqJNsfTjp5pXsH2AzUxd0eF0+R1s2ocJkOSJGw8ppIRP
lYipNGp0pjYqRUNM4i4oiNBr6FIxlwUIDt9/Apn2e1bTci8/W+X6/vToJYODYCn/
qDmVGs+ZQNHqPqx2bAPwRyWYCjkpAaMMepAHTJ1wQ+rFdkGG1H/seOeW6PPPEy4v
CNLQ/5M77pC+Iw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:21:11 2025 by rpki-client