Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
File: y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft (raw, json)
Hash identifier: fCPFABLM+zowLlDkk9XcEAMxNBPOuky+tWCb9RYw2yQ=
Subject key identifier: 16:70:6D:08:6B:0A:E7:54:25:59:FE:98:AB:6B:8B:C1:8B:38:B7:84
Authority key identifier: CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1
Certificate issuer: /CN=cbb996ff055d6575e01f2e64d9a3b382834702d1
Certificate serial: 0194BD17588245A72755CE68C55EC42140E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
Manifest number: 0906
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: hUKLcWa9OHC5GxmVq6KR5PIsB6o.roa (hash: scGqiYOmrM2j/apqj1QvggRupECIf8XpZkFfLXcvrsc=)
2: y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl (hash: 6bgu93Xw+i/BIRIOP26hzR68+cqPqmn6nVfwNd3063M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:58:82:45:a7:27:55:ce:68:c5:5e:c4:21:40:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb996ff055d6575e01f2e64d9a3b382834702d1
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=16706d086b0ae7542559fe98ab6b8bc18b38b784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:63:13:6d:27:9c:d3:cf:75:a2:88:95:99:a1:
a4:7c:8e:ac:c4:e9:cf:77:7f:89:2c:94:05:12:01:
5f:a1:c8:02:59:ac:19:47:ee:7e:85:bb:72:5a:1c:
ad:63:82:af:69:bc:db:7e:73:44:e1:68:a4:7e:64:
20:4b:c1:e2:17:10:bb:5b:fa:3d:83:87:c1:e2:b0:
c8:c4:94:35:66:a2:20:fc:01:a0:58:83:e8:d2:41:
b1:44:c2:b8:3d:b2:0a:80:ae:6c:25:05:12:c5:0a:
ad:b6:dd:0c:8a:5b:19:28:28:96:6b:1d:7a:e4:d7:
d9:99:a1:84:71:ef:a8:94:bb:0f:8b:9c:6f:4b:29:
eb:c3:ea:70:5b:f2:fc:82:00:2f:1c:af:2d:f3:1c:
e9:2b:90:f9:51:04:b0:68:ce:c0:d4:0e:b1:4b:ef:
21:ea:0a:7c:14:14:2d:83:67:a1:11:f1:18:e3:35:
e3:88:a7:03:3d:a2:b5:b8:8d:bd:f2:f3:cb:61:5a:
8e:05:b0:41:0c:a5:6a:1e:10:a7:df:dd:e1:51:38:
51:2d:f6:b2:64:a8:3c:29:ce:1c:4a:7e:0d:6c:f3:
44:61:b2:1f:b6:9e:88:3b:fd:bd:99:f6:20:0a:6b:
a6:b4:71:c2:e8:b7:09:62:ec:8a:0c:1f:d4:a2:04:
91:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:70:6D:08:6B:0A:E7:54:25:59:FE:98:AB:6B:8B:C1:8B:38:B7:84
X509v3 Authority Key Identifier:
keyid:CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:be:66:24:45:83:10:39:57:91:d6:3b:70:ca:38:c1:00:86:
db:63:30:82:fa:bf:76:a6:0d:d1:fd:d9:b5:a7:e6:be:b9:41:
52:28:b0:8a:35:87:db:c8:bb:f2:bb:b9:b5:78:0d:c9:95:eb:
f3:32:12:57:b8:31:56:73:ae:c9:f1:7b:19:2a:04:a6:71:16:
9d:3a:d8:c3:f8:6f:aa:bc:c3:4e:02:46:9e:ea:dd:a9:03:ea:
90:7b:1c:79:62:e7:c4:bf:94:1e:81:bb:17:22:1b:ab:e9:07:
0f:ff:46:10:df:81:69:df:d0:21:3e:09:39:fe:b9:d7:c1:39:
8c:06:97:1d:7b:c8:68:60:e9:cf:99:8f:b7:32:cc:a5:53:13:
9d:d9:41:42:a6:8c:f9:05:1f:34:0a:5e:92:ad:0b:8a:2e:19:
c1:ab:cf:aa:39:d3:95:34:63:1a:cc:9e:51:3b:38:3b:6a:75:
ab:d1:11:64:1f:50:34:da:72:bd:f3:12:7f:f3:34:1a:74:f6:
6f:64:31:5b:96:1d:61:47:38:fd:54:33:a8:77:a3:f6:3c:bb:
3c:cb:5d:28:5e:e6:62:b4:23:83:41:7b:b8:58:68:6e:6d:70:
c8:ad:86:f4:f8:91:3f:58:c7:89:70:49:3b:07:48:c0:b3:5a:
ae:25:81:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F1iCRacnVc5oxV7EIUDgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiYjk5NmZmMDU1ZDY1NzVlMDFmMmU2NGQ5YTNiMzgyODM0
NzAyZDEwHhcNMjUwMTMxMTYwMDExWhcNMjUwMjAxMTYwMDExWjAzMTEwLwYDVQQD
EygxNjcwNmQwODZiMGFlNzU0MjU1OWZlOThhYjZiOGJjMThiMzhiNzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mMTbSec0891ooiVmaGkfI6sxOnP
d3+JLJQFEgFfocgCWawZR+5+hbtyWhytY4KvabzbfnNE4WikfmQgS8HiFxC7W/o9
g4fB4rDIxJQ1ZqIg/AGgWIPo0kGxRMK4PbIKgK5sJQUSxQqttt0MilsZKCiWax16
5NfZmaGEce+olLsPi5xvSynrw+pwW/L8ggAvHK8t8xzpK5D5UQSwaM7A1A6xS+8h
6gp8FBQtg2ehEfEY4zXjiKcDPaK1uI298vPLYVqOBbBBDKVqHhCn393hUThRLfay
ZKg8Kc4cSn4NbPNEYbIftp6IO/29mfYgCmumtHHC6LcJYuyKDB/UogSROQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZwbQhrCudUJVn+mKtri8GLOLeEMB8GA1UdIwQY
MBaAFMu5lv8FXWV14B8uZNmjs4KDRwLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTdtV193VmRaWFhnSHk1azJhT3pnb05IQXRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81NTcxZjktZDliYi00ZTc4LWJhZDYt
MDlkNDIzMWMxYzk5LzEveTdtV193VmRaWFhnSHk1azJhT3pnb05IQXRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81NTcxZjktZDliYi00ZTc4LWJhZDYtMDlkNDIzMWMxYzk5
LzEveTdtV193VmRaWFhnSHk1azJhT3pnb05IQXRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHL5mJEWD
EDlXkdY7cMo4wQCG22Mwgvq/dqYN0f3ZtafmvrlBUiiwijWH28i78ru5tXgNyZXr
8zISV7gxVnOuyfF7GSoEpnEWnTrYw/hvqrzDTgJGnurdqQPqkHsceWLnxL+UHoG7
FyIbq+kHD/9GEN+Bad/QIT4JOf6518E5jAaXHXvIaGDpz5mPtzLMpVMTndlBQqaM
+QUfNApekq0Lii4ZwavPqjnTlTRjGsyeUTs4O2p1q9ERZB9QNNpyvfMSf/M0GnT2
b2QxW5YdYUc4/VQzqHej9jy7PMtdKF7mYrQjg0F7uFhobm1wyK2G9PiRP1jHiXBJ
OwdIwLNariWB0Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:05 2025 by rpki-client