Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft
File: YA09DkcUJu84PjkRODpJg78idkQ.mft (raw, json)
Hash identifier: sk9YVSXTTyhjvOF8jQO29gyrac5wMS8GvNMVK0AEApU=
Subject key identifier: 33:C7:3E:F7:07:DA:47:4A:75:6E:A0:A5:16:4F:2E:08:12:EC:AD:61
Authority key identifier: 60:0D:3D:0E:47:14:26:EF:38:3E:39:11:38:3A:49:83:BF:22:76:44
Certificate issuer: /CN=600d3d0e471426ef383e3911383a4983bf227644
Certificate serial: 0194BD85683D2B8516992E759C5FA10194BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA09DkcUJu84PjkRODpJg78idkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft
Manifest number: FC
Signing time: Fri 31 Jan 2025 18:00:24 +0000
Manifest this update: Fri 31 Jan 2025 18:00:24 +0000
Manifest next update: Sat 01 Feb 2025 18:00:24 +0000
Files and hashes: 1: YA09DkcUJu84PjkRODpJg78idkQ.crl (hash: pIF2UniR8rI8XPj/XQV6LtUo9qvWQLle0bZxehh/MHc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:68:3d:2b:85:16:99:2e:75:9c:5f:a1:01:94:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600d3d0e471426ef383e3911383a4983bf227644
Validity
Not Before: Jan 31 18:00:24 2025 GMT
Not After : Feb 1 18:00:24 2025 GMT
Subject: CN=33c73ef707da474a756ea0a5164f2e0812ecad61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:f2:bf:b5:c6:55:9a:04:2c:12:90:d9:f9:
51:e4:e4:31:c3:11:17:9c:8c:ad:aa:4a:67:da:7d:
5e:be:8f:21:53:6b:05:b7:a5:b4:8f:d5:d7:31:4a:
63:5b:36:a8:4f:86:e6:f3:30:07:59:48:5b:b6:75:
81:a3:49:1c:0b:54:77:0b:4a:e4:40:e7:0f:23:78:
11:05:0d:55:50:9e:e5:ff:3a:5c:48:74:86:f6:67:
35:da:d8:6a:c6:8f:a8:b3:15:04:0e:32:5b:18:10:
5c:0f:07:02:b9:04:4e:57:47:f4:4e:c6:97:84:3f:
4f:5b:c5:9f:77:dc:57:56:93:71:89:9a:21:12:6e:
ad:83:e2:9f:05:21:81:7c:92:54:91:9d:ea:15:10:
c8:3a:07:99:27:c0:fc:d8:fb:da:48:04:9e:52:32:
f8:ba:98:3d:4d:dd:1f:d5:84:68:d6:66:cb:fd:98:
ff:05:0d:e7:57:77:e8:d9:22:2d:05:58:53:b3:36:
2c:7a:9f:b0:d2:29:c8:cd:c4:49:91:aa:b9:70:e3:
1c:d0:be:2b:63:da:fd:f5:1a:fa:a1:8a:e5:d2:2d:
75:a8:ff:8c:8b:b4:f5:de:d9:0f:e6:01:6c:35:38:
bf:a0:52:74:10:ab:69:c0:7d:6b:ce:0a:72:77:58:
5f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C7:3E:F7:07:DA:47:4A:75:6E:A0:A5:16:4F:2E:08:12:EC:AD:61
X509v3 Authority Key Identifier:
keyid:60:0D:3D:0E:47:14:26:EF:38:3E:39:11:38:3A:49:83:BF:22:76:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA09DkcUJu84PjkRODpJg78idkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b8:c9:f5:fa:cd:c9:4b:1e:b3:f4:5f:70:cf:05:7e:0f:9c:
c3:58:24:59:af:0a:4b:92:b6:7e:3d:8a:e7:f5:77:0a:bd:b2:
c6:5e:a4:78:a8:b4:fb:f0:79:cf:fe:e1:ee:38:bd:df:d0:27:
04:12:81:35:3a:a2:10:b6:21:df:6e:c8:7e:21:2d:86:17:6c:
30:ad:6e:76:52:4a:ab:04:cb:52:c1:da:0b:c8:ba:79:eb:65:
c5:c5:62:4a:f4:9b:62:3b:5b:11:d1:69:a5:db:b6:01:a8:8e:
ff:43:08:d3:cb:a6:b1:80:b8:70:63:e7:0e:b4:ea:89:0c:28:
73:dd:1c:54:4a:7e:08:9e:46:a7:cb:f0:84:71:b3:65:84:4f:
3b:f9:eb:19:38:c1:79:03:4f:4e:81:e1:71:48:4b:21:b2:11:
e6:1f:c1:95:91:ae:38:9b:b8:3a:ae:1b:6c:74:41:d3:74:bc:
bb:3c:b0:b1:4c:8c:28:14:4c:5a:6c:86:b4:0a:8b:e0:3f:20:
2b:85:d0:2d:7f:a3:12:86:bd:89:84:f1:25:46:72:d0:fe:5f:
1a:c7:77:ef:5f:80:ad:b0:04:13:52:e0:d5:2a:e6:2d:b1:5e:
e5:2a:63:de:f2:60:6d:3f:70:de:40:72:d0:6c:0f:fc:a2:f1:
bd:9d:15:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hWg9K4UWmS51nF+hAZS6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMGQzZDBlNDcxNDI2ZWYzODNlMzkxMTM4M2E0OTgzYmYy
Mjc2NDQwHhcNMjUwMTMxMTgwMDI0WhcNMjUwMjAxMTgwMDI0WjAzMTEwLwYDVQQD
EygzM2M3M2VmNzA3ZGE0NzRhNzU2ZWEwYTUxNjRmMmUwODEyZWNhZDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMTyv7XGVZoELBKQ2flR5OQxwxEX
nIytqkpn2n1evo8hU2sFt6W0j9XXMUpjWzaoT4bm8zAHWUhbtnWBo0kcC1R3C0rk
QOcPI3gRBQ1VUJ7l/zpcSHSG9mc12thqxo+osxUEDjJbGBBcDwcCuQROV0f0TsaX
hD9PW8Wfd9xXVpNxiZohEm6tg+KfBSGBfJJUkZ3qFRDIOgeZJ8D82PvaSASeUjL4
upg9Td0f1YRo1mbL/Zj/BQ3nV3fo2SItBVhTszYsep+w0inIzcRJkaq5cOMc0L4r
Y9r99Rr6oYrl0i11qP+Mi7T13tkP5gFsNTi/oFJ0EKtpwH1rzgpyd1hfcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPHPvcH2kdKdW6gpRZPLggS7K1hMB8GA1UdIwQY
MBaAFGANPQ5HFCbvOD45ETg6SYO/InZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUEwOURrY1VKdTg0UGprUk9EcEpnNzhpZGtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xYWY1MWItN2IxNy00OTgwLTk4Yzct
M2MyZmE4YWFmMDMxLzEvWUEwOURrY1VKdTg0UGprUk9EcEpnNzhpZGtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xYWY1MWItN2IxNy00OTgwLTk4YzctM2MyZmE4YWFmMDMx
LzEvWUEwOURrY1VKdTg0UGprUk9EcEpnNzhpZGtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlbjJ9frN
yUses/RfcM8Ffg+cw1gkWa8KS5K2fj2K5/V3Cr2yxl6keKi0+/B5z/7h7ji939An
BBKBNTqiELYh327IfiEthhdsMK1udlJKqwTLUsHaC8i6eetlxcViSvSbYjtbEdFp
pdu2AaiO/0MI08umsYC4cGPnDrTqiQwoc90cVEp+CJ5Gp8vwhHGzZYRPO/nrGTjB
eQNPToHhcUhLIbIR5h/BlZGuOJu4Oq4bbHRB03S8uzywsUyMKBRMWmyGtAqL4D8g
K4XQLX+jEoa9iYTxJUZy0P5fGsd371+ArbAEE1Lg1SrmLbFe5Spj3vJgbT9w3kBy
0GwP/KLxvZ0VlQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:21:31 2025 by rpki-client