Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: ojA6jbwGs5VT55iuxuR06yC+hyQ9Viq39YQxQcjLiS4=
Subject key identifier: B1:18:D8:C1:27:E2:97:93:91:41:7F:96:58:C8:A6:6E:A5:41:46:17
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 0194BCE0A33C131E7855F66A7533B94C728B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 0C5E
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: JNo1MUvO7s8A9kHBAkmvoAiPGvM.roa (hash: R/jVb2Ae9Mk2lsjcWf8tfEbhkiCQiMp10JSlkK4oRdc=)
2: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: 2Vef/H5tgGBylOssTAi0EsOa3ZHP+A7TgrzY8x2SSbM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a3:3c:13:1e:78:55:f6:6a:75:33:b9:4c:72:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=b118d8c127e2979391417f9658c8a66ea5414617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d7:82:b6:d7:5d:8d:78:03:f0:3c:1d:64:1c:
5f:d0:a4:c2:a6:23:7d:3a:a5:2b:97:8f:7e:15:42:
b5:c8:48:d4:d3:ae:85:3a:29:e1:82:bc:8e:d1:78:
5a:be:2e:dc:e9:e6:b5:71:48:e6:fb:ba:fc:4b:2d:
3b:d1:a0:cd:99:02:48:ec:7c:6d:22:8f:af:9e:5c:
b2:58:25:94:e9:ce:a0:88:60:b9:45:67:90:04:b8:
5a:ec:8f:1d:1d:41:1c:db:fe:0d:0f:14:a6:81:23:
97:1f:bf:2d:65:9d:ad:26:e7:8e:bf:d0:f7:7f:32:
93:bd:10:d9:85:bd:0b:86:90:6e:d2:d6:8f:fa:4c:
92:26:f4:6b:b6:f9:d1:27:06:7f:0c:be:4c:1c:25:
59:50:80:5c:be:14:6b:79:b4:1f:19:2a:c7:49:dc:
5d:c6:80:bc:c0:4d:81:8d:f0:3f:f2:69:46:4c:7e:
8a:2f:c4:1d:75:bd:a8:22:a5:10:6a:5b:5b:5b:71:
75:98:6e:f9:ab:ae:f4:2a:b6:84:5a:00:2a:eb:d5:
06:0d:ed:16:4e:2f:15:8a:f6:e6:1d:66:ba:0b:b2:
30:0a:f0:ee:3c:24:38:47:3a:5d:fa:ff:33:7b:fc:
88:2c:2b:56:ac:fe:f1:d4:65:72:38:bb:31:b5:e7:
2f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:18:D8:C1:27:E2:97:93:91:41:7F:96:58:C8:A6:6E:A5:41:46:17
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:13:ac:ab:09:7e:7d:f1:98:68:e9:37:03:11:61:88:e2:a2:
37:e4:fe:be:33:4d:a8:8e:92:5e:48:99:36:7a:a0:d9:a6:da:
16:fd:97:44:2c:34:40:a2:1d:f0:91:85:ba:48:8a:cd:cc:91:
e5:4b:15:bb:ca:98:0c:d7:e6:e5:82:4e:2a:6b:49:03:14:38:
2f:70:90:1e:47:80:86:e9:77:aa:94:5a:62:f9:05:dc:89:ca:
84:a6:f4:8b:46:b8:5f:56:cf:b8:b9:76:fd:8f:cd:23:e5:85:
66:0d:95:57:c3:5f:b1:60:73:bd:f4:3e:c3:74:8e:84:8a:c6:
a1:27:ee:a2:ea:e4:36:f4:3f:c7:e4:3c:ac:1b:af:ba:fb:62:
01:a7:39:07:a3:c3:27:3d:49:fa:09:cc:a5:88:6e:dc:52:98:
e5:ed:4d:fc:b6:19:93:87:da:62:39:3b:e9:f1:b3:a9:08:94:
d2:68:04:c3:48:fa:24:67:30:5e:14:b7:9a:b7:82:72:b6:1a:
49:83:a4:f3:88:89:0e:b6:26:33:b2:af:71:f7:0f:1e:98:ff:
45:a3:1e:47:33:db:67:b1:be:67:f3:96:25:69:76:59:3d:0a:
e4:5b:76:5c:47:00:60:9d:2f:19:8b:ca:ee:c5:b2:36:b6:3c:
ab:08:2b:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84KM8Ex54VfZqdTO5THKLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZmM5ODQyOGMyNDUxYzFhZWRmOGFmZmMwNzJhOTU4Njhl
Y2VlOGIwHhcNMjUwMTMxMTUwMDI1WhcNMjUwMjAxMTUwMDI1WjAzMTEwLwYDVQQD
EyhiMTE4ZDhjMTI3ZTI5NzkzOTE0MTdmOTY1OGM4YTY2ZWE1NDE0NjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdeCttddjXgD8DwdZBxf0KTCpiN9
OqUrl49+FUK1yEjU066FOinhgryO0Xhavi7c6ea1cUjm+7r8Sy070aDNmQJI7Hxt
Io+vnlyyWCWU6c6giGC5RWeQBLha7I8dHUEc2/4NDxSmgSOXH78tZZ2tJueOv9D3
fzKTvRDZhb0LhpBu0taP+kySJvRrtvnRJwZ/DL5MHCVZUIBcvhRrebQfGSrHSdxd
xoC8wE2BjfA/8mlGTH6KL8Qddb2oIqUQaltbW3F1mG75q670KraEWgAq69UGDe0W
Ti8VivbmHWa6C7IwCvDuPCQ4Rzpd+v8ze/yILCtWrP7x1GVyOLsxtecvPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEY2MEn4peTkUF/lljIpm6lQUYXMB8GA1UdIwQY
MBaAFJ/8mEKMJFHBrt+K/8ByqVho7O6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQt
Yjk2ZDJmYmVmZWJkLzEvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQtYjk2ZDJmYmVmZWJk
LzEvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHhOsqwl+
ffGYaOk3AxFhiOKiN+T+vjNNqI6SXkiZNnqg2abaFv2XRCw0QKId8JGFukiKzcyR
5UsVu8qYDNfm5YJOKmtJAxQ4L3CQHkeAhul3qpRaYvkF3InKhKb0i0a4X1bPuLl2
/Y/NI+WFZg2VV8NfsWBzvfQ+w3SOhIrGoSfuourkNvQ/x+Q8rBuvuvtiAac5B6PD
Jz1J+gnMpYhu3FKY5e1N/LYZk4faYjk76fGzqQiU0mgEw0j6JGcwXhS3mreCcrYa
SYOk84iJDrYmM7KvcfcPHpj/RaMeRzPbZ7G+Z/OWJWl2WT0K5Ft2XEcAYJ0vGYvK
7sWyNrY8qwgrGQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:21 2025 by rpki-client