Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
File: yRggtQAH5BxT3WAps3lU01cvTCk.mft (raw, json)
Hash identifier: 21IA6w8Lrl8alrLm8aL0oBZKbLLT1EjVK/+jdcHxCVU=
Subject key identifier: 28:34:6D:70:D4:93:66:88:31:D3:9F:56:B5:DB:05:78:04:F8:A3:E2
Authority key identifier: C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29
Certificate issuer: /CN=c91820b50007e41c53dd6029b37954d3572f4c29
Certificate serial: 0194BC730A78192470426412E5480B9BC3E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
Manifest number: 0F6E
Signing time: Fri 31 Jan 2025 13:00:43 +0000
Manifest this update: Fri 31 Jan 2025 13:00:43 +0000
Manifest next update: Sat 01 Feb 2025 13:00:43 +0000
Files and hashes: 1: juTNVsKtR118cxI6QcWd767caRM.roa (hash: MCsaWupCkvlIsE0i3wi2ave3G1GEJt2KTaWMIAFFXxI=)
2: yRggtQAH5BxT3WAps3lU01cvTCk.crl (hash: C8K+IKU3bJLmw8dPLPIEfjNjj8M7asfLFPYNw0QZpK0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0a:78:19:24:70:42:64:12:e5:48:0b:9b:c3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91820b50007e41c53dd6029b37954d3572f4c29
Validity
Not Before: Jan 31 13:00:43 2025 GMT
Not After : Feb 1 13:00:43 2025 GMT
Subject: CN=28346d70d493668831d39f56b5db057804f8a3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:2c:ef:94:81:68:39:64:25:b8:78:25:96:
45:ab:7b:e3:e8:72:a2:6d:2b:10:8a:d1:aa:c7:00:
f3:0c:6d:c0:69:34:e5:15:58:f1:08:03:eb:c8:16:
6d:c2:1b:82:6b:9f:03:da:35:38:b3:b0:1b:7c:0b:
e4:aa:3e:b5:2d:c9:21:6e:c0:4b:bf:c9:2a:3c:35:
51:70:b2:02:5f:43:50:00:4e:8e:b5:2e:38:26:4a:
9e:33:37:75:d9:52:2d:5c:18:e2:0b:1e:3a:b8:b4:
bc:ce:00:87:b8:92:2d:fe:c7:74:db:ac:bf:e6:be:
f7:18:37:7b:f6:0b:10:4d:4a:00:86:25:60:34:9d:
6d:1e:ec:9f:58:3a:b9:b1:e1:0f:09:9c:0d:79:f0:
97:86:54:bb:8b:16:07:60:db:ee:e7:cd:62:f5:09:
a6:a7:f0:c5:c0:e2:2a:36:f6:8e:d0:84:c0:2d:42:
30:05:26:31:36:ef:29:af:2c:69:3d:df:6c:b5:82:
4b:ad:68:63:cb:3f:31:f5:9a:b2:99:c7:83:0b:3c:
e0:86:ee:14:05:72:aa:86:b2:98:6e:21:e5:48:81:
b1:8a:b6:3c:d5:cf:fe:ff:00:9f:93:39:46:ad:a1:
5c:62:e7:27:9d:10:8c:4d:bf:c2:0a:94:1b:af:da:
c3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:34:6D:70:D4:93:66:88:31:D3:9F:56:B5:DB:05:78:04:F8:A3:E2
X509v3 Authority Key Identifier:
keyid:C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:46:01:61:ab:6e:e2:62:fc:32:9d:d1:6b:bb:41:29:05:02:
7a:28:ca:d9:64:7e:cd:84:f9:64:32:c7:db:8f:77:be:a7:2a:
01:10:4d:2b:05:8b:cd:77:e9:ee:60:da:77:1b:12:4a:02:58:
aa:45:ae:f9:a8:6f:f6:35:40:e4:3b:f2:91:90:cd:08:48:2a:
d0:60:92:0d:a0:c1:85:9f:fe:74:26:a4:6d:09:27:a4:b2:4c:
cc:0f:d8:e4:96:ae:13:ab:89:5b:08:c6:fc:c7:2e:98:0f:93:
9c:d5:29:20:3c:2c:60:c9:8c:c7:82:4a:e0:44:13:4c:45:63:
cf:c5:99:34:79:74:8b:eb:dd:2e:36:35:6f:f8:f5:9c:1f:48:
9d:5b:e3:3e:e0:76:ae:40:b9:45:13:2f:a4:a3:89:25:9e:cd:
a7:46:93:8a:cc:b6:4e:c3:99:b0:81:ee:7e:df:e7:e3:32:f9:
a2:04:17:27:9f:9d:a8:49:74:21:0d:b9:4b:94:4f:4c:a8:71:
c9:30:22:f3:e0:3d:c0:3b:cb:52:d6:32:5d:b1:df:c5:3d:f6:
aa:7c:80:16:dc:f7:2c:e4:9a:4c:42:34:5c:94:45:e8:dc:8b:
52:3b:18:59:df:e8:53:f0:3d:8f:a0:79:a8:ea:a6:0b:e7:73:
0e:d2:68:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cwp4GSRwQmQS5UgLm8PoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MTgyMGI1MDAwN2U0MWM1M2RkNjAyOWIzNzk1NGQzNTcy
ZjRjMjkwHhcNMjUwMTMxMTMwMDQzWhcNMjUwMjAxMTMwMDQzWjAzMTEwLwYDVQQD
EygyODM0NmQ3MGQ0OTM2Njg4MzFkMzlmNTZiNWRiMDU3ODA0ZjhhM2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjos75SBaDlkJbh4JZZFq3vj6HKi
bSsQitGqxwDzDG3AaTTlFVjxCAPryBZtwhuCa58D2jU4s7AbfAvkqj61LckhbsBL
v8kqPDVRcLICX0NQAE6OtS44JkqeMzd12VItXBjiCx46uLS8zgCHuJIt/sd026y/
5r73GDd79gsQTUoAhiVgNJ1tHuyfWDq5seEPCZwNefCXhlS7ixYHYNvu581i9Qmm
p/DFwOIqNvaO0ITALUIwBSYxNu8pryxpPd9stYJLrWhjyz8x9ZqymceDCzzghu4U
BXKqhrKYbiHlSIGxirY81c/+/wCfkzlGraFcYucnnRCMTb/CCpQbr9rDEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCg0bXDUk2aIMdOfVrXbBXgE+KPiMB8GA1UdIwQY
MBaAFMkYILUAB+QcU91gKbN5VNNXL0wpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVJnZ3RRQUg1QnhUM1dBcHMzbFUwMWN2VENrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYTcxMjEtNTQxNC00NDg0LTkxODUt
ZWVjMTRjOTcxYzRkLzEveVJnZ3RRQUg1QnhUM1dBcHMzbFUwMWN2VENrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lYTcxMjEtNTQxNC00NDg0LTkxODUtZWVjMTRjOTcxYzRk
LzEveVJnZ3RRQUg1QnhUM1dBcHMzbFUwMWN2VENrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUYBYatu
4mL8Mp3Ra7tBKQUCeijK2WR+zYT5ZDLH2493vqcqARBNKwWLzXfp7mDadxsSSgJY
qkWu+ahv9jVA5DvykZDNCEgq0GCSDaDBhZ/+dCakbQknpLJMzA/Y5JauE6uJWwjG
/McumA+TnNUpIDwsYMmMx4JK4EQTTEVjz8WZNHl0i+vdLjY1b/j1nB9InVvjPuB2
rkC5RRMvpKOJJZ7Np0aTisy2TsOZsIHuft/n4zL5ogQXJ5+dqEl0IQ25S5RPTKhx
yTAi8+A9wDvLUtYyXbHfxT32qnyAFtz3LOSaTEI0XJRF6NyLUjsYWd/oU/A9j6B5
qOqmC+dzDtJoiQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:05 2025 by rpki-client