Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
File: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft (raw, json)
Hash identifier: /2h0MiXT7PC0ivQfuO6nIbotNGBREF1T2KBUOirQyvM=
Subject key identifier: 55:E8:96:67:13:02:EF:42:57:BB:57:39:CE:87:F0:71:85:6F:71:69
Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
Certificate issuer: /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Certificate serial: 0194BD859CC746CF14D88B5357C4128A710B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
Manifest number: 12AB
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: ZBvl9kgTfl9xpoCDalOQ41fsQlA.roa (hash: eTBJG42QxSY9j5MKHECEE0ZbmMhc6Mb5ITGizx3+EdE=)
2: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl (hash: Urt7Zmq8G1RzWGhU/dH4z2ST9ipL92USuXkzNJ7Nvws=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9c:c7:46:cf:14:d8:8b:53:57:c4:12:8a:71:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=55e896671302ef4257bb5739ce87f071856f7169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:7d:b2:e4:e2:cd:e7:93:bb:a6:76:8d:78:
73:83:75:b8:65:aa:06:a9:5c:f5:b9:76:63:36:cb:
f0:f6:bf:69:01:da:7d:ef:98:73:94:63:e1:58:ee:
55:e6:f8:a3:88:92:63:8f:7d:77:d7:6a:01:a4:e9:
19:1f:2e:c2:1f:b0:ee:86:74:de:62:da:1a:63:22:
cb:d7:00:a4:28:90:a1:8a:79:f4:2e:e1:ce:2f:5a:
1a:4f:ef:17:26:99:ca:8c:d7:bb:5f:f5:fe:0e:98:
d6:49:ab:d4:b1:38:b6:9f:a8:82:af:84:6e:0a:f4:
82:73:13:9a:42:a5:98:73:8f:4e:6b:35:79:a6:d8:
49:7c:81:8f:5b:2e:1c:14:e3:7d:4c:d3:ed:59:92:
c9:7e:8b:1c:21:26:35:85:70:fa:59:a4:8e:e7:08:
1d:92:c4:78:72:ad:dc:5b:1e:00:dc:ca:50:4c:25:
ff:03:f0:5f:a6:40:2c:f1:0a:33:a6:a7:0c:1f:9b:
e8:71:2b:4f:69:96:ce:ae:67:45:25:53:4e:ae:b4:
d4:6e:e0:e4:99:3e:36:2c:d4:10:cc:a1:71:0c:1a:
2a:cb:5b:cf:00:fc:79:09:61:d0:6f:d2:85:f4:f9:
9e:61:a4:35:f3:d3:53:d0:cf:14:23:7b:39:09:20:
cd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E8:96:67:13:02:EF:42:57:BB:57:39:CE:87:F0:71:85:6F:71:69
X509v3 Authority Key Identifier:
keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8c:00:b9:11:d9:6b:5c:e6:c8:08:37:ab:7f:62:0f:e1:14:
0e:42:4e:4f:13:bc:d5:93:62:61:0c:6d:13:ce:56:40:cf:84:
79:f9:f9:fc:c7:6e:1b:07:15:0f:33:5d:59:e7:6d:96:62:35:
2f:b3:00:62:e6:8a:eb:1b:1c:fb:10:45:83:cc:ab:1f:77:89:
45:39:1d:ef:69:0f:70:b7:a9:9c:d7:50:d1:a7:3b:23:69:f4:
1d:b6:a3:a7:36:26:91:99:94:24:12:fb:bb:a7:f4:91:92:41:
bd:d0:43:02:f2:d5:ca:02:d5:c9:6b:67:84:55:e6:bf:58:92:
af:24:10:3e:b4:e4:22:fb:db:e6:e4:31:a5:e2:00:00:29:88:
2c:d8:14:76:83:bf:b7:61:8a:2f:a7:6b:79:b9:38:d6:0f:94:
18:5e:d9:41:80:d4:f8:9b:18:c1:3b:eb:7f:a0:14:25:de:62:
ce:42:73:e6:4d:cc:08:38:7e:2e:b9:f1:87:00:a0:4a:e5:bf:
0e:80:1f:82:44:79:96:93:4f:9d:62:b5:85:d9:08:a1:c1:f8:
74:2e:ea:31:9e:03:83:02:d8:29:64:a7:d7:ee:f5:9c:97:d9:
83:6a:03:9c:98:10:2a:80:2e:79:f4:d9:3b:cd:bd:69:77:f1:
8b:ed:89:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZzHRs8U2ItTV8QSinELMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMjYyMWVlMzFlMDZhYWRjMWNhM2EzNzZlNDU3ZDhkMDQ5
NmIxMGQwHhcNMjUwMTMxMTgwMDM3WhcNMjUwMjAxMTgwMDM3WjAzMTEwLwYDVQQD
Eyg1NWU4OTY2NzEzMDJlZjQyNTdiYjU3MzljZTg3ZjA3MTg1NmY3MTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRp9suTizeeTu6Z2jXhzg3W4ZaoG
qVz1uXZjNsvw9r9pAdp975hzlGPhWO5V5vijiJJjj31312oBpOkZHy7CH7DuhnTe
YtoaYyLL1wCkKJChinn0LuHOL1oaT+8XJpnKjNe7X/X+DpjWSavUsTi2n6iCr4Ru
CvSCcxOaQqWYc49OazV5pthJfIGPWy4cFON9TNPtWZLJfoscISY1hXD6WaSO5wgd
ksR4cq3cWx4A3MpQTCX/A/BfpkAs8QozpqcMH5vocStPaZbOrmdFJVNOrrTUbuDk
mT42LNQQzKFxDBoqy1vPAPx5CWHQb9KF9PmeYaQ189NT0M8UI3s5CSDNrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXolmcTAu9CV7tXOc6H8HGFb3FpMB8GA1UdIwQY
MBaAFPwmIe4x4Gqtwco6N25FfY0ElrENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0NZaDdqSGdhcTNCeWpvM2JrVjlqUVNXc1EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80MThmZTItNGY3ZC00MGFjLWFiZTQt
MTE5YmJkNzYxOTczLzEvX0NZaDdqSGdhcTNCeWpvM2JrVjlqUVNXc1EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80MThmZTItNGY3ZC00MGFjLWFiZTQtMTE5YmJkNzYxOTcz
LzEvX0NZaDdqSGdhcTNCeWpvM2JrVjlqUVNXc1EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYwAuRHZ
a1zmyAg3q39iD+EUDkJOTxO81ZNiYQxtE85WQM+Eefn5/MduGwcVDzNdWedtlmI1
L7MAYuaK6xsc+xBFg8yrH3eJRTkd72kPcLepnNdQ0ac7I2n0HbajpzYmkZmUJBL7
u6f0kZJBvdBDAvLVygLVyWtnhFXmv1iSryQQPrTkIvvb5uQxpeIAACmILNgUdoO/
t2GKL6drebk41g+UGF7ZQYDU+JsYwTvrf6AUJd5izkJz5k3MCDh+LrnxhwCgSuW/
DoAfgkR5lpNPnWK1hdkIocH4dC7qMZ4DgwLYKWSn1+71nJfZg2oDnJgQKoAuefTZ
O829aXfxi+2JRA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:23 2025 by rpki-client