Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
File: Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft (raw, json)
Hash identifier: Pc0fHVWSv/riWPGjhUdQszH7EIcFbPg9gZ6yEgq2hZM=
Subject key identifier: BC:E0:0A:05:96:BD:CD:37:17:25:E9:0E:E4:1B:42:37:FC:B4:BF:DF
Authority key identifier: 62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
Certificate issuer: /CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
Certificate serial: 0194BCE0E207005610FF728BEB5CB1AD9843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
Manifest number: 1394
Signing time: Fri 31 Jan 2025 15:00:42 +0000
Manifest this update: Fri 31 Jan 2025 15:00:42 +0000
Manifest next update: Sat 01 Feb 2025 15:00:42 +0000
Files and hashes: 1: Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl (hash: qs6zXZfx78WSFqmRxjZ34lgoInjtJlFbTc3P2cZOkIQ=)
2: gFgwOulWz8EdjBx0WPIuskEa2Xo.roa (hash: kmccz6rQP+OANRlJVswlZw+GA51smpUT7A9JAOVNjXI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e2:07:00:56:10:ff:72:8b:eb:5c:b1:ad:98:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
Validity
Not Before: Jan 31 15:00:42 2025 GMT
Not After : Feb 1 15:00:42 2025 GMT
Subject: CN=bce00a0596bdcd371725e90ee41b4237fcb4bfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:60:1e:e2:0c:1f:17:98:64:81:b3:a1:a4:7a:
3f:ae:15:14:05:95:59:98:ab:cb:52:7d:53:de:d1:
14:6d:b2:87:8b:78:32:6c:08:e6:e5:0c:fd:a1:ef:
43:15:7a:d9:fe:cb:0a:05:74:9e:b1:4d:6e:07:e2:
79:92:7d:b0:a0:61:8c:c3:dc:57:73:ac:fa:93:b9:
41:78:de:41:fc:63:c9:17:37:ff:5f:38:f9:60:30:
02:ac:56:98:38:47:e3:8f:81:e4:64:02:4f:f7:9d:
1d:de:ce:b6:f2:db:d6:19:79:7d:99:12:9e:b8:64:
f9:c4:af:4c:19:98:1e:6e:2c:ec:bd:34:7c:57:83:
f2:11:c1:13:b1:3f:f4:31:c1:d1:b0:14:59:67:30:
32:7f:43:05:5b:97:9b:07:b1:63:e2:5f:49:c9:a7:
e5:1f:63:73:4d:15:75:53:c6:0a:f3:ca:e5:cb:d9:
58:27:fc:85:a4:6a:e7:52:c3:f0:ea:90:47:28:9a:
17:69:50:5a:e5:65:71:f0:93:54:75:e1:a0:1e:31:
ae:cf:5e:ec:2c:13:29:61:d2:e4:45:73:c8:33:cc:
6b:6f:40:9f:12:a3:9b:2d:69:4b:9e:30:2b:d6:7f:
ae:95:ac:af:6e:0c:db:c9:6b:7e:15:74:b7:4d:3f:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E0:0A:05:96:BD:CD:37:17:25:E9:0E:E4:1B:42:37:FC:B4:BF:DF
X509v3 Authority Key Identifier:
keyid:62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:50:9b:d8:97:65:7f:d7:37:3b:a0:39:87:bb:80:a3:4b:73:
aa:fc:79:9d:23:08:a0:e6:cc:ce:12:eb:24:8e:b2:7b:7b:68:
08:03:d4:f1:15:0a:ab:a5:03:5c:5e:c7:07:74:36:02:c4:63:
d0:29:a3:7e:ad:c6:84:e0:9a:6b:1a:5b:4f:4d:19:ce:af:e6:
11:6d:03:92:95:cc:6c:7f:ed:f3:01:e0:9b:73:4a:30:d8:2a:
df:e7:9b:9d:b3:fa:4c:73:32:92:36:34:8b:29:63:6b:57:4f:
51:c6:65:88:11:c1:14:4f:ec:bf:dd:9f:07:f1:cd:b5:77:ce:
cd:2d:2a:bf:c6:20:3a:da:8a:c4:29:2f:e4:2e:bd:e6:91:36:
14:13:8c:90:90:da:3b:e1:36:9e:1a:8a:06:f9:28:0a:2a:b8:
65:7d:5f:83:27:a2:40:be:57:7a:19:b7:bd:15:52:2d:b6:09:
e9:15:0f:b1:3b:1a:e3:da:bb:3b:2d:7f:e9:0b:6a:00:39:a2:
6b:67:5d:5d:31:c8:96:0b:ef:23:3e:c3:91:65:96:7e:7f:74:
e3:ec:a2:10:98:15:0f:71:31:19:c7:6e:28:36:ac:23:c9:67:
00:d7:c3:89:56:5b:da:73:60:05:14:4a:fd:dd:e5:90:92:9c:
ce:b5:26:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84OIHAFYQ/3KL61yxrZhDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNWE5ZjY5ZmUwNzk3ZTA4M2I1MTYyODFjYWIzZjBiYTY1
ZTJlYTgwHhcNMjUwMTMxMTUwMDQyWhcNMjUwMjAxMTUwMDQyWjAzMTEwLwYDVQQD
EyhiY2UwMGEwNTk2YmRjZDM3MTcyNWU5MGVlNDFiNDIzN2ZjYjRiZmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWAe4gwfF5hkgbOhpHo/rhUUBZVZ
mKvLUn1T3tEUbbKHi3gybAjm5Qz9oe9DFXrZ/ssKBXSesU1uB+J5kn2woGGMw9xX
c6z6k7lBeN5B/GPJFzf/Xzj5YDACrFaYOEfjj4HkZAJP950d3s628tvWGXl9mRKe
uGT5xK9MGZgebizsvTR8V4PyEcETsT/0McHRsBRZZzAyf0MFW5ebB7Fj4l9Jyafl
H2NzTRV1U8YK88rly9lYJ/yFpGrnUsPw6pBHKJoXaVBa5WVx8JNUdeGgHjGuz17s
LBMpYdLkRXPIM8xrb0CfEqObLWlLnjAr1n+ulayvbgzbyWt+FXS3TT/N/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzgCgWWvc03FyXpDuQbQjf8tL/fMB8GA1UdIwQY
MBaAFGJan2n+B5fgg7UWKByrPwumXi6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWxxZmFmNEhsLUNEdFJZb0hLc19DNlplTHFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC82M2I2YWUtZDRmNS00OTQ2LWJiZjUt
YjEzM2U2ZTZmYTg1LzEvWWxxZmFmNEhsLUNEdFJZb0hLc19DNlplTHFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC82M2I2YWUtZDRmNS00OTQ2LWJiZjUtYjEzM2U2ZTZmYTg1
LzEvWWxxZmFmNEhsLUNEdFJZb0hLc19DNlplTHFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVCb2Jdl
f9c3O6A5h7uAo0tzqvx5nSMIoObMzhLrJI6ye3toCAPU8RUKq6UDXF7HB3Q2AsRj
0Cmjfq3GhOCaaxpbT00Zzq/mEW0DkpXMbH/t8wHgm3NKMNgq3+ebnbP6THMykjY0
iylja1dPUcZliBHBFE/sv92fB/HNtXfOzS0qv8YgOtqKxCkv5C695pE2FBOMkJDa
O+E2nhqKBvkoCiq4ZX1fgyeiQL5Xehm3vRVSLbYJ6RUPsTsa49q7Oy1/6QtqADmi
a2ddXTHIlgvvIz7DkWWWfn904+yiEJgVD3ExGcduKDasI8lnANfDiVZb2nNgBRRK
/d3lkJKczrUmsw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:59 2025 by rpki-client