Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
File: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft (raw, json)
Hash identifier: KPwcq1dekG27IhWczNwD7l5qRgQfmmPqi/1r+e62NBA=
Subject key identifier: 36:9A:F5:86:17:BF:8F:0B:31:7C:07:61:23:6C:B2:14:22:59:EC:9B
Authority key identifier: 63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
Certificate issuer: /CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Certificate serial: 0194BC04FAEF6DBD69F4A9F3D9079E269B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: SOjICIUf3Q5KcvZmv_NHH5baNJY.roa (hash: CIXb+faY/LyAGhWDjXy0Uzmt28hgw4zuuv1ZndxzjNQ=)
2: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl (hash: WqZPjZ6yBMA59uj98/8nBJkWPi0Oo3vsj78ql9gKBvA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fa:ef:6d:bd:69:f4:a9:f3:d9:07:9e:26:9b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=369af58617bf8f0b317c0761236cb2142259ec9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4a:03:86:81:9a:b6:13:13:75:a3:6d:0b:15:
13:c2:5e:a4:64:7b:69:7a:04:76:d6:44:4f:ed:d3:
63:f3:41:70:e9:25:98:3c:b6:8c:c3:83:02:7e:0b:
2a:56:c1:b4:71:5c:49:6a:43:a8:30:27:99:0f:fe:
c1:c9:e5:df:82:9d:de:d2:0e:9d:50:2c:58:80:cd:
cf:9d:bc:c4:a3:24:8a:d2:c1:65:7f:bb:07:66:fa:
f3:e0:88:ba:a2:6f:0a:a1:91:08:eb:65:b6:ad:7d:
45:68:e4:c6:7e:88:83:3b:80:5a:c1:67:fc:82:b4:
da:de:0c:a2:03:be:cb:e0:c9:3c:cd:85:ab:ad:76:
0d:e6:cf:ef:d3:6f:2d:75:8e:7d:b7:73:31:79:b6:
7f:3a:04:f8:e5:14:83:b9:26:83:c1:98:b7:38:37:
36:82:a2:5e:d9:f3:01:21:16:bb:ae:7a:61:ee:43:
48:60:d1:41:be:d9:be:f4:f7:88:12:c7:fa:3c:3c:
c1:f5:0b:fc:5d:c6:65:58:05:23:d2:a0:d4:bd:0b:
c8:9a:9e:24:f7:21:5e:9b:c8:46:ad:ef:2a:9b:91:
ce:a6:39:66:5b:7b:94:c6:39:09:1e:ae:d1:08:04:
9a:06:58:69:49:d3:a9:cc:7f:ae:37:d3:e6:c4:fc:
c3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9A:F5:86:17:BF:8F:0B:31:7C:07:61:23:6C:B2:14:22:59:EC:9B
X509v3 Authority Key Identifier:
keyid:63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c7:97:f1:ba:24:a3:4b:d2:64:c2:e2:22:cd:b6:37:f2:ee:
87:9d:ba:a4:e5:90:ad:62:c0:b4:3c:7d:c9:8d:07:65:de:a2:
f7:08:c1:64:60:95:12:79:29:f6:84:07:8a:83:e0:51:c1:48:
c5:00:15:59:6c:ca:96:e4:78:d0:34:4f:e4:f3:81:97:2d:9f:
21:23:a4:5a:63:41:47:65:7e:d5:f3:13:8d:02:bb:25:fc:cb:
d2:d0:f2:a8:e3:cb:a2:00:87:1d:91:5d:65:3e:de:93:2f:13:
7c:73:a9:ec:ca:4d:04:eb:bd:7a:cc:88:60:09:3d:c6:6b:68:
d3:da:ea:11:be:be:d4:71:86:20:c5:b2:6e:74:60:cb:c7:46:
06:31:9e:8f:55:31:4a:3c:28:16:dd:c5:a7:2f:15:87:c3:0d:
0d:c7:4a:5b:65:d6:17:68:08:85:50:ba:4c:65:3a:d9:1e:59:
0a:c0:88:73:fb:09:24:ad:71:6b:a1:c4:75:ce:93:b1:c0:9a:
1b:d8:25:e2:8f:fb:16:a0:6f:cc:64:e6:62:65:74:1f:4b:4e:
42:39:a0:57:f7:70:94:0b:29:8e:4d:c3:aa:d6:4d:e2:5d:4e:
1c:4f:84:22:04:c7:8e:d4:9a:41:ae:2e:6d:f3:2c:5b:ae:02:
47:80:e0:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BPrvbb1p9Knz2QeeJpt4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTJjYWE3ZTE4YWYyZGZiZGIzYTYyNjlkYTJlMDZkZWRj
YjZjZjAwHhcNMjUwMTMxMTEwMDMwWhcNMjUwMjAxMTEwMDMwWjAzMTEwLwYDVQQD
EygzNjlhZjU4NjE3YmY4ZjBiMzE3YzA3NjEyMzZjYjIxNDIyNTllYzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUoDhoGathMTdaNtCxUTwl6kZHtp
egR21kRP7dNj80Fw6SWYPLaMw4MCfgsqVsG0cVxJakOoMCeZD/7ByeXfgp3e0g6d
UCxYgM3PnbzEoySK0sFlf7sHZvrz4Ii6om8KoZEI62W2rX1FaOTGfoiDO4BawWf8
grTa3gyiA77L4Mk8zYWrrXYN5s/v028tdY59t3MxebZ/OgT45RSDuSaDwZi3ODc2
gqJe2fMBIRa7rnph7kNIYNFBvtm+9PeIEsf6PDzB9Qv8XcZlWAUj0qDUvQvImp4k
9yFem8hGre8qm5HOpjlmW3uUxjkJHq7RCASaBlhpSdOpzH+uN9PmxPzDxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaa9YYXv48LMXwHYSNsshQiWeybMB8GA1UdIwQY
MBaAFGPiyqfhivLfvbOmJp2i4G3ty2zwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1MS3AtR0s4dC05czZZbW5hTGdiZTNMYlBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wOTk3MDUtNGEzYi00YTY4LWI2YmQt
NTM4YWYxMDE3NTA5LzEvWS1MS3AtR0s4dC05czZZbW5hTGdiZTNMYlBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8wOTk3MDUtNGEzYi00YTY4LWI2YmQtNTM4YWYxMDE3NTA5
LzEvWS1MS3AtR0s4dC05czZZbW5hTGdiZTNMYlBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYseX8bok
o0vSZMLiIs22N/Luh526pOWQrWLAtDx9yY0HZd6i9wjBZGCVEnkp9oQHioPgUcFI
xQAVWWzKluR40DRP5POBly2fISOkWmNBR2V+1fMTjQK7JfzL0tDyqOPLogCHHZFd
ZT7eky8TfHOp7MpNBOu9esyIYAk9xmto09rqEb6+1HGGIMWybnRgy8dGBjGej1Ux
SjwoFt3Fpy8Vh8MNDcdKW2XWF2gIhVC6TGU62R5ZCsCIc/sJJK1xa6HEdc6TscCa
G9gl4o/7FqBvzGTmYmV0H0tOQjmgV/dwlAspjk3DqtZN4l1OHE+EIgTHjtSaQa4u
bfMsW64CR4DgQg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:17 2025 by rpki-client