Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
File: R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft (raw, json)
Hash identifier: eaMSwL5J47Ypw6+V33d2QtvdzZchywrAceFxbxto1k8=
Subject key identifier: B2:EF:E1:F9:81:7B:7C:A3:E5:8E:05:03:FD:76:30:02:64:75:6E:C3
Authority key identifier: 47:66:2F:9F:F6:B6:43:C4:67:A2:B4:34:B7:6F:82:5E:BB:66:FE:D4
Certificate issuer: /CN=47662f9ff6b643c467a2b434b76f825ebb66fed4
Certificate serial: 0194BBCE8D901F306D1D0F11EFCA632B3F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
Manifest number: 03E9
Signing time: Fri 31 Jan 2025 10:01:03 +0000
Manifest this update: Fri 31 Jan 2025 10:01:03 +0000
Manifest next update: Sat 01 Feb 2025 10:01:03 +0000
Files and hashes: 1: KwW0a13v-16rO2m-BTqCxx8rpAo.roa (hash: krFsjsEBadu6bDJqG1OXIARdZJq+ewHj8q4uQfOufeM=)
2: R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl (hash: hnT061A3FdPPCpAKtmhEJukoyo8QYJs05NUtw9lb8AI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8d:90:1f:30:6d:1d:0f:11:ef:ca:63:2b:3f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47662f9ff6b643c467a2b434b76f825ebb66fed4
Validity
Not Before: Jan 31 10:01:03 2025 GMT
Not After : Feb 1 10:01:03 2025 GMT
Subject: CN=b2efe1f9817b7ca3e58e0503fd76300264756ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2c:5e:0d:6a:8e:54:db:af:f8:24:41:b2:18:
6b:01:ed:f1:d2:75:d3:14:54:6b:9e:fb:1c:69:c5:
2d:db:cd:b0:88:fc:62:b6:49:eb:ea:92:76:da:78:
a8:21:61:b0:ed:ca:7b:0c:74:71:8e:c7:95:47:c3:
0d:2e:76:34:ac:1c:af:7f:63:dd:83:80:a8:02:0f:
59:7d:fd:df:96:13:dc:af:31:d1:fd:24:0d:9e:c7:
8d:a9:ab:2a:f4:50:b9:a8:4d:0d:55:9a:85:68:e5:
cf:86:fd:b2:0e:07:40:29:6c:93:02:e0:2a:8e:ef:
d5:9b:37:c7:d6:0c:a9:d5:08:bd:ea:28:97:ab:0c:
2f:5d:42:6c:9c:59:46:03:c3:04:c4:95:05:8f:0b:
ae:e1:75:b4:8f:0a:9e:f2:20:e7:53:17:e5:83:52:
58:2a:76:5d:a5:a4:9a:4a:47:0e:08:45:7f:88:0b:
c5:0e:32:84:17:45:87:40:03:d5:4e:cd:5c:0b:4c:
95:bc:15:90:e8:d7:2a:fb:86:66:62:90:7b:b5:63:
6c:d4:a3:a5:9f:83:d6:13:f4:88:e5:12:93:be:1d:
a8:0c:91:b8:53:69:a7:ba:53:8e:68:68:4e:de:57:
47:4d:ae:7b:ca:e6:34:fd:cf:38:bc:8c:09:6f:d1:
a2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EF:E1:F9:81:7B:7C:A3:E5:8E:05:03:FD:76:30:02:64:75:6E:C3
X509v3 Authority Key Identifier:
keyid:47:66:2F:9F:F6:B6:43:C4:67:A2:B4:34:B7:6F:82:5E:BB:66:FE:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:b1:5a:01:57:3d:bf:e4:db:47:78:00:ea:ab:57:7e:ec:18:
5f:d1:98:cd:a7:99:fb:28:fc:ee:5f:1b:9c:57:f4:01:63:e2:
6a:17:75:a8:55:95:14:e8:e9:59:04:75:23:6c:4c:1c:94:68:
f1:1f:29:64:3d:60:17:e4:f8:88:23:80:64:81:88:e0:0f:53:
95:ee:3e:75:ae:56:6b:13:fe:96:fa:81:73:ee:b9:44:66:41:
bd:17:d0:b8:99:4b:f4:07:1d:f4:c2:a2:30:3a:0f:a6:2d:48:
a3:45:fc:43:4f:03:c1:05:96:f9:81:ef:86:34:ff:47:fa:39:
9d:4e:e9:49:36:9d:36:4b:4f:1d:49:45:f4:22:5e:5c:03:15:
f5:8c:6b:e4:11:60:39:77:cd:aa:f6:c8:b4:3c:7f:52:f6:bb:
c3:4b:10:b6:92:eb:41:ac:65:fa:ad:7d:ba:d1:70:db:37:0f:
34:ec:a9:84:4f:7f:94:d8:b9:5f:7c:04:ad:42:01:73:65:ba:
27:53:0c:7b:18:88:9f:8e:89:b9:35:2c:90:54:7d:d1:17:c3:
e3:28:6e:b4:b7:7c:3b:68:c4:8a:86:a9:7f:72:ad:28:4f:24:
e3:b2:6a:b5:9c:d6:af:21:ac:9c:1f:57:f4:f6:a2:e7:ee:a1:
04:8d:02:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zo2QHzBtHQ8R78pjKz+DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NjYyZjlmZjZiNjQzYzQ2N2EyYjQzNGI3NmY4MjVlYmI2
NmZlZDQwHhcNMjUwMTMxMTAwMTAzWhcNMjUwMjAxMTAwMTAzWjAzMTEwLwYDVQQD
EyhiMmVmZTFmOTgxN2I3Y2EzZTU4ZTA1MDNmZDc2MzAwMjY0NzU2ZWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSxeDWqOVNuv+CRBshhrAe3x0nXT
FFRrnvscacUt282wiPxitknr6pJ22nioIWGw7cp7DHRxjseVR8MNLnY0rByvf2Pd
g4CoAg9Zff3flhPcrzHR/SQNnseNqasq9FC5qE0NVZqFaOXPhv2yDgdAKWyTAuAq
ju/VmzfH1gyp1Qi96iiXqwwvXUJsnFlGA8MExJUFjwuu4XW0jwqe8iDnUxflg1JY
KnZdpaSaSkcOCEV/iAvFDjKEF0WHQAPVTs1cC0yVvBWQ6Ncq+4ZmYpB7tWNs1KOl
n4PWE/SI5RKTvh2oDJG4U2mnulOOaGhO3ldHTa57yuY0/c84vIwJb9GiwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLv4fmBe3yj5Y4FA/12MAJkdW7DMB8GA1UdIwQY
MBaAFEdmL5/2tkPEZ6K0NLdvgl67Zv7UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJZdm5fYTJROFJub3JRMHQyLUNYcnRtX3RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9iNWYxNzctYmJkZC00MGNmLTg3ZTUt
YjBiNGM0ZjJmZDkwLzEvUjJZdm5fYTJROFJub3JRMHQyLUNYcnRtX3RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9iNWYxNzctYmJkZC00MGNmLTg3ZTUtYjBiNGM0ZjJmZDkw
LzEvUjJZdm5fYTJROFJub3JRMHQyLUNYcnRtX3RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwbFaAVc9
v+TbR3gA6qtXfuwYX9GYzaeZ+yj87l8bnFf0AWPiahd1qFWVFOjpWQR1I2xMHJRo
8R8pZD1gF+T4iCOAZIGI4A9Tle4+da5WaxP+lvqBc+65RGZBvRfQuJlL9Acd9MKi
MDoPpi1Io0X8Q08DwQWW+YHvhjT/R/o5nU7pSTadNktPHUlF9CJeXAMV9Yxr5BFg
OXfNqvbItDx/Uva7w0sQtpLrQaxl+q19utFw2zcPNOyphE9/lNi5X3wErUIBc2W6
J1MMexiIn46JuTUskFR90RfD4yhutLd8O2jEioapf3KtKE8k47JqtZzWryGsnB9X
9Pai5+6hBI0CYw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:58 2025 by rpki-client