Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
File: y5l80U86a8NEosk47g_etU0iEkA.mft (raw, json)
Hash identifier: 7xt2zwPig0h3OKGDkId03wev7PKBWZjcFAMKlnhEwX4=
Subject key identifier: F0:BA:35:0A:4E:18:76:AD:92:37:80:51:90:09:79:68:5C:30:AE:EA
Authority key identifier: CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
Certificate issuer: /CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Certificate serial: 0194BD174DDB2D2DF840632D5B5728279165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
Manifest number: 01FE
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: 9Aeacxzy-u4aevKcCQ9nXd_FU7Q.roa (hash: vKC+rREuRemLdV33ThPXHvcW71bg+LHpzDOvqZUoqy4=)
2: y5l80U86a8NEosk47g_etU0iEkA.crl (hash: qM1EDWcAEU369W1WGwc+xHoGoi5dD5bo7ynLu3pUPtA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4d:db:2d:2d:f8:40:63:2d:5b:57:28:27:91:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=f0ba350a4e1876ad92378051900979685c30aeea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0f:21:fb:47:e8:90:7f:de:50:59:b2:21:86:
0a:94:d2:df:76:41:1a:75:cb:a4:52:a4:a6:fa:80:
4d:91:02:ef:4d:ec:59:1e:27:68:95:aa:9e:38:7c:
93:26:57:d5:6e:ef:cf:22:91:71:3e:16:06:d0:39:
46:5b:8b:bc:df:e4:73:e5:b3:1c:ab:3a:48:70:8c:
58:a2:0b:72:16:42:12:d1:10:d7:37:44:47:fc:67:
70:e4:05:02:ca:23:ab:0f:93:de:3d:90:8a:68:c4:
cc:48:18:92:39:bd:3d:a5:c1:26:47:d8:a3:0a:64:
22:6b:c8:5d:4a:84:07:d3:a1:a7:86:f9:a8:24:2c:
d5:b0:9b:d8:56:66:fd:8b:6f:bf:22:f8:d0:cb:30:
1d:22:a7:37:58:11:de:62:c4:64:95:41:6a:44:b5:
84:80:56:4d:7a:a4:58:28:a1:b8:c9:1c:5d:a8:af:
cf:bc:4c:d7:a0:c3:3f:86:72:05:00:5a:13:66:99:
d1:96:d0:64:55:58:55:2a:35:9e:e8:fc:61:fc:1e:
d2:fc:e4:c8:ed:d2:51:bb:7d:b6:f1:0e:63:b5:32:
dd:eb:f7:95:93:5a:1e:2a:9b:bb:e0:40:32:50:cd:
0f:82:b6:33:9a:b8:dd:72:40:15:f4:91:86:fc:ab:
49:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BA:35:0A:4E:18:76:AD:92:37:80:51:90:09:79:68:5C:30:AE:EA
X509v3 Authority Key Identifier:
keyid:CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6f:e3:11:a5:82:3a:ae:7a:8e:c3:62:d5:6b:3e:ed:38:63:
01:2c:95:dc:a1:74:a8:93:04:46:19:4d:af:1d:bb:e8:f6:d0:
ba:44:6b:2b:e3:ce:40:5e:90:02:de:3f:2f:f7:80:72:4a:2a:
15:a8:a8:42:51:94:ac:ae:36:e7:ae:02:c9:41:8b:fe:36:91:
81:b8:62:e4:9a:fc:4a:51:3a:35:b6:b1:b6:d2:7d:b3:a7:2b:
ae:58:53:bb:0e:95:05:94:fa:94:6a:c4:94:23:90:e0:3d:2f:
56:23:fb:38:76:79:be:1b:da:45:a5:3e:1a:57:75:e7:90:c3:
4c:d3:e9:07:a0:7b:63:3f:83:5a:e5:aa:54:35:54:63:fa:41:
00:c6:cd:0b:d2:5e:cd:19:ae:95:ae:24:4e:1b:13:17:f0:3e:
ef:16:ab:8d:3d:f3:93:ee:fd:81:27:b1:76:07:68:c4:33:ed:
a5:9e:82:66:96:71:06:72:5d:01:a6:44:bb:b0:a8:b1:a3:29:
73:e8:a8:4c:aa:a3:39:0b:65:64:1f:a8:08:d7:03:52:8b:8d:
a3:31:b2:67:4e:53:04:43:64:b1:72:5a:4d:27:29:7b:c6:51:
1e:da:0a:26:85:48:57:5b:b3:66:ff:98:ec:db:54:eb:3a:04:
d6:0a:77:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F03bLS34QGMtW1coJ5FlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiOTk3Y2QxNGYzYTZiYzM0NGEyYzkzOGVlMGZkZWI1NGQy
MjEyNDAwHhcNMjUwMTMxMTYwMDA4WhcNMjUwMjAxMTYwMDA4WjAzMTEwLwYDVQQD
EyhmMGJhMzUwYTRlMTg3NmFkOTIzNzgwNTE5MDA5Nzk2ODVjMzBhZWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ8h+0fokH/eUFmyIYYKlNLfdkEa
dcukUqSm+oBNkQLvTexZHidolaqeOHyTJlfVbu/PIpFxPhYG0DlGW4u83+Rz5bMc
qzpIcIxYogtyFkIS0RDXN0RH/Gdw5AUCyiOrD5PePZCKaMTMSBiSOb09pcEmR9ij
CmQia8hdSoQH06GnhvmoJCzVsJvYVmb9i2+/IvjQyzAdIqc3WBHeYsRklUFqRLWE
gFZNeqRYKKG4yRxdqK/PvEzXoMM/hnIFAFoTZpnRltBkVVhVKjWe6Pxh/B7S/OTI
7dJRu3228Q5jtTLd6/eVk1oeKpu74EAyUM0PgrYzmrjdckAV9JGG/KtJKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPC6NQpOGHatkjeAUZAJeWhcMK7qMB8GA1UdIwQY
MBaAFMuZfNFPOmvDRKLJOO4P3rVNIhJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTVsODBVODZhOE5Fb3NrNDdnX2V0VTBpRWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8yMjg4NWEtNDJjOC00N2UyLTkwYWQt
MTZlOGZlM2M1MDZmLzEveTVsODBVODZhOE5Fb3NrNDdnX2V0VTBpRWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8yMjg4NWEtNDJjOC00N2UyLTkwYWQtMTZlOGZlM2M1MDZm
LzEveTVsODBVODZhOE5Fb3NrNDdnX2V0VTBpRWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARm/jEaWC
Oq56jsNi1Ws+7ThjASyV3KF0qJMERhlNrx276PbQukRrK+POQF6QAt4/L/eAckoq
FaioQlGUrK42564CyUGL/jaRgbhi5Jr8SlE6NbaxttJ9s6crrlhTuw6VBZT6lGrE
lCOQ4D0vViP7OHZ5vhvaRaU+Gld155DDTNPpB6B7Yz+DWuWqVDVUY/pBAMbNC9Je
zRmula4kThsTF/A+7xarjT3zk+79gSexdgdoxDPtpZ6CZpZxBnJdAaZEu7CosaMp
c+ioTKqjOQtlZB+oCNcDUouNozGyZ05TBENksXJaTScpe8ZRHtoKJoVIV1uzZv+Y
7NtU6zoE1gp3sA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:34 2025 by rpki-client