Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
File: ypyYDqoWFBtcSBXGOJyiWz8u13w.mft (raw, json)
Hash identifier: aQClsChmrGp7D2hx9/OZ8tCm2HBckJwWl+EUjo4sUwM=
Subject key identifier: 55:ED:B0:53:8F:DE:C2:9F:1C:6A:F5:92:86:66:A3:4F:E5:E7:0D:56
Authority key identifier: CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
Certificate issuer: /CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Certificate serial: 0194BC04F806DBAFCD9B37020D759EFCC595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:29 +0000
Manifest this update: Fri 31 Jan 2025 11:00:29 +0000
Manifest next update: Sat 01 Feb 2025 11:00:29 +0000
Files and hashes: 1: BSKyscvQ3nExMPLDsZnzOtDyPn0.roa (hash: 0G/NEbmQBX4xHGs1virHRK4PzlJoNrkOAGXadEBAaoU=)
2: ypyYDqoWFBtcSBXGOJyiWz8u13w.crl (hash: +WRseOxf2RaNOyktXmU4OYmXSvvVp3gMddANTujltNo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f8:06:db:af:cd:9b:37:02:0d:75:9e:fc:c5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Validity
Not Before: Jan 31 11:00:29 2025 GMT
Not After : Feb 1 11:00:29 2025 GMT
Subject: CN=55edb0538fdec29f1c6af5928666a34fe5e70d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a5:84:d1:33:26:0c:b3:34:9c:31:35:9d:03:
b0:2f:33:b5:aa:bc:6b:0a:ea:07:e8:03:82:7c:c8:
42:89:27:c6:f6:6a:71:ee:9d:c6:94:67:54:24:d2:
fb:7d:ec:e0:15:de:b9:6f:a7:0e:64:a9:ca:26:60:
f8:48:40:91:56:3c:e3:09:15:24:d2:a2:e2:20:a7:
67:e1:f0:02:c4:ac:e2:4e:31:fa:64:d4:0f:ab:91:
af:1a:a6:9f:7c:dc:f7:b6:64:f9:4c:b9:35:92:75:
15:f7:99:0d:47:61:3d:17:6d:32:20:35:f9:f4:40:
85:a9:97:60:4e:3e:d9:f7:db:a8:be:13:d2:b6:9c:
c1:a7:51:10:48:ff:fa:9a:0a:e3:b9:54:74:21:b3:
1d:fd:93:d3:e1:93:78:dc:13:66:f7:ef:e2:8b:eb:
75:40:91:80:93:8c:9e:80:a3:f4:1e:9b:98:4a:6a:
91:1c:a7:58:2c:7d:8c:67:1f:48:c1:1a:db:05:27:
13:79:cb:af:be:d7:b7:d3:e4:7b:fd:d9:6c:96:81:
cf:d2:32:d6:67:f0:de:3e:a4:03:ac:08:55:14:e1:
c1:06:31:2a:bc:c8:14:52:17:1b:14:83:28:65:c8:
e3:22:66:74:a3:24:78:13:d0:d1:93:83:d9:62:6b:
5b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:ED:B0:53:8F:DE:C2:9F:1C:6A:F5:92:86:66:A3:4F:E5:E7:0D:56
X509v3 Authority Key Identifier:
keyid:CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b8:a4:62:33:7e:91:9a:24:b8:3b:79:d5:e5:11:8c:fe:60:
92:72:0f:64:6b:0c:1e:37:65:8a:c9:31:70:e1:64:08:82:03:
57:7b:6a:8f:ec:e5:a8:18:b4:bb:97:34:9a:05:eb:f9:e1:46:
89:14:8d:7c:fb:8c:76:29:ce:14:55:a7:18:21:20:bd:e5:6a:
df:67:77:77:3b:f4:01:ca:1e:45:a7:60:2a:34:b2:94:81:cd:
1b:75:36:bd:c0:56:d9:6b:2c:d2:db:b2:47:c2:0e:c0:b9:02:
e2:cf:d1:cd:b8:c5:bd:c8:86:16:8a:d7:b3:45:23:dd:b6:44:
23:47:21:84:9b:6b:0b:70:86:28:a7:88:b4:f5:62:b8:83:cc:
28:bb:89:f1:25:24:71:6c:97:fb:d3:e4:41:7d:a5:09:f2:0a:
64:94:1d:0c:93:d7:46:3c:9c:ba:6c:59:0f:2d:4e:1a:91:2d:
10:32:d4:9e:c5:2f:e9:e2:b7:7f:04:96:9c:b2:3f:0f:4f:f7:
ad:b7:96:a2:bc:98:fe:40:c2:cb:61:b1:30:7e:37:34:38:7e:
61:7c:c1:77:53:72:e1:cc:7b:ac:3c:f1:2a:d8:e4:27:5a:b3:
c5:fc:17:1d:3a:ae:8b:92:74:eb:da:0b:fc:c3:60:90:bf:67:
10:9f:c7:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BPgG26/NmzcCDXWe/MWVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOWM5ODBlYWExNjE0MWI1YzQ4MTVjNjM4OWNhMjViM2Yy
ZWQ3N2MwHhcNMjUwMTMxMTEwMDI5WhcNMjUwMjAxMTEwMDI5WjAzMTEwLwYDVQQD
Eyg1NWVkYjA1MzhmZGVjMjlmMWM2YWY1OTI4NjY2YTM0ZmU1ZTcwZDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6WE0TMmDLM0nDE1nQOwLzO1qrxr
CuoH6AOCfMhCiSfG9mpx7p3GlGdUJNL7fezgFd65b6cOZKnKJmD4SECRVjzjCRUk
0qLiIKdn4fACxKziTjH6ZNQPq5GvGqaffNz3tmT5TLk1knUV95kNR2E9F20yIDX5
9ECFqZdgTj7Z99uovhPStpzBp1EQSP/6mgrjuVR0IbMd/ZPT4ZN43BNm9+/ii+t1
QJGAk4yegKP0HpuYSmqRHKdYLH2MZx9IwRrbBScTecuvvte30+R7/dlsloHP0jLW
Z/DePqQDrAhVFOHBBjEqvMgUUhcbFIMoZcjjImZ0oyR4E9DRk4PZYmtb0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXtsFOP3sKfHGr1koZmo0/l5w1WMB8GA1UdIwQY
MBaAFMqcmA6qFhQbXEgVxjicols/Ltd8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXB5WURxb1dGQnRjU0JYR09KeWlXejh1MTN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81Yzk4MWMtNjU3Yy00NWJlLWJmZjYt
YmU1ZTA1MGIwMGYwLzEveXB5WURxb1dGQnRjU0JYR09KeWlXejh1MTN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81Yzk4MWMtNjU3Yy00NWJlLWJmZjYtYmU1ZTA1MGIwMGYw
LzEveXB5WURxb1dGQnRjU0JYR09KeWlXejh1MTN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrikYjN+
kZokuDt51eURjP5gknIPZGsMHjdliskxcOFkCIIDV3tqj+zlqBi0u5c0mgXr+eFG
iRSNfPuMdinOFFWnGCEgveVq32d3dzv0AcoeRadgKjSylIHNG3U2vcBW2Wss0tuy
R8IOwLkC4s/RzbjFvciGForXs0Uj3bZEI0chhJtrC3CGKKeItPViuIPMKLuJ8SUk
cWyX+9PkQX2lCfIKZJQdDJPXRjycumxZDy1OGpEtEDLUnsUv6eK3fwSWnLI/D0/3
rbeWoryY/kDCy2GxMH43NDh+YXzBd1Ny4cx7rDzxKtjkJ1qzxfwXHTqui5J069oL
/MNgkL9nEJ/HpQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:41 2025 by rpki-client