Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
File: YZz5qeC2RhrYM4dawRaPiSP9VQs.mft (raw, json)
Hash identifier: X0M/P2hzBE5zI9dLGZLzCM0CvrxGG4IbBofZhM7CTb0=
Subject key identifier: 9C:57:58:FD:F6:97:A5:FE:1F:8B:BA:36:4C:1F:61:24:5C:C7:50:D6
Authority key identifier: 61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
Certificate issuer: /CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Certificate serial: 0194BCA9E4849081FBD7F04DE912753F8977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
Manifest number: AB
Signing time: Fri 31 Jan 2025 14:00:38 +0000
Manifest this update: Fri 31 Jan 2025 14:00:38 +0000
Manifest next update: Sat 01 Feb 2025 14:00:38 +0000
Files and hashes: 1: YZz5qeC2RhrYM4dawRaPiSP9VQs.crl (hash: IItt5K5L4U7xpRtnrSY4WsVBYNkJS1i5cqsq+8E26GI=)
2: huRseKKMZ6MrEbEtnTidADNp1Qk.roa (hash: 2Cpw72DhJ+0Co4QK9K/ptsbGLArKbkMx0RKaT4rzilY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e4:84:90:81:fb:d7:f0:4d:e9:12:75:3f:89:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Validity
Not Before: Jan 31 14:00:38 2025 GMT
Not After : Feb 1 14:00:38 2025 GMT
Subject: CN=9c5758fdf697a5fe1f8bba364c1f61245cc750d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:70:6f:4a:23:41:45:97:8b:e3:6f:e4:0e:c0:
5d:2a:45:04:e8:d7:03:c8:b9:6e:aa:9f:dc:df:18:
21:3f:92:06:33:e7:35:1c:d5:83:39:d6:6b:7a:74:
c8:c7:2f:34:b8:53:cb:0e:e8:b6:d8:db:37:84:12:
41:8a:ac:87:e3:db:5c:31:18:16:4f:ea:61:1e:22:
da:1c:5e:c7:1d:71:ee:13:31:47:04:20:ef:11:3c:
3a:a1:10:35:31:dd:d6:9b:fe:6e:9b:d5:de:c4:a2:
fc:62:2e:8c:fc:77:38:02:1f:4e:d8:24:5c:54:b1:
73:9f:2e:f9:48:c1:58:e4:04:04:a7:4e:70:98:8f:
24:0a:39:da:a8:7b:77:a4:b2:b5:90:df:78:4a:7c:
f3:8f:99:28:82:59:68:7d:09:c6:28:e4:3a:4a:44:
2f:f0:8b:90:91:ca:5f:f0:ed:9a:7a:7c:33:9d:e7:
7a:c2:4b:96:58:96:67:5a:4c:31:04:48:73:f1:1d:
f1:05:77:66:01:ad:df:81:33:8b:37:18:8f:c8:70:
a6:ce:cf:17:d0:a9:5f:85:6e:1d:a6:3a:4a:a4:83:
69:44:d6:06:1f:57:df:94:20:11:da:e9:22:12:54:
88:ae:e2:27:70:6b:18:84:78:d2:7d:05:cd:13:9e:
ee:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:57:58:FD:F6:97:A5:FE:1F:8B:BA:36:4C:1F:61:24:5C:C7:50:D6
X509v3 Authority Key Identifier:
keyid:61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:5d:e1:7c:3e:69:64:e6:53:78:1c:37:8f:c8:47:be:23:8a:
a9:f0:33:7d:4c:15:4d:90:b7:bf:f4:a1:d4:55:9a:d6:bc:99:
d3:1b:b2:4b:ae:35:5a:07:b8:7a:8a:32:32:97:cb:f0:92:e6:
bf:6c:a6:15:38:e2:0d:4f:0a:f4:b5:5a:62:1d:65:e2:a2:1a:
4b:d0:1d:2c:c9:9e:78:36:ee:b4:f2:33:25:03:22:31:79:ea:
00:be:e0:22:1c:89:62:fd:8b:b7:53:8c:30:40:27:88:6f:4a:
32:43:06:36:88:64:e7:b6:6a:5e:64:f4:89:fb:89:41:9a:93:
e5:f1:13:13:9a:ae:75:2f:d1:7c:d5:3e:de:9e:3d:31:28:f3:
cd:4d:8a:75:67:49:72:3d:ac:bf:96:af:b4:d0:cf:a6:1a:56:
73:13:e3:98:56:1f:2d:bd:86:57:e7:59:cf:5c:f3:d6:97:1a:
d8:32:f1:54:d8:e0:e1:e1:b9:7e:9a:13:6d:83:68:e9:2f:fc:
6f:ae:8d:91:83:6f:e8:d6:46:67:16:4d:86:3f:df:ed:cd:4d:
7d:f0:07:97:12:dd:41:55:96:c7:1b:8e:05:7c:ca:0b:74:b0:
49:ad:76:77:92:c8:e1:75:bc:cc:94:40:8e:cb:b9:20:e2:a8:
aa:ec:2f:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qeSEkIH71/BN6RJ1P4l3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxOWNmOWE5ZTBiNjQ2MWFkODMzODc1YWMxMTY4Zjg5MjNm
ZDU1MGIwHhcNMjUwMTMxMTQwMDM4WhcNMjUwMjAxMTQwMDM4WjAzMTEwLwYDVQQD
Eyg5YzU3NThmZGY2OTdhNWZlMWY4YmJhMzY0YzFmNjEyNDVjYzc1MGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXBvSiNBRZeL42/kDsBdKkUE6NcD
yLluqp/c3xghP5IGM+c1HNWDOdZrenTIxy80uFPLDui22Ns3hBJBiqyH49tcMRgW
T+phHiLaHF7HHXHuEzFHBCDvETw6oRA1Md3Wm/5um9XexKL8Yi6M/Hc4Ah9O2CRc
VLFzny75SMFY5AQEp05wmI8kCjnaqHt3pLK1kN94Snzzj5kogllofQnGKOQ6SkQv
8IuQkcpf8O2aenwzned6wkuWWJZnWkwxBEhz8R3xBXdmAa3fgTOLNxiPyHCmzs8X
0KlfhW4dpjpKpINpRNYGH1fflCAR2ukiElSIruIncGsYhHjSfQXNE57uzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxXWP32l6X+H4u6NkwfYSRcx1DWMB8GA1UdIwQY
MBaAFGGc+angtkYa2DOHWsEWj4kj/VULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNmJmYWItZWFjNi00YTQyLTg4NzIt
MTRhZmFlOTEzMzZkLzEvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9kNmJmYWItZWFjNi00YTQyLTg4NzItMTRhZmFlOTEzMzZk
LzEvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqF3hfD5p
ZOZTeBw3j8hHviOKqfAzfUwVTZC3v/Sh1FWa1ryZ0xuyS641Wge4eooyMpfL8JLm
v2ymFTjiDU8K9LVaYh1l4qIaS9AdLMmeeDbutPIzJQMiMXnqAL7gIhyJYv2Lt1OM
MEAniG9KMkMGNohk57ZqXmT0ifuJQZqT5fETE5qudS/RfNU+3p49MSjzzU2KdWdJ
cj2sv5avtNDPphpWcxPjmFYfLb2GV+dZz1zz1pca2DLxVNjg4eG5fpoTbYNo6S/8
b66NkYNv6NZGZxZNhj/f7c1NffAHlxLdQVWWxxuOBXzKC3SwSa12d5LI4XW8zJRA
jsu5IOKoquwvGQ==
-----END CERTIFICATE-----
Generated at Thu May 1 14:53:52 2025 by rpki-client