Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3cf1a2-eac6-4769-b5c8-a7465edbefcd/1/YA4hJVBpTniBGT7RL6pS3Eaybbw.mft
File: YA4hJVBpTniBGT7RL6pS3Eaybbw.mft (raw, json)
Hash identifier: gWmptniDvYyYgyqgQglBwSMDD8fi1TywzTRWkhTnqVg=
Subject key identifier: 49:B4:E2:C0:62:C6:D3:6D:53:5B:7E:A0:E4:15:74:50:CE:3E:54:32
Authority key identifier: 60:0E:21:25:50:69:4E:78:81:19:3E:D1:2F:AA:52:DC:46:B2:6D:BC
Certificate issuer: /CN=600e212550694e7881193ed12faa52dc46b26dbc
Certificate serial: 0194BC3C404346534AF289FFC46B7F22DFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA4hJVBpTniBGT7RL6pS3Eaybbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3cf1a2-eac6-4769-b5c8-a7465edbefcd/1/YA4hJVBpTniBGT7RL6pS3Eaybbw.mft
Manifest number: 0791
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: YA4hJVBpTniBGT7RL6pS3Eaybbw.crl (hash: 2To6TE1ocEP/61VSL3qsaqQJ3HauGiSuiA7PP8mJicA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:40:43:46:53:4a:f2:89:ff:c4:6b:7f:22:df:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600e212550694e7881193ed12faa52dc46b26dbc
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=49b4e2c062c6d36d535b7ea0e4157450ce3e5432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1b:01:4c:06:e3:86:c3:ea:f9:94:e2:50:61:
26:63:a6:b5:35:34:01:99:23:4c:4d:75:53:52:6f:
6b:42:8a:1c:33:10:f7:ad:60:6d:33:77:f8:de:e0:
17:71:4f:46:2c:e1:bf:05:9f:29:3d:fe:12:81:07:
87:9e:16:b8:72:41:89:cb:6f:5d:8b:02:ad:f0:1c:
93:e0:2e:8c:1c:ff:15:d5:a8:92:cf:71:bf:32:68:
f8:0e:58:ec:fc:ce:4f:a4:35:e3:3c:05:57:0a:6a:
e6:c5:94:98:4e:7f:89:72:48:8d:00:03:41:c9:29:
53:26:e5:35:b5:09:05:61:8e:0b:a5:ba:b9:3b:c6:
45:4a:ad:97:71:56:2b:df:e6:44:13:a4:0e:00:57:
4e:59:c2:60:7a:e5:b2:23:e1:ff:20:5a:0d:50:c2:
08:42:87:ab:23:5f:ad:16:f9:3f:cd:a3:93:b5:9b:
f9:90:f4:09:f3:13:11:ab:41:d7:5b:1d:a6:81:7b:
c3:cf:02:d6:c5:39:35:24:eb:b2:20:5a:ae:e8:ee:
2b:fd:6d:c1:63:d7:26:cb:41:7f:14:b4:58:df:00:
55:b4:57:e1:28:52:c9:74:d8:cf:98:d3:ce:44:8a:
27:b9:3c:ff:5d:16:09:a7:8f:34:a7:4c:10:a2:c2:
48:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B4:E2:C0:62:C6:D3:6D:53:5B:7E:A0:E4:15:74:50:CE:3E:54:32
X509v3 Authority Key Identifier:
keyid:60:0E:21:25:50:69:4E:78:81:19:3E:D1:2F:AA:52:DC:46:B2:6D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA4hJVBpTniBGT7RL6pS3Eaybbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3cf1a2-eac6-4769-b5c8-a7465edbefcd/1/YA4hJVBpTniBGT7RL6pS3Eaybbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3cf1a2-eac6-4769-b5c8-a7465edbefcd/1/YA4hJVBpTniBGT7RL6pS3Eaybbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:de:59:23:2c:a8:4d:eb:2f:1f:88:1a:38:39:04:27:7d:7e:
33:f6:b8:1b:70:bb:02:c0:51:cb:3f:70:ca:ae:7e:e6:cc:8f:
5e:78:b7:01:c9:6b:42:7e:ed:b1:10:33:36:04:c7:7a:6d:76:
dc:7a:6c:b4:da:57:df:d3:05:a0:4d:fe:ba:f8:3e:7f:b1:16:
74:57:50:92:af:b1:e8:4a:2a:54:e0:54:7a:a3:af:4c:d2:cf:
43:43:4c:0d:61:07:c0:03:5b:31:60:c6:94:99:17:fd:e7:f0:
14:cf:d6:75:85:8b:11:16:fb:9c:84:29:97:c2:c5:5a:eb:a7:
2c:9c:87:7b:a6:1d:16:84:e2:79:3d:c5:65:c5:32:11:09:e0:
e7:68:8f:8b:db:db:91:7e:62:ad:51:60:42:74:44:dc:2a:02:
51:9a:3f:7b:65:98:6b:bd:1f:a9:90:b5:9c:81:d7:47:89:be:
b5:91:bc:cd:07:c3:47:2e:e7:ad:b6:d4:d9:6a:10:7b:9a:cb:
15:54:83:a6:10:ed:80:de:98:7c:2b:e9:67:36:04:c0:58:fb:
9b:67:f2:f8:99:cc:02:34:8b:0f:a1:84:c1:cc:99:d8:6d:43:
42:fb:62:47:2c:f5:74:d5:e1:be:10:72:20:ae:e9:0e:6a:a4:
f0:fd:d2:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PEBDRlNK8on/xGt/It/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMGUyMTI1NTA2OTRlNzg4MTE5M2VkMTJmYWE1MmRjNDZi
MjZkYmMwHhcNMjUwMTMxMTIwMDUyWhcNMjUwMjAxMTIwMDUyWjAzMTEwLwYDVQQD
Eyg0OWI0ZTJjMDYyYzZkMzZkNTM1YjdlYTBlNDE1NzQ1MGNlM2U1NDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBsBTAbjhsPq+ZTiUGEmY6a1NTQB
mSNMTXVTUm9rQoocMxD3rWBtM3f43uAXcU9GLOG/BZ8pPf4SgQeHnha4ckGJy29d
iwKt8ByT4C6MHP8V1aiSz3G/Mmj4Dljs/M5PpDXjPAVXCmrmxZSYTn+JckiNAANB
ySlTJuU1tQkFYY4Lpbq5O8ZFSq2XcVYr3+ZEE6QOAFdOWcJgeuWyI+H/IFoNUMII
QoerI1+tFvk/zaOTtZv5kPQJ8xMRq0HXWx2mgXvDzwLWxTk1JOuyIFqu6O4r/W3B
Y9cmy0F/FLRY3wBVtFfhKFLJdNjPmNPORIonuTz/XRYJp480p0wQosJI5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEm04sBixtNtU1t+oOQVdFDOPlQyMB8GA1UdIwQY
MBaAFGAOISVQaU54gRk+0S+qUtxGsm28MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUE0aEpWQnBUbmlCR1Q3Ukw2cFMzRWF5YmJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8zY2YxYTItZWFjNi00NzY5LWI1Yzgt
YTc0NjVlZGJlZmNkLzEvWUE0aEpWQnBUbmlCR1Q3Ukw2cFMzRWF5YmJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8zY2YxYTItZWFjNi00NzY5LWI1YzgtYTc0NjVlZGJlZmNk
LzEvWUE0aEpWQnBUbmlCR1Q3Ukw2cFMzRWF5YmJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn95ZIyyo
TesvH4gaODkEJ31+M/a4G3C7AsBRyz9wyq5+5syPXni3AclrQn7tsRAzNgTHem12
3HpstNpX39MFoE3+uvg+f7EWdFdQkq+x6EoqVOBUeqOvTNLPQ0NMDWEHwANbMWDG
lJkX/efwFM/WdYWLERb7nIQpl8LFWuunLJyHe6YdFoTieT3FZcUyEQng52iPi9vb
kX5irVFgQnRE3CoCUZo/e2WYa70fqZC1nIHXR4m+tZG8zQfDRy7nrbbU2WoQe5rL
FVSDphDtgN6YfCvpZzYEwFj7m2fy+JnMAjSLD6GEwcyZ2G1DQvtiRyz1dNXhvhBy
IK7pDmqk8P3SxQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:11:26 2025 by rpki-client