Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
File: YxkpXTrafm6zKYRJYcqhACyqTYY.mft (raw, json)
Hash identifier: MxIjxpjVhgvx3YUTzyFHP9kklLRwWpyTLjuW8QCyCrc=
Subject key identifier: 0C:A8:F8:43:27:B9:AB:2B:3C:63:A5:A6:20:0E:2D:0E:78:DB:91:4B
Authority key identifier: 63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86
Certificate issuer: /CN=6319295d3ada7e6eb329844961caa1002caa4d86
Certificate serial: 019515B63A2CE23D1FF57149F1F4411AF6BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
Manifest number: 0403
Signing time: Mon 17 Feb 2025 21:00:18 +0000
Manifest this update: Mon 17 Feb 2025 21:00:18 +0000
Manifest next update: Tue 18 Feb 2025 21:00:18 +0000
Files and hashes: 1: 86GrooClUl71gkQpid-FncZdZKU.roa (hash: zCT8Hn2EfMRZJ+CRruBga86mHz3WUzz8AipAIgNPJEo=)
2: YxkpXTrafm6zKYRJYcqhACyqTYY.crl (hash: +3KWDfd5TJRB5f1T8FGC8Fojommod2zm4QaxPPvv01I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:15:b6:3a:2c:e2:3d:1f:f5:71:49:f1:f4:41:1a:f6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6319295d3ada7e6eb329844961caa1002caa4d86
Validity
Not Before: Feb 17 21:00:18 2025 GMT
Not After : Feb 18 21:00:18 2025 GMT
Subject: CN=0ca8f84327b9ab2b3c63a5a6200e2d0e78db914b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:eb:f2:11:82:25:30:29:f3:ca:0a:1c:32:be:
8f:92:aa:55:50:77:fd:8b:52:38:21:2e:45:3f:3d:
2e:b9:24:9c:66:c1:64:f9:53:52:46:6a:08:8d:32:
a5:97:47:b8:9c:b4:e5:68:71:3e:dd:b1:f7:6d:a6:
60:8d:05:68:98:7a:6f:56:2b:85:c7:0f:5a:d6:53:
57:9f:aa:63:13:2d:7b:9a:97:a9:73:0b:20:a7:89:
0c:4f:ab:da:d3:ef:0b:80:7f:0a:52:0f:c9:d4:5c:
48:81:1b:5a:4b:f0:0b:69:eb:cb:27:94:d1:ff:62:
95:a0:35:03:63:07:10:35:68:ca:da:0d:e2:47:ad:
c7:d9:7f:67:30:21:98:70:e7:14:a1:b0:33:8d:aa:
d8:1a:32:8d:c9:1a:e6:69:a1:ca:f7:d4:9b:4d:7d:
86:aa:28:d4:2e:2c:5f:d9:3a:c9:c0:09:5a:d4:10:
ba:96:9b:7b:c5:48:92:2c:0f:4d:5c:fb:b3:ab:ce:
d5:29:7a:5f:28:b0:d2:d5:4b:a4:5a:80:e2:e9:6e:
44:88:00:e5:e9:e6:63:df:24:50:6e:00:dc:41:1e:
05:4b:39:40:b5:42:85:8e:63:52:5d:e4:47:18:a5:
49:12:43:cb:a9:f5:de:7a:2b:df:1d:7f:77:2e:37:
89:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A8:F8:43:27:B9:AB:2B:3C:63:A5:A6:20:0E:2D:0E:78:DB:91:4B
X509v3 Authority Key Identifier:
keyid:63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:54:ad:4a:4a:c7:37:32:d0:18:51:29:01:4b:8d:7c:53:41:
ff:bb:eb:34:b7:68:4a:67:fb:fb:73:e6:48:fe:6b:46:31:7e:
72:d8:7a:a7:c9:74:99:f6:ee:14:7f:8e:43:08:c6:52:38:0b:
fe:35:1c:d9:85:cf:e5:ff:b8:ae:a5:f0:03:9e:11:47:09:c4:
f7:6d:a0:95:e4:c5:08:83:92:5b:4c:ca:f4:f0:6c:a1:d2:1f:
51:1b:fd:61:ae:04:7f:98:7e:eb:9c:aa:6a:32:31:eb:5e:8b:
d6:96:d2:d9:ab:88:d4:1c:09:54:4a:b0:10:ee:39:ae:81:a7:
a6:e7:c8:a4:f3:18:6a:dd:d4:35:50:7c:0a:0f:7e:08:5f:cd:
5a:11:f6:9f:e1:5c:72:4b:68:3a:a6:64:bb:83:0e:26:6f:5d:
32:d3:b9:55:a8:74:ec:4c:96:50:5d:05:90:37:01:20:9a:56:
a4:85:d9:e9:15:0d:f3:04:b5:7a:a4:48:37:06:80:fa:2e:88:
16:d8:ea:64:e9:7d:5f:f0:f1:dc:1e:86:88:40:da:68:81:92:
7a:a7:2e:e6:a8:28:92:03:b5:d5:50:75:28:5e:ed:50:78:b1:
15:4e:a2:27:c7:b3:78:7d:37:29:a2:6c:16:54:3d:a9:dd:de:
19:08:7e:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUVtjos4j0f9XFJ8fRBGva9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMTkyOTVkM2FkYTdlNmViMzI5ODQ0OTYxY2FhMTAwMmNh
YTRkODYwHhcNMjUwMjE3MjEwMDE4WhcNMjUwMjE4MjEwMDE4WjAzMTEwLwYDVQQD
EygwY2E4Zjg0MzI3YjlhYjJiM2M2M2E1YTYyMDBlMmQwZTc4ZGI5MTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuvyEYIlMCnzygocMr6PkqpVUHf9
i1I4IS5FPz0uuSScZsFk+VNSRmoIjTKll0e4nLTlaHE+3bH3baZgjQVomHpvViuF
xw9a1lNXn6pjEy17mpepcwsgp4kMT6va0+8LgH8KUg/J1FxIgRtaS/ALaevLJ5TR
/2KVoDUDYwcQNWjK2g3iR63H2X9nMCGYcOcUobAzjarYGjKNyRrmaaHK99SbTX2G
qijULixf2TrJwAla1BC6lpt7xUiSLA9NXPuzq87VKXpfKLDS1UukWoDi6W5EiADl
6eZj3yRQbgDcQR4FSzlAtUKFjmNSXeRHGKVJEkPLqfXeeivfHX93LjeJ+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyo+EMnuasrPGOlpiAOLQ5425FLMB8GA1UdIwQY
MBaAFGMZKV062n5usymESWHKoQAsqk2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXhrcFhUcmFmbTZ6S1lSSlljcWhBQ3lxVFlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8yNmNjOTItOGJmNy00OGUwLTkzN2Et
N2U0ZTJmOGI1YjE2LzEvWXhrcFhUcmFmbTZ6S1lSSlljcWhBQ3lxVFlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8yNmNjOTItOGJmNy00OGUwLTkzN2EtN2U0ZTJmOGI1YjE2
LzEvWXhrcFhUcmFmbTZ6S1lSSlljcWhBQ3lxVFlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFStSkrH
NzLQGFEpAUuNfFNB/7vrNLdoSmf7+3PmSP5rRjF+cth6p8l0mfbuFH+OQwjGUjgL
/jUc2YXP5f+4rqXwA54RRwnE922gleTFCIOSW0zK9PBsodIfURv9Ya4Ef5h+65yq
ajIx616L1pbS2auI1BwJVEqwEO45roGnpufIpPMYat3UNVB8Cg9+CF/NWhH2n+Fc
cktoOqZku4MOJm9dMtO5Vah07EyWUF0FkDcBIJpWpIXZ6RUN8wS1eqRINwaA+i6I
FtjqZOl9X/Dx3B6GiEDaaIGSeqcu5qgokgO11VB1KF7tUHixFU6iJ8ezeH03KaJs
FlQ9qd3eGQh+9Q==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:10 2025 by rpki-client