Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8c46b4-7ac4-4e5e-a2ac-807d7a2755ac/1/1-YwfCgITInZpWjfg2PorQ-NL938.mft
File: 1-YwfCgITInZpWjfg2PorQ-NL938.mft (raw, json)
Hash identifier: RbpymU6D9JQBuHR8TxReTBAokkXkiQDeOWHjMbJEohQ=
Subject key identifier: D6:25:CC:CE:C8:9E:05:BF:4A:73:98:88:9B:22:AE:1B:05:5D:5B:A6
Authority key identifier: F9:8C:1F:0A:02:13:22:76:69:5A:37:E0:D8:FA:2B:43:E3:4B:F7:7F
Certificate issuer: /CN=f98c1f0a02132276695a37e0d8fa2b43e34bf77f
Certificate serial: 0193F0D093E069AA045092463E48A7B72CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YwfCgITInZpWjfg2PorQ-NL938.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8c46b4-7ac4-4e5e-a2ac-807d7a2755ac/1/1-YwfCgITInZpWjfg2PorQ-NL938.mft
Manifest number: 0285
Signing time: Mon 23 Dec 2024 00:00:21 +0000
Manifest this update: Mon 23 Dec 2024 00:00:21 +0000
Manifest next update: Tue 24 Dec 2024 00:00:21 +0000
Files and hashes: 1: 1-YwfCgITInZpWjfg2PorQ-NL938.crl (hash: FzVelHKXg7MPvyf+Ss2D5BctkfovOZlnDQn9R9Bn13c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f0:d0:93:e0:69:aa:04:50:92:46:3e:48:a7:b7:2c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98c1f0a02132276695a37e0d8fa2b43e34bf77f
Validity
Not Before: Dec 23 00:00:21 2024 GMT
Not After : Dec 24 00:00:21 2024 GMT
Subject: CN=d625cccec89e05bf4a7398889b22ae1b055d5ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:06:43:7b:a3:3e:71:0b:20:26:59:d5:41:33:
0f:e1:64:0b:a0:ad:2a:89:59:84:01:93:5d:bf:42:
be:4a:69:29:40:00:46:81:2c:e7:73:53:a5:85:c3:
f7:b5:05:64:b6:4e:12:0c:42:bf:86:16:8d:d3:e2:
b6:7e:8a:29:bd:f7:f9:d5:4c:dc:13:75:7c:d1:89:
bb:ab:c0:ea:38:18:09:e3:34:58:ce:02:1c:1f:0a:
e8:e5:da:56:46:88:6e:c2:5f:38:8c:31:4e:0c:4c:
1f:06:8e:41:30:7b:80:41:80:88:af:15:08:cb:99:
73:93:d3:8a:df:2f:f8:ab:c2:0b:de:d4:50:89:44:
5d:2d:85:dc:2e:70:3c:88:18:68:43:65:9a:1c:d6:
d5:82:9d:84:b8:ea:50:1e:23:17:4a:7a:ca:db:64:
d4:74:c9:67:f6:1e:1d:15:68:f9:07:47:28:cf:78:
47:09:65:cf:76:20:8c:cc:6c:1d:5b:96:79:96:39:
71:97:58:14:9c:19:52:58:6c:b0:aa:8c:6d:a6:1d:
06:6c:5f:cc:0f:ac:08:97:af:3d:7f:f6:8d:33:90:
c1:80:a6:fa:c5:a7:94:fe:17:bc:eb:6a:06:2a:0a:
23:aa:ca:70:5f:36:6d:d6:37:11:9e:2a:37:47:c0:
ec:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:25:CC:CE:C8:9E:05:BF:4A:73:98:88:9B:22:AE:1B:05:5D:5B:A6
X509v3 Authority Key Identifier:
keyid:F9:8C:1F:0A:02:13:22:76:69:5A:37:E0:D8:FA:2B:43:E3:4B:F7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YwfCgITInZpWjfg2PorQ-NL938.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8c46b4-7ac4-4e5e-a2ac-807d7a2755ac/1/1-YwfCgITInZpWjfg2PorQ-NL938.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8c46b4-7ac4-4e5e-a2ac-807d7a2755ac/1/1-YwfCgITInZpWjfg2PorQ-NL938.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:62:2c:92:3c:29:04:95:4e:ed:ce:34:30:9e:19:9d:82:f4:
6c:ee:72:65:06:23:9f:e1:6d:98:42:1b:b4:a1:0d:c4:6e:fa:
06:4b:37:b2:52:a5:77:14:b5:3a:a7:ec:01:79:e8:4f:68:91:
64:e7:65:b3:72:ce:24:85:1e:ab:9c:bb:aa:a9:6b:9d:19:25:
c4:ad:2d:ae:1d:44:b8:27:d9:d0:6e:09:76:0e:78:79:80:ce:
51:13:2d:b6:6c:ab:0c:2f:12:4b:20:c3:3e:f2:b4:d0:0f:b9:
ed:0c:ab:d3:54:f9:3a:c9:a3:14:d4:2a:94:c6:e3:0a:79:df:
20:1f:fe:29:fe:5f:b1:61:2d:10:61:c4:00:28:6f:59:4e:7d:
01:1f:0f:a6:34:c2:99:32:53:e5:f5:db:33:0c:ff:13:f4:e8:
a9:04:ce:28:03:01:e8:80:fb:9c:63:27:23:ab:b4:46:38:66:
e2:cb:cb:b0:f6:4c:66:00:01:fa:15:9b:80:ee:68:fd:0b:1d:
7d:1d:d0:6d:52:a3:f5:0f:ad:2e:95:8d:0c:68:71:d6:b6:92:
76:9d:97:bc:93:43:9d:a2:d1:98:c8:e8:39:e8:7d:50:4e:df:
c2:3d:3d:9b:1e:86:6c:12:6a:b0:93:81:89:c9:c5:b4:58:23:
e8:6a:18:d2
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZPw0JPgaaoEUJJGPkintyz0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OGMxZjBhMDIxMzIyNzY2OTVhMzdlMGQ4ZmEyYjQzZTM0
YmY3N2YwHhcNMjQxMjIzMDAwMDIxWhcNMjQxMjI0MDAwMDIxWjAzMTEwLwYDVQQD
EyhkNjI1Y2NjZWM4OWUwNWJmNGE3Mzk4ODg5YjIyYWUxYjA1NWQ1YmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAZDe6M+cQsgJlnVQTMP4WQLoK0q
iVmEAZNdv0K+SmkpQABGgSznc1OlhcP3tQVktk4SDEK/hhaN0+K2foopvff51Uzc
E3V80Ym7q8DqOBgJ4zRYzgIcHwro5dpWRohuwl84jDFODEwfBo5BMHuAQYCIrxUI
y5lzk9OK3y/4q8IL3tRQiURdLYXcLnA8iBhoQ2WaHNbVgp2EuOpQHiMXSnrK22TU
dMln9h4dFWj5B0coz3hHCWXPdiCMzGwdW5Z5ljlxl1gUnBlSWGywqoxtph0GbF/M
D6wIl689f/aNM5DBgKb6xaeU/he862oGKgojqspwXzZt1jcRnio3R8Ds8wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNYlzM7IngW/SnOYiJsirhsFXVumMB8GA1UdIwQY
MBaAFPmMHwoCEyJ2aVo34Nj6K0PjS/d/MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Zd2ZDZ0lUSW5acFdqZmcyUG9yUS1OTDkzOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYvOGM0NmI0LTdhYzQtNGU1ZS1hMmFj
LTgwN2Q3YTI3NTVhYy8xLzEtWXdmQ2dJVEluWnBXamZnMlBvclEtTkw5MzgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzFmLzhjNDZiNC03YWM0LTRlNWUtYTJhYy04MDdkN2EyNzU1
YWMvMS8xLVl3ZkNnSVRJblpwV2pmZzJQb3JRLU5MOTM4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAumIs
kjwpBJVO7c40MJ4ZnYL0bO5yZQYjn+FtmEIbtKENxG76Bks3slKldxS1OqfsAXno
T2iRZOdls3LOJIUeq5y7qqlrnRklxK0trh1EuCfZ0G4Jdg54eYDOURMttmyrDC8S
SyDDPvK00A+57Qyr01T5OsmjFNQqlMbjCnnfIB/+Kf5fsWEtEGHEAChvWU59AR8P
pjTCmTJT5fXbMwz/E/ToqQTOKAMB6ID7nGMnI6u0Rjhm4svLsPZMZgAB+hWbgO5o
/QsdfR3QbVKj9Q+tLpWNDGhx1raSdp2XvJNDnaLRmMjoOeh9UE7fwj09mx6GbBJq
sJOBicnFtFgj6GoY0g==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:29:38 2025 by rpki-client