Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/yGf0ZiTUgb6p0bqL6wwBicm0S14.mft
File: yGf0ZiTUgb6p0bqL6wwBicm0S14.mft (raw, json)
Hash identifier: r08Za4Z+culTmVx1QLV8niNv2PTo5OCD/728RgzwdUg=
Subject key identifier: 1C:5B:19:AD:A3:9C:83:22:23:15:A3:37:14:A4:2D:DC:24:CE:7C:7F
Authority key identifier: C8:67:F4:66:24:D4:81:BE:A9:D1:BA:8B:EB:0C:01:89:C9:B4:4B:5E
Certificate issuer: /CN=c867f46624d481bea9d1ba8beb0c0189c9b44b5e
Certificate serial: 019584A68E16697605E421BB5ACFFDA351C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGf0ZiTUgb6p0bqL6wwBicm0S14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/yGf0ZiTUgb6p0bqL6wwBicm0S14.mft
Manifest number: 07D8
Signing time: Tue 11 Mar 2025 10:01:02 +0000
Manifest this update: Tue 11 Mar 2025 10:01:02 +0000
Manifest next update: Wed 12 Mar 2025 10:01:02 +0000
Files and hashes: 1: 4lb8MH7GOJnctq74IYYrPz2MrXI.roa (hash: j6r/F3I87KdB4Ik/hzhNmN4mf0uzrhpeKqetEtToc9c=)
2: yGf0ZiTUgb6p0bqL6wwBicm0S14.crl (hash: 5qF6TKSnMnJfpuE4UoV2Q4UCbtcCK34zEWdUuqiIFgc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:84:a6:8e:16:69:76:05:e4:21:bb:5a:cf:fd:a3:51:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c867f46624d481bea9d1ba8beb0c0189c9b44b5e
Validity
Not Before: Mar 11 10:01:02 2025 GMT
Not After : Mar 12 10:01:02 2025 GMT
Subject: CN=1c5b19ada39c83222315a33714a42ddc24ce7c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:10:22:5f:a4:42:68:1d:e8:16:a8:13:54:
7a:35:d6:35:25:eb:22:6f:89:79:33:11:86:16:3e:
1a:9d:7a:6e:70:bf:5e:9b:08:f3:61:32:43:ad:d1:
03:fb:a9:a2:73:42:af:f3:bf:0d:2b:11:f0:8b:98:
a6:ec:df:f5:49:ec:da:fb:58:7e:f5:82:b8:67:1a:
b4:c1:c5:ab:9b:1a:96:85:24:44:eb:5e:0c:f9:1f:
fb:98:70:5c:23:ce:25:5d:f9:a6:3d:04:06:c6:ae:
65:1a:d8:15:14:7f:96:0d:00:01:e4:b5:68:e0:c2:
aa:7b:ed:3f:af:42:cd:71:1e:c3:6f:9e:5b:a0:77:
b2:c3:6a:22:e9:90:4a:07:f3:23:d0:fd:3a:59:b7:
2e:be:f5:67:f3:f0:16:b0:23:cc:26:60:16:c2:e0:
34:5e:39:da:77:6f:43:97:ca:55:9f:4a:21:88:b1:
7f:66:78:57:b6:a1:75:15:2b:f7:a4:8b:aa:3c:cf:
71:a4:ce:f8:bf:a9:06:15:39:c5:07:8a:e3:25:81:
84:fe:6f:6d:48:6c:2a:22:3c:3c:22:38:06:e0:5b:
e8:ac:f4:20:41:44:ef:d6:51:cf:d4:c7:cb:ae:b4:
ff:fb:af:36:06:e5:fa:09:09:d4:26:2b:ae:ee:61:
63:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5B:19:AD:A3:9C:83:22:23:15:A3:37:14:A4:2D:DC:24:CE:7C:7F
X509v3 Authority Key Identifier:
keyid:C8:67:F4:66:24:D4:81:BE:A9:D1:BA:8B:EB:0C:01:89:C9:B4:4B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGf0ZiTUgb6p0bqL6wwBicm0S14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/yGf0ZiTUgb6p0bqL6wwBicm0S14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/yGf0ZiTUgb6p0bqL6wwBicm0S14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:af:40:c3:66:67:b8:36:3f:8c:de:64:58:f5:fd:56:39:12:
29:ca:07:f2:32:df:d0:20:c8:87:d5:97:e1:38:97:bf:7f:65:
10:58:57:ac:0e:04:16:b8:4e:07:7d:9e:ba:39:ef:3c:bd:fd:
af:c0:10:c0:78:50:38:0d:f8:9d:11:05:f0:e6:8a:c6:46:a2:
a5:9f:49:42:5e:83:4d:97:e4:58:15:88:87:07:f1:df:47:33:
a1:ec:7b:40:c7:1f:fd:d3:e4:d7:82:62:89:74:a9:fb:62:d0:
cd:c8:4b:d3:25:2d:98:a7:08:dd:2d:5b:c9:3a:e4:75:b5:c5:
1e:f9:2a:55:07:43:d6:90:a9:11:3e:48:7c:c0:5e:73:38:6d:
51:3a:f2:ae:ec:33:f5:c8:86:12:ab:a7:3a:c6:0b:16:f8:89:
e6:92:9e:c9:32:de:55:41:5b:88:5a:4c:95:c9:a3:07:4a:8a:
80:12:99:02:a2:9f:8d:18:4b:a2:63:da:28:ed:17:89:fc:71:
ad:93:9a:0b:44:ba:c1:70:d5:2d:a4:17:ca:ed:3c:a5:d3:f8:
35:c4:ba:f8:f3:a2:7a:13:2b:2c:3a:b2:e0:7f:9f:bc:bf:02:
8a:73:9d:5b:6a:17:c4:de:3b:19:23:93:ec:f0:c7:d2:91:df:
1f:80:26:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWEpo4WaXYF5CG7Ws/9o1HJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NjdmNDY2MjRkNDgxYmVhOWQxYmE4YmViMGMwMTg5Yzli
NDRiNWUwHhcNMjUwMzExMTAwMTAyWhcNMjUwMzEyMTAwMTAyWjAzMTEwLwYDVQQD
EygxYzViMTlhZGEzOWM4MzIyMjMxNWEzMzcxNGE0MmRkYzI0Y2U3YzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSUQIl+kQmgd6BaoE1R6NdY1Jesi
b4l5MxGGFj4anXpucL9emwjzYTJDrdED+6mic0Kv878NKxHwi5im7N/1Seza+1h+
9YK4Zxq0wcWrmxqWhSRE614M+R/7mHBcI84lXfmmPQQGxq5lGtgVFH+WDQAB5LVo
4MKqe+0/r0LNcR7Db55boHeyw2oi6ZBKB/Mj0P06WbcuvvVn8/AWsCPMJmAWwuA0
Xjnad29Dl8pVn0ohiLF/ZnhXtqF1FSv3pIuqPM9xpM74v6kGFTnFB4rjJYGE/m9t
SGwqIjw8IjgG4FvorPQgQUTv1lHP1MfLrrT/+682BuX6CQnUJiuu7mFjKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxbGa2jnIMiIxWjNxSkLdwkznx/MB8GA1UdIwQY
MBaAFMhn9GYk1IG+qdG6i+sMAYnJtEteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUdmMFppVFVnYjZwMGJxTDZ3d0JpY20wUzE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9mNTBiOTYtNjMwZS00Mzc5LTk1Y2Et
NzFhZWRiYWVmNDhiLzEveUdmMFppVFVnYjZwMGJxTDZ3d0JpY20wUzE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9mNTBiOTYtNjMwZS00Mzc5LTk1Y2EtNzFhZWRiYWVmNDhi
LzEveUdmMFppVFVnYjZwMGJxTDZ3d0JpY20wUzE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX69Aw2Zn
uDY/jN5kWPX9VjkSKcoH8jLf0CDIh9WX4TiXv39lEFhXrA4EFrhOB32eujnvPL39
r8AQwHhQOA34nREF8OaKxkaipZ9JQl6DTZfkWBWIhwfx30czoex7QMcf/dPk14Ji
iXSp+2LQzchL0yUtmKcI3S1byTrkdbXFHvkqVQdD1pCpET5IfMBeczhtUTryruwz
9ciGEqunOsYLFviJ5pKeyTLeVUFbiFpMlcmjB0qKgBKZAqKfjRhLomPaKO0Xifxx
rZOaC0S6wXDVLaQXyu08pdP4NcS6+POiehMrLDqy4H+fvL8CinOdW2oXxN47GSOT
7PDH0pHfH4Amng==
-----END CERTIFICATE-----
Generated at Tue Apr 22 22:36:51 2025 by rpki-client