Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/71b461-4bd3-4712-8e52-2d54dc4fddf5/1/Y8v-3qfCc0l54kgtb2esxNppwjE.mft
File: Y8v-3qfCc0l54kgtb2esxNppwjE.mft (raw, json)
Hash identifier: Q7OB6zTXH6O923mZhqkgz8Xgyu4QquLnyYrjK2yVdFY=
Subject key identifier: 5A:B1:A4:A6:41:39:E4:8D:9E:9B:82:C7:1E:D7:28:B7:0A:94:FF:30
Authority key identifier: 63:CB:FE:DE:A7:C2:73:49:79:E2:48:2D:6F:67:AC:C4:DA:69:C2:31
Certificate issuer: /CN=63cbfedea7c2734979e2482d6f67acc4da69c231
Certificate serial: 019518804660ED8D6DDEA4283DB648582A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8v-3qfCc0l54kgtb2esxNppwjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/71b461-4bd3-4712-8e52-2d54dc4fddf5/1/Y8v-3qfCc0l54kgtb2esxNppwjE.mft
Manifest number: 20
Signing time: Tue 18 Feb 2025 10:00:14 +0000
Manifest this update: Tue 18 Feb 2025 10:00:14 +0000
Manifest next update: Wed 19 Feb 2025 10:00:14 +0000
Files and hashes: 1: Y8v-3qfCc0l54kgtb2esxNppwjE.crl (hash: PfSTGqiSr1M/jYNjZaLqV1TOBZpdHXCSYeHJ7Lk809M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:80:46:60:ed:8d:6d:de:a4:28:3d:b6:48:58:2a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63cbfedea7c2734979e2482d6f67acc4da69c231
Validity
Not Before: Feb 18 10:00:14 2025 GMT
Not After : Feb 19 10:00:14 2025 GMT
Subject: CN=5ab1a4a64139e48d9e9b82c71ed728b70a94ff30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:69:43:e2:6a:e9:ab:11:2c:77:97:2e:94:68:
b7:ca:9e:47:4e:b6:77:dd:70:c3:ac:14:9a:8c:42:
ee:59:52:2a:5d:82:7f:94:21:52:96:f8:8f:3b:f0:
14:95:b8:9c:a8:0e:a8:27:9f:73:3e:e9:5f:1e:ad:
a5:cc:c7:dc:d7:3a:65:f9:bf:93:a1:86:e2:b3:da:
33:52:41:3b:bf:6f:03:fa:94:a7:37:21:f8:96:0d:
48:a3:1d:64:a9:03:e4:d9:04:ea:b9:2c:d2:bb:74:
13:dc:31:00:89:b6:96:f0:2f:de:43:83:0b:34:27:
5a:b4:b5:3c:cb:65:c2:8b:94:a8:c6:ed:2a:1e:52:
19:6b:39:5d:8d:56:9c:a1:24:bf:33:04:df:ac:f8:
d4:9a:27:c7:37:fc:17:49:8f:0a:9c:be:c4:1e:77:
69:e1:da:04:d9:6c:68:f7:50:07:c2:b1:41:1a:78:
78:8a:8b:53:f1:e1:c7:7c:2e:78:14:c0:89:fb:b7:
7d:cd:25:73:9c:81:aa:93:65:c1:f7:17:cc:46:fe:
c5:9d:54:41:d2:5a:d6:de:1f:c0:34:e9:59:dd:65:
22:69:94:56:b5:68:a7:67:d5:a0:cf:b1:9b:38:f2:
7f:45:23:16:ec:cd:e8:c5:84:97:03:52:c7:ee:05:
43:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B1:A4:A6:41:39:E4:8D:9E:9B:82:C7:1E:D7:28:B7:0A:94:FF:30
X509v3 Authority Key Identifier:
keyid:63:CB:FE:DE:A7:C2:73:49:79:E2:48:2D:6F:67:AC:C4:DA:69:C2:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8v-3qfCc0l54kgtb2esxNppwjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/71b461-4bd3-4712-8e52-2d54dc4fddf5/1/Y8v-3qfCc0l54kgtb2esxNppwjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/71b461-4bd3-4712-8e52-2d54dc4fddf5/1/Y8v-3qfCc0l54kgtb2esxNppwjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:15:bb:52:9a:cc:55:96:33:97:77:3d:2a:ed:88:94:00:07:
3b:58:89:ec:89:b7:5d:f3:fa:69:80:1d:ce:47:c3:21:1b:f5:
2e:40:eb:08:28:5e:e9:1a:4e:0e:38:55:92:4b:ac:2f:2c:d3:
dd:52:7f:39:d2:e8:ec:32:1e:d0:d6:23:93:7a:a5:74:42:4d:
53:67:ed:00:ab:02:b7:e4:15:45:31:a5:91:6d:14:7d:98:b0:
33:d7:36:66:8b:6d:15:29:f1:05:db:19:96:ce:1a:2e:58:ba:
34:d7:89:47:9f:7e:c8:57:a7:fc:19:fe:1d:d5:75:87:92:60:
eb:54:19:07:a7:b8:0e:f4:97:43:93:e3:94:c5:ac:02:0c:45:
22:e3:9d:7b:06:90:ec:27:63:87:ad:5a:10:2a:e4:d0:f2:80:
f4:05:b5:08:62:54:16:03:bb:1d:08:df:d2:0a:a0:79:27:8a:
3a:43:12:73:f9:1c:f8:a2:0e:7d:06:6d:cf:11:bc:d4:5e:d8:
17:aa:54:53:0d:c6:f5:75:6a:59:07:61:52:09:e3:9f:23:c6:
74:29:55:42:d6:1f:d4:da:da:26:3c:59:d9:eb:23:c3:b5:aa:
9f:53:1a:05:75:c4:81:50:9a:99:51:72:ac:47:b2:df:27:13:
1c:19:d6:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUYgEZg7Y1t3qQoPbZIWCooMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzY2JmZWRlYTdjMjczNDk3OWUyNDgyZDZmNjdhY2M0ZGE2
OWMyMzEwHhcNMjUwMjE4MTAwMDE0WhcNMjUwMjE5MTAwMDE0WjAzMTEwLwYDVQQD
Eyg1YWIxYTRhNjQxMzllNDhkOWU5YjgyYzcxZWQ3MjhiNzBhOTRmZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmlD4mrpqxEsd5culGi3yp5HTrZ3
3XDDrBSajELuWVIqXYJ/lCFSlviPO/AUlbicqA6oJ59zPulfHq2lzMfc1zpl+b+T
oYbis9ozUkE7v28D+pSnNyH4lg1Iox1kqQPk2QTquSzSu3QT3DEAibaW8C/eQ4ML
NCdatLU8y2XCi5Soxu0qHlIZazldjVacoSS/MwTfrPjUmifHN/wXSY8KnL7EHndp
4doE2Wxo91AHwrFBGnh4iotT8eHHfC54FMCJ+7d9zSVznIGqk2XB9xfMRv7FnVRB
0lrW3h/ANOlZ3WUiaZRWtWinZ9Wgz7GbOPJ/RSMW7M3oxYSXA1LH7gVDMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqxpKZBOeSNnpuCxx7XKLcKlP8wMB8GA1UdIwQY
MBaAFGPL/t6nwnNJeeJILW9nrMTaacIxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTh2LTNxZkNjMGw1NGtndGIyZXN4TnBwd2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MWI0NjEtNGJkMy00NzEyLThlNTIt
MmQ1NGRjNGZkZGY1LzEvWTh2LTNxZkNjMGw1NGtndGIyZXN4TnBwd2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83MWI0NjEtNGJkMy00NzEyLThlNTItMmQ1NGRjNGZkZGY1
LzEvWTh2LTNxZkNjMGw1NGtndGIyZXN4TnBwd2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArhW7UprM
VZYzl3c9Ku2IlAAHO1iJ7Im3XfP6aYAdzkfDIRv1LkDrCChe6RpODjhVkkusLyzT
3VJ/OdLo7DIe0NYjk3qldEJNU2ftAKsCt+QVRTGlkW0UfZiwM9c2ZottFSnxBdsZ
ls4aLli6NNeJR59+yFen/Bn+HdV1h5Jg61QZB6e4DvSXQ5PjlMWsAgxFIuOdewaQ
7Cdjh61aECrk0PKA9AW1CGJUFgO7HQjf0gqgeSeKOkMSc/kc+KIOfQZtzxG81F7Y
F6pUUw3G9XVqWQdhUgnjnyPGdClVQtYf1NraJjxZ2esjw7Wqn1MaBXXEgVCamVFy
rEey3ycTHBnW0g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:41:47 2025 by rpki-client