Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/69a51d-92a1-48ad-b7e7-c4c879c6724c/1/yWrrday7XyEjNeptzLDDbzZ9tPg.mft
File: yWrrday7XyEjNeptzLDDbzZ9tPg.mft (raw, json)
Hash identifier: 1erFSUoElGJSUXMRipSuOuhH82yOYlK1BJI4WXsqsC8=
Subject key identifier: E7:D5:20:97:B9:39:CF:60:12:AB:51:AE:7B:E5:51:64:B9:2E:67:1B
Authority key identifier: C9:6A:EB:75:AC:BB:5F:21:23:35:EA:6D:CC:B0:C3:6F:36:7D:B4:F8
Certificate issuer: /CN=c96aeb75acbb5f212335ea6dccb0c36f367db4f8
Certificate serial: 01926523EA720EBAAC2D1DD8340405EF7D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWrrday7XyEjNeptzLDDbzZ9tPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/69a51d-92a1-48ad-b7e7-c4c879c6724c/1/yWrrday7XyEjNeptzLDDbzZ9tPg.mft
Manifest number: 12F5
Signing time: Mon 07 Oct 2024 04:01:45 +0000
Manifest this update: Mon 07 Oct 2024 04:01:45 +0000
Manifest next update: Tue 08 Oct 2024 04:01:45 +0000
Files and hashes: 1: N1GQq6PrgEqECZ_D6G86ZzVHdVc.roa (hash: ze9XLgcSLr5D7asiuVCsSkgm8+mRcLFwD4iJ0pP6fg4=)
2: yWrrday7XyEjNeptzLDDbzZ9tPg.crl (hash: FqGWsqmWR8jKxULv1fCh188fyIrJa9QkY/yMPJ5r7c8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:65:23:ea:72:0e:ba:ac:2d:1d:d8:34:04:05:ef:7d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c96aeb75acbb5f212335ea6dccb0c36f367db4f8
Validity
Not Before: Oct 7 04:01:45 2024 GMT
Not After : Oct 8 04:01:45 2024 GMT
Subject: CN=e7d52097b939cf6012ab51ae7be55164b92e671b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e2:69:89:3b:3e:c9:8b:2c:6a:31:ee:88:94:
ff:47:cb:22:56:81:b3:8d:4b:e6:fc:9d:e2:98:0e:
68:c5:5d:32:ca:fb:63:fd:59:ae:7a:94:95:12:20:
7a:fc:f7:69:98:bc:a0:45:5f:9b:c7:8f:32:11:62:
a0:c7:88:b5:46:8c:41:38:81:f2:a5:50:b6:14:8a:
3a:29:4c:93:fd:a9:a8:6b:aa:e9:a1:4c:c5:a2:87:
64:32:b0:65:b9:1b:34:40:3f:1c:44:52:24:88:f3:
18:9a:85:db:4b:16:e4:fd:eb:30:53:c2:25:d8:38:
a8:3c:f0:de:fd:42:1b:0e:1c:f5:6e:3f:11:67:dd:
5a:88:e5:99:5d:75:62:b6:3f:2d:f1:76:be:ad:2d:
e1:68:77:6e:c1:64:cc:e6:d6:84:f0:27:ed:0b:73:
b8:0c:fb:63:b0:ce:d4:12:33:a7:4e:80:35:e3:86:
c2:62:ea:ce:38:91:80:92:00:18:80:05:0a:d2:0d:
3d:46:ca:9f:02:28:a8:cb:92:a2:c8:59:78:c7:1a:
47:e5:ae:43:02:b6:f3:cf:cd:c2:3b:e7:91:a9:ad:
ec:e4:64:2c:4d:6b:44:d8:af:5b:3b:34:3c:69:ea:
d4:e8:a6:78:c1:57:47:06:c1:66:0e:63:f8:ea:4e:
88:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D5:20:97:B9:39:CF:60:12:AB:51:AE:7B:E5:51:64:B9:2E:67:1B
X509v3 Authority Key Identifier:
keyid:C9:6A:EB:75:AC:BB:5F:21:23:35:EA:6D:CC:B0:C3:6F:36:7D:B4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWrrday7XyEjNeptzLDDbzZ9tPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/69a51d-92a1-48ad-b7e7-c4c879c6724c/1/yWrrday7XyEjNeptzLDDbzZ9tPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/69a51d-92a1-48ad-b7e7-c4c879c6724c/1/yWrrday7XyEjNeptzLDDbzZ9tPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2f:bc:fd:6b:5f:9c:89:74:49:d1:b2:ec:dd:87:15:0e:25:
cb:d1:e5:5a:b0:3a:8e:c6:88:35:98:a1:38:42:7e:f5:32:9f:
13:43:15:46:6d:89:25:40:a4:69:d0:ab:ff:1d:c5:a7:00:05:
07:11:be:ee:d6:19:20:c7:d5:15:59:29:21:25:2b:65:04:7e:
56:6e:ee:dd:e7:14:97:36:27:16:09:cd:a7:d6:f3:43:72:f9:
00:99:a1:a5:e7:64:cb:48:3e:e1:2a:1e:1c:6b:53:93:c9:6e:
ec:be:eb:f7:32:34:6b:50:06:b2:29:03:b8:92:31:27:f2:d0:
40:6c:a0:6c:23:7c:f1:a3:d8:9b:cb:bb:99:35:07:e5:5e:f5:
00:23:1a:b7:b6:72:f6:87:82:da:07:6f:9d:8a:6a:07:a4:85:
bf:22:87:c8:3e:ac:08:f1:68:cd:82:8a:41:8b:af:db:bb:a4:
21:eb:2b:d3:67:a7:81:1b:76:b6:71:18:04:b6:8d:d2:0b:98:
cd:02:75:97:bb:1c:34:80:3c:c3:80:9f:19:2a:00:81:dc:b7:
52:07:d2:1d:5f:c9:8e:80:91:ed:e1:7f:95:71:32:7e:fe:b0:
1a:bf:c2:20:eb:d8:b0:1e:78:01:3d:0b:91:dd:46:49:98:76:
31:99:6c:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZJlI+pyDrqsLR3YNAQF731FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NmFlYjc1YWNiYjVmMjEyMzM1ZWE2ZGNjYjBjMzZmMzY3
ZGI0ZjgwHhcNMjQxMDA3MDQwMTQ1WhcNMjQxMDA4MDQwMTQ1WjAzMTEwLwYDVQQD
EyhlN2Q1MjA5N2I5MzljZjYwMTJhYjUxYWU3YmU1NTE2NGI5MmU2NzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+JpiTs+yYssajHuiJT/R8siVoGz
jUvm/J3imA5oxV0yyvtj/VmuepSVEiB6/PdpmLygRV+bx48yEWKgx4i1RoxBOIHy
pVC2FIo6KUyT/amoa6rpoUzFoodkMrBluRs0QD8cRFIkiPMYmoXbSxbk/eswU8Il
2DioPPDe/UIbDhz1bj8RZ91aiOWZXXVitj8t8Xa+rS3haHduwWTM5taE8CftC3O4
DPtjsM7UEjOnToA144bCYurOOJGAkgAYgAUK0g09RsqfAiioy5KiyFl4xxpH5a5D
Arbzz83CO+eRqa3s5GQsTWtE2K9bOzQ8aerU6KZ4wVdHBsFmDmP46k6I8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfVIJe5Oc9gEqtRrnvlUWS5LmcbMB8GA1UdIwQY
MBaAFMlq63Wsu18hIzXqbcyww282fbT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVdycmRheTdYeUVqTmVwdHpMRERielo5dFBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82OWE1MWQtOTJhMS00OGFkLWI3ZTct
YzRjODc5YzY3MjRjLzEveVdycmRheTdYeUVqTmVwdHpMRERielo5dFBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS82OWE1MWQtOTJhMS00OGFkLWI3ZTctYzRjODc5YzY3MjRj
LzEveVdycmRheTdYeUVqTmVwdHpMRERielo5dFBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmS+8/Wtf
nIl0SdGy7N2HFQ4ly9HlWrA6jsaINZihOEJ+9TKfE0MVRm2JJUCkadCr/x3FpwAF
BxG+7tYZIMfVFVkpISUrZQR+Vm7u3ecUlzYnFgnNp9bzQ3L5AJmhpedky0g+4Soe
HGtTk8lu7L7r9zI0a1AGsikDuJIxJ/LQQGygbCN88aPYm8u7mTUH5V71ACMat7Zy
9oeC2gdvnYpqB6SFvyKHyD6sCPFozYKKQYuv27ukIesr02engRt2tnEYBLaN0guY
zQJ1l7scNIA8w4CfGSoAgdy3UgfSHV/JjoCR7eF/lXEyfv6wGr/CIOvYsB54AT0L
kd1GSZh2MZlszQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:46 2025 by rpki-client