Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
File: yyVzFrhB13Pct5reio8-clnxEqs.mft (raw, json)
Hash identifier: j8+3ld08CJqHwCzzcXUr/QzAqxjhGQE5jxma5CMP1A0=
Subject key identifier: F6:41:91:6B:4A:D9:10:75:31:44:70:B7:47:40:6C:21:14:85:58:48
Authority key identifier: CB:25:73:16:B8:41:D7:73:DC:B7:9A:DE:8A:8F:3E:72:59:F1:12:AB
Certificate issuer: /CN=cb257316b841d773dcb79ade8a8f3e7259f112ab
Certificate serial: 0195E00F7674CA90587374E6BE11EB6826CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyVzFrhB13Pct5reio8-clnxEqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
Manifest number: 046A
Signing time: Sat 29 Mar 2025 04:01:04 +0000
Manifest this update: Sat 29 Mar 2025 04:01:04 +0000
Manifest next update: Sun 30 Mar 2025 04:01:04 +0000
Files and hashes: 1: OD_06SfZ3_hheASbKyQTBpKLvXQ.roa (hash: ybCs4Tm+I7vGFeJISbNMcOaCuI5hMEk5Vs5Dolkyuw4=)
2: yyVzFrhB13Pct5reio8-clnxEqs.crl (hash: dHPGQND7REweLdh57HtdlouDhYXZC4jZ9YMpPYFLkq8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:76:74:ca:90:58:73:74:e6:be:11:eb:68:26:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb257316b841d773dcb79ade8a8f3e7259f112ab
Validity
Not Before: Mar 29 04:01:04 2025 GMT
Not After : Mar 30 04:01:04 2025 GMT
Subject: CN=f641916b4ad91075314470b747406c2114855848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:64:15:f7:bd:b3:13:bc:ff:62:7b:c6:c9:90:
67:f4:02:50:52:7e:c6:6f:fe:b0:cd:1c:5c:65:f9:
34:0b:54:86:23:b3:6b:da:33:88:73:42:c4:1e:98:
42:a6:26:b8:4b:72:46:b7:83:b3:1c:72:e0:4b:b1:
cc:06:64:12:51:a1:35:46:09:9b:28:9f:e4:78:ab:
56:bd:dd:2f:69:6b:c6:f2:37:d5:e2:01:08:82:e4:
21:fb:83:b7:f9:b4:e6:08:09:99:63:03:c1:7d:f2:
5f:2e:a6:db:6f:93:23:f0:88:a1:af:26:52:a3:c4:
5a:dd:19:16:5e:e3:20:d9:02:f3:a2:de:72:36:fd:
04:93:60:5b:8a:08:c6:5e:09:76:6b:66:db:1a:52:
e1:3a:05:9c:39:a2:8d:45:24:65:6f:01:90:de:ee:
2a:40:2a:95:ab:eb:e8:0f:93:07:8e:8b:39:69:7c:
87:e1:60:68:3a:6c:44:2e:ae:c7:a2:52:60:e1:29:
85:99:f8:9f:54:c6:d4:76:a9:d3:c1:81:c5:fc:37:
31:d8:55:c6:ce:26:45:2a:02:34:b6:61:08:72:54:
f6:eb:86:61:a3:53:35:d8:46:3a:fd:e6:ae:38:ce:
53:a0:56:c4:1b:cb:9f:3d:c5:0f:65:0a:a5:53:1b:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:41:91:6B:4A:D9:10:75:31:44:70:B7:47:40:6C:21:14:85:58:48
X509v3 Authority Key Identifier:
keyid:CB:25:73:16:B8:41:D7:73:DC:B7:9A:DE:8A:8F:3E:72:59:F1:12:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVzFrhB13Pct5reio8-clnxEqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ec:4a:ae:93:e3:6e:17:2a:67:d5:13:3c:72:6a:2d:e8:50:
cd:1d:cf:df:8b:91:00:e7:d7:dc:88:12:f0:2e:19:05:21:5e:
3c:a4:e9:fc:92:c2:ed:23:54:f9:04:89:84:b2:ae:d7:39:b8:
84:76:db:90:49:d8:36:91:20:13:41:41:40:4e:39:ef:a1:37:
17:f9:4c:6a:8f:cb:20:22:ca:79:8b:1b:13:c5:c7:ed:63:c0:
3a:a8:6f:67:ef:23:4b:37:f9:43:39:09:35:6e:f6:13:a9:d2:
9c:be:ac:bb:32:cc:ef:92:e0:ce:f8:64:05:8e:02:66:f8:d5:
2f:2c:9d:50:c3:6b:bd:97:36:9a:6f:f2:fd:80:b8:c5:ac:28:
d6:bc:fd:81:0e:e0:50:64:22:72:8a:b5:05:54:e2:a4:58:7a:
e0:22:a5:17:c4:89:1d:e2:0b:9b:d8:49:a4:a2:b2:a2:48:28:
cf:93:4f:5c:18:36:16:98:a9:be:53:07:7c:95:a0:3b:15:3a:
f8:4d:95:b5:0d:73:82:0f:db:ea:2f:b6:42:db:48:18:4d:be:
b6:70:a9:92:88:e3:23:38:a6:0f:e1:6c:8b:24:f1:3d:0e:07:
b0:ed:1c:68:a4:b3:2b:61:93:bb:51:52:e3:31:49:43:8e:ec:
2e:c6:fb:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD3Z0ypBYc3TmvhHraCbNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMjU3MzE2Yjg0MWQ3NzNkY2I3OWFkZThhOGYzZTcyNTlm
MTEyYWIwHhcNMjUwMzI5MDQwMTA0WhcNMjUwMzMwMDQwMTA0WjAzMTEwLwYDVQQD
EyhmNjQxOTE2YjRhZDkxMDc1MzE0NDcwYjc0NzQwNmMyMTE0ODU1ODQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GQV972zE7z/YnvGyZBn9AJQUn7G
b/6wzRxcZfk0C1SGI7Nr2jOIc0LEHphCpia4S3JGt4OzHHLgS7HMBmQSUaE1Rgmb
KJ/keKtWvd0vaWvG8jfV4gEIguQh+4O3+bTmCAmZYwPBffJfLqbbb5Mj8IihryZS
o8Ra3RkWXuMg2QLzot5yNv0Ek2BbigjGXgl2a2bbGlLhOgWcOaKNRSRlbwGQ3u4q
QCqVq+voD5MHjos5aXyH4WBoOmxELq7HolJg4SmFmfifVMbUdqnTwYHF/Dcx2FXG
ziZFKgI0tmEIclT264Zho1M12EY6/eauOM5ToFbEG8ufPcUPZQqlUxup3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZBkWtK2RB1MURwt0dAbCEUhVhIMB8GA1UdIwQY
MBaAFMslcxa4Qddz3Lea3oqPPnJZ8RKrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXlWekZyaEIxM1BjdDVyZWlvOC1jbG54RXFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jOTJjOTAtMGVlYi00ZmMyLWE3ZTEt
YmExNGU3NjU0OGU4LzEveXlWekZyaEIxM1BjdDVyZWlvOC1jbG54RXFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9jOTJjOTAtMGVlYi00ZmMyLWE3ZTEtYmExNGU3NjU0OGU4
LzEveXlWekZyaEIxM1BjdDVyZWlvOC1jbG54RXFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuxKrpPj
bhcqZ9UTPHJqLehQzR3P34uRAOfX3IgS8C4ZBSFePKTp/JLC7SNU+QSJhLKu1zm4
hHbbkEnYNpEgE0FBQE4576E3F/lMao/LICLKeYsbE8XH7WPAOqhvZ+8jSzf5QzkJ
NW72E6nSnL6suzLM75LgzvhkBY4CZvjVLyydUMNrvZc2mm/y/YC4xawo1rz9gQ7g
UGQicoq1BVTipFh64CKlF8SJHeILm9hJpKKyokgoz5NPXBg2FpipvlMHfJWgOxU6
+E2VtQ1zgg/b6i+2QttIGE2+tnCpkojjIzimD+FsiyTxPQ4HsO0caKSzK2GTu1FS
4zFJQ47sLsb7Gw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:55:40 2025 by rpki-client