Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0c6181-218f-400a-bb70-8c523a5bba78/1/y45sWpKLpIynL3B7t5TeSdcKDnc.mft
File: y45sWpKLpIynL3B7t5TeSdcKDnc.mft (raw, json)
Hash identifier: 6Tv0Gk0sAvJhOEIVD397lo7TniiTp6Bwp8BYzLmWxEQ=
Subject key identifier: F4:EF:89:2F:A2:8A:51:61:17:FE:55:6A:D7:48:D8:74:7F:C1:C1:83
Authority key identifier: CB:8E:6C:5A:92:8B:A4:8C:A7:2F:70:7B:B7:94:DE:49:D7:0A:0E:77
Certificate issuer: /CN=cb8e6c5a928ba48ca72f707bb794de49d70a0e77
Certificate serial: 0195FA7593D2DA6394E2166FEAC5637F0077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y45sWpKLpIynL3B7t5TeSdcKDnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0c6181-218f-400a-bb70-8c523a5bba78/1/y45sWpKLpIynL3B7t5TeSdcKDnc.mft
Manifest number: 14CD
Signing time: Thu 03 Apr 2025 07:02:44 +0000
Manifest this update: Thu 03 Apr 2025 07:02:44 +0000
Manifest next update: Fri 04 Apr 2025 07:02:44 +0000
Files and hashes: 1: kkts0LAJgV8FKzhVvhfU6qpl47g.roa (hash: BwAkSfoe7dBZj+3QP1g2LSE08T2ewWsUf0QmdlkTQ/w=)
2: y45sWpKLpIynL3B7t5TeSdcKDnc.crl (hash: UYDkH1QOPGeh8/1wllk8gepPQUgonVaBDcCvbL2gwkw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fa:75:93:d2:da:63:94:e2:16:6f:ea:c5:63:7f:00:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb8e6c5a928ba48ca72f707bb794de49d70a0e77
Validity
Not Before: Apr 3 07:02:44 2025 GMT
Not After : Apr 4 07:02:44 2025 GMT
Subject: CN=f4ef892fa28a516117fe556ad748d8747fc1c183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:02:4f:af:35:7e:87:f1:ff:fb:f4:a7:4c:
f9:6b:98:cf:12:61:68:de:f0:ed:24:fc:36:3c:01:
d5:5f:28:86:94:ba:f1:d7:e0:bc:39:8e:f0:28:9c:
a3:02:b4:69:2f:97:b4:a8:dd:1b:1b:fb:09:1a:b1:
b6:b4:a2:3b:80:d5:10:ed:c5:33:32:07:53:7f:09:
3a:59:91:f3:fc:dc:83:7a:71:d0:ce:23:7f:20:c3:
b4:77:a4:b7:e5:d0:38:2c:44:52:b1:6f:26:53:e2:
f3:32:77:36:59:11:27:e3:f8:6f:92:77:a6:6f:fd:
93:a0:19:67:3b:73:c0:63:0f:74:d4:bf:d7:bf:8b:
eb:66:12:f9:5b:eb:95:e6:1a:e8:34:ca:52:1a:8b:
2c:f4:f6:b6:ca:47:07:a8:23:60:6c:88:09:56:e0:
b6:ec:cf:e9:1b:9a:f7:28:60:96:52:b3:d4:c5:94:
f0:1b:7e:ac:13:5b:03:16:4c:f4:09:5a:9d:2f:a5:
da:02:e5:2e:30:e6:e4:ce:6d:3c:da:42:f9:7e:1e:
1c:e8:67:63:ad:4f:d5:b1:94:0c:2b:c7:55:93:ff:
8d:33:5f:f2:3b:3a:dc:17:49:13:2b:75:79:44:39:
e2:35:6f:cb:81:c9:37:9d:8f:11:44:cf:93:53:cd:
65:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EF:89:2F:A2:8A:51:61:17:FE:55:6A:D7:48:D8:74:7F:C1:C1:83
X509v3 Authority Key Identifier:
keyid:CB:8E:6C:5A:92:8B:A4:8C:A7:2F:70:7B:B7:94:DE:49:D7:0A:0E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y45sWpKLpIynL3B7t5TeSdcKDnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0c6181-218f-400a-bb70-8c523a5bba78/1/y45sWpKLpIynL3B7t5TeSdcKDnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0c6181-218f-400a-bb70-8c523a5bba78/1/y45sWpKLpIynL3B7t5TeSdcKDnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:83:57:67:6d:be:24:f6:6c:4d:0c:e3:51:25:6e:c2:99:98:
02:6c:5c:fa:10:d1:63:1e:74:02:d0:76:57:ba:06:47:eb:32:
1b:37:a8:22:e4:61:0b:88:50:5b:46:0e:10:c2:be:32:cc:3a:
35:e8:b7:9e:10:10:eb:98:99:b8:58:57:67:68:af:c6:f9:e9:
77:cc:94:de:21:1b:c7:e6:a9:bd:e1:4e:84:d9:3e:3d:a8:54:
c5:c4:b2:79:02:d9:4f:cc:35:5f:a8:7d:47:5a:c2:3f:d5:4d:
fa:9a:53:2a:ba:07:6f:fe:71:23:0d:e2:5c:13:41:50:f7:29:
93:48:c3:17:88:9c:d0:c0:37:9d:7b:5c:b8:07:03:fc:25:f0:
44:d1:14:57:09:86:27:7e:42:78:7c:c6:13:1a:0f:cb:d5:ff:
e7:31:db:fc:be:65:df:f2:15:c7:17:90:93:31:32:78:a8:0a:
ed:ab:82:7f:e0:0c:6c:21:6f:6b:b2:b2:b1:2c:b1:85:0c:7e:
62:a3:d9:d6:b6:63:98:a4:45:f6:cc:96:4e:66:86:09:6f:5f:
0e:18:a6:4d:1e:79:f8:07:94:22:97:60:ee:45:ad:a0:4d:e8:
b2:01:57:a8:f0:e5:e4:75:b1:dd:32:17:5e:96:4a:9f:b4:5b:
61:d1:ff:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZX6dZPS2mOU4hZv6sVjfwB3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiOGU2YzVhOTI4YmE0OGNhNzJmNzA3YmI3OTRkZTQ5ZDcw
YTBlNzcwHhcNMjUwNDAzMDcwMjQ0WhcNMjUwNDA0MDcwMjQ0WjAzMTEwLwYDVQQD
EyhmNGVmODkyZmEyOGE1MTYxMTdmZTU1NmFkNzQ4ZDg3NDdmYzFjMTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv04CT681fofx//v0p0z5a5jPEmFo
3vDtJPw2PAHVXyiGlLrx1+C8OY7wKJyjArRpL5e0qN0bG/sJGrG2tKI7gNUQ7cUz
MgdTfwk6WZHz/NyDenHQziN/IMO0d6S35dA4LERSsW8mU+LzMnc2WREn4/hvknem
b/2ToBlnO3PAYw901L/Xv4vrZhL5W+uV5hroNMpSGoss9Pa2ykcHqCNgbIgJVuC2
7M/pG5r3KGCWUrPUxZTwG36sE1sDFkz0CVqdL6XaAuUuMObkzm082kL5fh4c6Gdj
rU/VsZQMK8dVk/+NM1/yOzrcF0kTK3V5RDniNW/Lgck3nY8RRM+TU81llQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTviS+iilFhF/5VatdI2HR/wcGDMB8GA1UdIwQY
MBaAFMuObFqSi6SMpy9we7eU3knXCg53MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTQ1c1dwS0xwSXluTDNCN3Q1VGVTZGNLRG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wYzYxODEtMjE4Zi00MDBhLWJiNzAt
OGM1MjNhNWJiYTc4LzEveTQ1c1dwS0xwSXluTDNCN3Q1VGVTZGNLRG5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8wYzYxODEtMjE4Zi00MDBhLWJiNzAtOGM1MjNhNWJiYTc4
LzEveTQ1c1dwS0xwSXluTDNCN3Q1VGVTZGNLRG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn4NXZ22+
JPZsTQzjUSVuwpmYAmxc+hDRYx50AtB2V7oGR+syGzeoIuRhC4hQW0YOEMK+Msw6
Nei3nhAQ65iZuFhXZ2ivxvnpd8yU3iEbx+apveFOhNk+PahUxcSyeQLZT8w1X6h9
R1rCP9VN+ppTKroHb/5xIw3iXBNBUPcpk0jDF4ic0MA3nXtcuAcD/CXwRNEUVwmG
J35CeHzGExoPy9X/5zHb/L5l3/IVxxeQkzEyeKgK7auCf+AMbCFva7KysSyxhQx+
YqPZ1rZjmKRF9syWTmaGCW9fDhimTR55+AeUIpdg7kWtoE3osgFXqPDl5HWx3TIX
XpZKn7RbYdH/Nw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 20:29:50 2025 by rpki-client