Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
File: YRXyX81FgRzk-aHvlLmK6C0jyOU.mft (raw, json)
Hash identifier: alPDcpzzaDUXHvmXHwSj0w1RspJzm1Rn/O3Iy0sVQug=
Subject key identifier: 1A:F3:3E:2C:17:84:47:4A:8C:20:32:9C:13:D6:ED:28:D9:D8:30:2B
Authority key identifier: 61:15:F2:5F:CD:45:81:1C:E4:F9:A1:EF:94:B9:8A:E8:2D:23:C8:E5
Certificate issuer: /CN=6115f25fcd45811ce4f9a1ef94b98ae82d23c8e5
Certificate serial: 0195DFD97018E53F201F5677822605C45459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
Manifest number: 1B
Signing time: Sat 29 Mar 2025 03:02:03 +0000
Manifest this update: Sat 29 Mar 2025 03:02:03 +0000
Manifest next update: Sun 30 Mar 2025 03:02:03 +0000
Files and hashes: 1: YRXyX81FgRzk-aHvlLmK6C0jyOU.crl (hash: 459IvYUzk5M+TEP19zhgvKk0ClrfSqmfhxUAuQMje/s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:70:18:e5:3f:20:1f:56:77:82:26:05:c4:54:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6115f25fcd45811ce4f9a1ef94b98ae82d23c8e5
Validity
Not Before: Mar 29 03:02:03 2025 GMT
Not After : Mar 30 03:02:03 2025 GMT
Subject: CN=1af33e2c1784474a8c20329c13d6ed28d9d8302b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:79:b1:5f:5e:91:d1:d9:4f:8b:e4:ed:63:5a:
04:db:31:8c:8d:fe:ca:f3:f0:4a:52:54:dd:d8:a3:
92:94:c4:3b:c0:eb:cf:ce:f2:79:95:dd:ed:89:f4:
60:4f:ac:7c:9a:fd:44:ae:f2:55:f6:b1:9b:9b:0c:
2a:17:0c:93:69:df:e7:a0:9a:c2:2a:46:f0:bd:4c:
03:bd:90:97:cb:40:73:3a:1a:3a:97:df:22:3a:25:
79:92:9f:97:b5:d8:a8:6c:75:dd:35:bf:e5:66:5d:
a6:b0:ff:bf:69:f2:76:73:70:82:68:0b:2b:5f:dd:
fd:e5:d7:af:70:39:45:f3:a8:11:1c:9e:8c:fe:1f:
b1:01:0a:72:d6:49:af:b5:35:b2:57:3a:cf:c0:d0:
60:8e:cb:f2:5a:bb:5a:eb:33:d9:cb:b6:39:d5:f7:
ad:e0:43:e7:c2:2b:17:c2:8c:01:8b:ff:2b:ab:cd:
05:e8:af:07:e0:c0:1c:64:a6:4c:b8:49:5c:8e:0b:
37:79:c2:f1:92:32:c9:28:00:20:9c:40:79:d0:45:
ff:01:f5:47:6f:99:0d:87:dd:ad:26:04:d1:0b:22:
e3:03:07:8a:a8:a0:7c:3d:66:38:84:8c:69:69:44:
49:ab:43:67:03:88:0f:cb:22:e8:e1:32:e5:71:17:
a1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F3:3E:2C:17:84:47:4A:8C:20:32:9C:13:D6:ED:28:D9:D8:30:2B
X509v3 Authority Key Identifier:
keyid:61:15:F2:5F:CD:45:81:1C:E4:F9:A1:EF:94:B9:8A:E8:2D:23:C8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:98:38:d0:53:16:ea:ce:79:61:02:8a:57:59:ef:7f:9d:ae:
70:45:27:3d:fc:fa:69:f1:8f:0f:2a:b3:a2:bf:21:91:da:c6:
02:77:86:00:fd:6a:9f:7d:ff:41:71:db:4b:76:c8:24:7d:ef:
f0:e7:48:7b:b3:cb:85:17:29:16:aa:83:ac:c4:7e:c6:69:09:
c2:6f:e5:23:83:c0:f5:66:76:3b:3e:b5:16:ff:36:19:63:02:
86:8b:3a:f6:ce:72:1e:65:a3:2e:d9:98:65:24:c0:62:a7:56:
ff:74:79:b9:00:d0:7f:1b:39:f2:6c:17:80:b9:d7:1f:f2:89:
d5:2c:7c:f7:6a:bc:e5:c5:dc:9f:d9:7e:65:d7:d3:1b:80:49:
95:48:85:c4:a0:72:ae:35:90:34:ab:7f:fd:83:dc:97:23:fa:
0c:11:60:43:c4:47:72:ca:5b:48:91:0e:3c:f8:2c:4c:d5:cd:
9a:9a:4b:b7:5f:fc:9f:93:72:7d:59:ac:be:7e:b2:8c:8e:fa:
6f:22:45:87:32:7a:de:00:de:31:5a:64:e7:2d:d7:e7:9a:54:
cb:a9:b7:f0:fa:4f:3b:f4:24:ba:ee:29:15:5c:12:4e:40:e1:
3a:98:cf:20:57:ec:d6:35:95:b3:10:48:87:33:f3:a0:a0:0c:
ca:60:dc:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXf2XAY5T8gH1Z3giYFxFRZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMTVmMjVmY2Q0NTgxMWNlNGY5YTFlZjk0Yjk4YWU4MmQy
M2M4ZTUwHhcNMjUwMzI5MDMwMjAzWhcNMjUwMzMwMDMwMjAzWjAzMTEwLwYDVQQD
EygxYWYzM2UyYzE3ODQ0NzRhOGMyMDMyOWMxM2Q2ZWQyOGQ5ZDgzMDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3mxX16R0dlPi+TtY1oE2zGMjf7K
8/BKUlTd2KOSlMQ7wOvPzvJ5ld3tifRgT6x8mv1ErvJV9rGbmwwqFwyTad/noJrC
KkbwvUwDvZCXy0BzOho6l98iOiV5kp+XtdiobHXdNb/lZl2msP+/afJ2c3CCaAsr
X9395devcDlF86gRHJ6M/h+xAQpy1kmvtTWyVzrPwNBgjsvyWrta6zPZy7Y51fet
4EPnwisXwowBi/8rq80F6K8H4MAcZKZMuElcjgs3ecLxkjLJKAAgnEB50EX/AfVH
b5kNh92tJgTRCyLjAweKqKB8PWY4hIxpaURJq0NnA4gPyyLo4TLlcRehVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBrzPiwXhEdKjCAynBPW7SjZ2DArMB8GA1UdIwQY
MBaAFGEV8l/NRYEc5Pmh75S5iugtI8jlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVJYeVg4MUZnUnprLWFIdmxMbUs2QzBqeU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83MDIxZWItYjAzNy00N2ZlLTgyMjEt
ZTAyNjBmYWM3NGI5LzEvWVJYeVg4MUZnUnprLWFIdmxMbUs2QzBqeU9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy83MDIxZWItYjAzNy00N2ZlLTgyMjEtZTAyNjBmYWM3NGI5
LzEvWVJYeVg4MUZnUnprLWFIdmxMbUs2QzBqeU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZg40FMW
6s55YQKKV1nvf52ucEUnPfz6afGPDyqzor8hkdrGAneGAP1qn33/QXHbS3bIJH3v
8OdIe7PLhRcpFqqDrMR+xmkJwm/lI4PA9WZ2Oz61Fv82GWMChos69s5yHmWjLtmY
ZSTAYqdW/3R5uQDQfxs58mwXgLnXH/KJ1Sx892q85cXcn9l+ZdfTG4BJlUiFxKBy
rjWQNKt//YPclyP6DBFgQ8RHcspbSJEOPPgsTNXNmppLt1/8n5NyfVmsvn6yjI76
byJFhzJ63gDeMVpk5y3X55pUy6m38PpPO/Qkuu4pFVwSTkDhOpjPIFfs1jWVsxBI
hzPzoKAMymDcFA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:08:11 2025 by rpki-client