Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3f27b3-7110-4d8c-a0d8-03109c15510d/1/YFmTc7C28EMZ0Ivsta1XkqE72pI.mft
File: YFmTc7C28EMZ0Ivsta1XkqE72pI.mft (raw, json)
Hash identifier: XVNCita+Jw947aUjToq+bfEyx5OjXCwQlB2zELgrIMA=
Subject key identifier: 35:13:DF:A6:86:E0:1A:CD:85:B4:55:A5:13:DD:70:7C:18:A1:4F:72
Authority key identifier: 60:59:93:73:B0:B6:F0:43:19:D0:8B:EC:B5:AD:57:92:A1:3B:DA:92
Certificate issuer: /CN=60599373b0b6f04319d08becb5ad5792a13bda92
Certificate serial: 01914B66240E81C27F2E01284F29DA9B03D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFmTc7C28EMZ0Ivsta1XkqE72pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f27b3-7110-4d8c-a0d8-03109c15510d/1/YFmTc7C28EMZ0Ivsta1XkqE72pI.mft
Manifest number: 0E6F
Signing time: Tue 13 Aug 2024 11:01:10 +0000
Manifest this update: Tue 13 Aug 2024 11:01:10 +0000
Manifest next update: Wed 14 Aug 2024 11:01:10 +0000
Files and hashes: 1: 1EZ2cqVLIoynCYa-wnKi0wLMays.roa (hash: 7zSX4rrSmtQfFRAaQZOd98qa86Uxa8uae78uZ3+o+g0=)
2: YFmTc7C28EMZ0Ivsta1XkqE72pI.crl (hash: 2HAWQij7Alftu9E07ZC6YfdIXODJiafpWpnwrvMRHPE=)
3: iNceDSdpaiQUoMzgtG9pp1ducas.roa (hash: n3QPtyZ6PKNMBZWE0I+8yEeprhqRdNErkD7c5BxCwrU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4b:66:24:0e:81:c2:7f:2e:01:28:4f:29:da:9b:03:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60599373b0b6f04319d08becb5ad5792a13bda92
Validity
Not Before: Aug 13 11:01:10 2024 GMT
Not After : Aug 14 11:01:10 2024 GMT
Subject: CN=3513dfa686e01acd85b455a513dd707c18a14f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cb:41:2a:4b:c0:40:14:fd:51:72:1a:08:ef:
33:f3:4b:ad:52:94:77:90:02:bb:08:2f:c3:bf:ed:
f7:ed:30:d4:e3:7b:49:8d:da:1f:33:ac:11:ca:80:
e6:d6:5d:78:7c:c5:38:ad:8c:4e:86:c7:d0:29:cf:
1a:7d:11:8f:e9:7c:1e:61:6e:45:e4:2a:61:0a:fc:
af:9e:d5:a4:2c:bc:e6:7e:ae:f6:53:26:ba:30:28:
b3:f4:0f:fd:d0:88:88:bf:9f:b0:67:1a:ca:05:fb:
a3:ba:63:df:10:1e:43:15:15:a7:9c:f7:c8:ca:e3:
51:b1:b7:d5:0a:90:90:b7:25:13:61:4c:ce:be:d3:
fe:56:89:54:59:15:ec:05:aa:b3:72:8d:2d:36:3a:
9b:6d:3e:09:22:97:9d:c6:79:0b:3b:b7:2d:b2:c4:
8d:7b:c6:a5:dc:c1:a6:7b:31:d5:75:10:27:6c:20:
70:30:a6:05:61:4c:e8:4d:b9:b4:3c:8f:bb:53:18:
7d:09:08:6d:d3:6f:4d:d3:87:75:a2:5c:1a:7f:27:
ab:8e:c1:b8:3a:ae:df:21:d5:a3:37:fc:ca:33:06:
d9:b4:4e:1c:17:9c:60:d8:69:f7:06:be:16:f4:83:
fd:97:56:29:9c:11:c9:a9:aa:4c:cc:4a:d8:dd:1d:
c7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:13:DF:A6:86:E0:1A:CD:85:B4:55:A5:13:DD:70:7C:18:A1:4F:72
X509v3 Authority Key Identifier:
keyid:60:59:93:73:B0:B6:F0:43:19:D0:8B:EC:B5:AD:57:92:A1:3B:DA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFmTc7C28EMZ0Ivsta1XkqE72pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f27b3-7110-4d8c-a0d8-03109c15510d/1/YFmTc7C28EMZ0Ivsta1XkqE72pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f27b3-7110-4d8c-a0d8-03109c15510d/1/YFmTc7C28EMZ0Ivsta1XkqE72pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:70:a2:76:d9:a3:d0:5d:35:03:b1:f7:21:92:6d:02:41:0e:
6c:53:be:d8:9d:c2:5f:99:63:b1:2f:15:f6:2d:e6:31:04:e1:
b2:80:f7:5b:72:20:fd:ac:ca:a6:9c:e7:48:bd:e5:e5:ad:f2:
28:36:0a:46:2f:73:73:73:df:36:b0:40:12:81:82:08:fb:9f:
59:2e:88:e2:73:f7:b3:35:89:c3:aa:c4:67:8b:71:b3:d2:c3:
25:ea:f2:b8:94:0a:23:95:4c:bf:35:31:0a:45:20:45:43:db:
72:20:7c:93:49:2d:93:70:0b:b5:36:78:89:8c:bb:c1:f5:1c:
f9:84:d6:dc:21:40:14:e2:4b:c1:8b:8d:90:aa:fb:28:04:0b:
ef:27:fc:14:d3:4f:99:7a:93:de:df:57:d7:24:6e:6e:56:03:
43:62:ae:9b:20:ba:4d:5e:ef:87:c9:6d:28:3f:c2:c5:73:54:
fa:c1:c9:11:c3:2f:87:7f:ea:c7:41:90:1c:cf:65:61:2d:98:
64:f5:62:be:fd:92:12:cc:49:99:d9:70:80:43:24:cf:9a:79:
a0:6e:37:7c:c4:21:04:e2:0a:d0:41:a5:a8:3d:76:f9:1b:4a:
44:a8:72:98:d5:ad:5e:cc:de:1a:de:a8:25:b2:b5:30:63:eb:
c1:0f:70:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZFLZiQOgcJ/LgEoTynamwPWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTk5MzczYjBiNmYwNDMxOWQwOGJlY2I1YWQ1NzkyYTEz
YmRhOTIwHhcNMjQwODEzMTEwMTEwWhcNMjQwODE0MTEwMTEwWjAzMTEwLwYDVQQD
EygzNTEzZGZhNjg2ZTAxYWNkODViNDU1YTUxM2RkNzA3YzE4YTE0ZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5stBKkvAQBT9UXIaCO8z80utUpR3
kAK7CC/Dv+337TDU43tJjdofM6wRyoDm1l14fMU4rYxOhsfQKc8afRGP6XweYW5F
5CphCvyvntWkLLzmfq72Uya6MCiz9A/90IiIv5+wZxrKBfujumPfEB5DFRWnnPfI
yuNRsbfVCpCQtyUTYUzOvtP+VolUWRXsBaqzco0tNjqbbT4JIpedxnkLO7ctssSN
e8al3MGmezHVdRAnbCBwMKYFYUzoTbm0PI+7Uxh9CQht029N04d1olwafyerjsG4
Oq7fIdWjN/zKMwbZtE4cF5xg2Gn3Br4W9IP9l1YpnBHJqapMzErY3R3HGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUT36aG4BrNhbRVpRPdcHwYoU9yMB8GA1UdIwQY
MBaAFGBZk3OwtvBDGdCL7LWtV5KhO9qSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZtVGM3QzI4RU1aMEl2c3RhMVhrcUU3MnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zZjI3YjMtNzExMC00ZDhjLWEwZDgt
MDMxMDljMTU1MTBkLzEvWUZtVGM3QzI4RU1aMEl2c3RhMVhrcUU3MnBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8zZjI3YjMtNzExMC00ZDhjLWEwZDgtMDMxMDljMTU1MTBk
LzEvWUZtVGM3QzI4RU1aMEl2c3RhMVhrcUU3MnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3Cidtmj
0F01A7H3IZJtAkEObFO+2J3CX5ljsS8V9i3mMQThsoD3W3Ig/azKppznSL3l5a3y
KDYKRi9zc3PfNrBAEoGCCPufWS6I4nP3szWJw6rEZ4txs9LDJeryuJQKI5VMvzUx
CkUgRUPbciB8k0ktk3ALtTZ4iYy7wfUc+YTW3CFAFOJLwYuNkKr7KAQL7yf8FNNP
mXqT3t9X1yRublYDQ2KumyC6TV7vh8ltKD/CxXNU+sHJEcMvh3/qx0GQHM9lYS2Y
ZPVivv2SEsxJmdlwgEMkz5p5oG43fMQhBOIK0EGlqD12+RtKRKhymNWtXszeGt6o
JbK1MGPrwQ9w1g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:24 2025 by rpki-client