Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b14d71-3c10-4cab-9c35-e8da5a2410ee/1/yI5YRFZWbsU6aADyz1XrJqKILhI.mft
File: yI5YRFZWbsU6aADyz1XrJqKILhI.mft (raw, json)
Hash identifier: 24lSjPVdvtCxffSLkmu+2pTAjRQf2HJJzSsFgCP7Mto=
Subject key identifier: 14:0A:FC:A4:90:BA:FF:04:6E:63:71:87:8A:A1:8F:48:68:15:CE:07
Authority key identifier: C8:8E:58:44:56:56:6E:C5:3A:68:00:F2:CF:55:EB:26:A2:88:2E:12
Certificate issuer: /CN=c88e584456566ec53a6800f2cf55eb26a2882e12
Certificate serial: 01836417CD248CF3687DA8A4EADF34B7FC3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yI5YRFZWbsU6aADyz1XrJqKILhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b14d71-3c10-4cab-9c35-e8da5a2410ee/1/yI5YRFZWbsU6aADyz1XrJqKILhI.mft
Manifest number: 036A
Signing time: Thu 22 Sep 2022 07:27:04 +0000
Manifest this update: Thu 22 Sep 2022 07:27:04 +0000
Manifest next update: Fri 23 Sep 2022 07:27:04 +0000
Files and hashes: 1: 3ae6NxopkLEPpljTigNrJD14Hz0.roa (hash: Orwf5x1q6HQAaUUFUrMEVNT8NKTnokyVinqwYSAa6g0=)
2: yI5YRFZWbsU6aADyz1XrJqKILhI.crl (hash: AJSjJmDhkIQWaUjW+AByUiYJKhLgU2nXNqbRbSb2NUU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:64:17:cd:24:8c:f3:68:7d:a8:a4:ea:df:34:b7:fc:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c88e584456566ec53a6800f2cf55eb26a2882e12
Validity
Not Before: Sep 22 07:27:04 2022 GMT
Not After : Sep 23 07:27:04 2022 GMT
Subject: CN=140afca490baff046e6371878aa18f486815ce07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:69:b4:07:d3:84:d7:7e:bc:29:a5:55:71:
61:8c:e9:43:a2:ed:03:a4:be:68:33:77:30:01:b8:
7a:c3:63:48:91:60:7f:ec:8d:73:4b:71:a5:ad:3f:
82:18:a2:4c:2a:58:5c:6f:f3:a8:11:bd:4e:8b:df:
ec:23:f7:3f:83:53:39:fe:d9:8a:55:57:8c:1d:21:
7f:22:5c:16:a8:52:1e:e4:03:28:93:e2:1d:ba:8b:
86:07:e0:24:4f:32:59:7e:52:66:53:48:1d:7a:ae:
fc:49:17:4d:50:74:db:47:5e:37:cd:53:82:90:32:
19:58:1b:cd:25:fc:d8:9c:5f:5e:f4:d5:7a:8b:3c:
7a:b1:c4:cf:2a:ee:39:cc:25:f3:67:b7:57:bf:ab:
cf:da:cf:b6:02:fe:39:5f:cd:d9:d3:aa:b4:3b:f9:
61:14:79:22:76:49:b7:ec:5c:7d:4c:42:b2:5a:04:
a9:3d:05:4d:f4:9f:d1:24:7a:6b:07:88:ac:97:59:
8c:57:5c:bf:56:2a:39:de:94:6b:24:f4:ee:89:63:
0a:c3:2e:4d:71:c1:b1:2f:74:f5:4f:c6:42:74:21:
4c:58:20:3f:b7:7d:84:a0:73:bc:d6:7a:a0:87:6c:
e9:a8:b1:72:74:4a:62:8f:dc:65:df:1c:59:1d:57:
c5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0A:FC:A4:90:BA:FF:04:6E:63:71:87:8A:A1:8F:48:68:15:CE:07
X509v3 Authority Key Identifier:
keyid:C8:8E:58:44:56:56:6E:C5:3A:68:00:F2:CF:55:EB:26:A2:88:2E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yI5YRFZWbsU6aADyz1XrJqKILhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14d71-3c10-4cab-9c35-e8da5a2410ee/1/yI5YRFZWbsU6aADyz1XrJqKILhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14d71-3c10-4cab-9c35-e8da5a2410ee/1/yI5YRFZWbsU6aADyz1XrJqKILhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:15:94:ce:ec:c7:25:91:1e:fa:62:3c:73:95:8b:6f:cd:bd:
21:ba:c5:5b:9f:9c:7d:ff:f5:51:27:88:96:b5:57:0b:b0:eb:
59:4c:ce:69:a9:77:63:55:69:4f:b4:98:c4:ab:d1:ca:aa:38:
84:7b:a4:cb:23:d6:de:3b:bb:48:26:32:13:6b:96:1a:27:b7:
99:49:8b:26:1e:a8:d4:e4:d5:d4:b0:e3:d6:4f:5d:d7:a3:20:
df:37:e2:73:4d:53:6a:28:ac:89:79:bc:95:d3:2d:79:c2:aa:
9c:76:d6:d4:3c:02:2c:92:4a:1a:53:9b:d0:90:09:b2:22:ec:
03:80:20:b8:22:b9:28:fa:2d:5d:39:24:1d:a3:5b:a8:6b:c9:
8f:eb:95:c7:c8:b9:d1:d2:30:03:0e:7e:2b:39:25:c3:a2:dd:
81:1e:21:57:99:ac:a6:a4:a7:c8:f9:50:c9:c7:be:71:11:76:
34:11:59:47:67:ed:3c:49:33:0a:58:74:e6:45:a0:9c:30:23:
77:4e:3e:1e:07:82:86:85:e2:ff:53:71:69:9e:d0:e8:6d:82:
eb:40:e6:e2:ed:6e:f1:5a:a7:7e:18:d3:9e:32:f9:cc:ef:f0:
af:c3:b2:7d:74:e9:66:fd:09:12:22:54:d9:20:02:68:92:15:
3c:c0:ee:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYNkF80kjPNofaik6t80t/w/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4OGU1ODQ0NTY1NjZlYzUzYTY4MDBmMmNmNTVlYjI2YTI4
ODJlMTIwHhcNMjIwOTIyMDcyNzA0WhcNMjIwOTIzMDcyNzA0WjAzMTEwLwYDVQQD
EygxNDBhZmNhNDkwYmFmZjA0NmU2MzcxODc4YWExOGY0ODY4MTVjZTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApghptAfThNd+vCmlVXFhjOlDou0D
pL5oM3cwAbh6w2NIkWB/7I1zS3GlrT+CGKJMKlhcb/OoEb1Oi9/sI/c/g1M5/tmK
VVeMHSF/IlwWqFIe5AMok+IduouGB+AkTzJZflJmU0gdeq78SRdNUHTbR143zVOC
kDIZWBvNJfzYnF9e9NV6izx6scTPKu45zCXzZ7dXv6vP2s+2Av45X83Z06q0O/lh
FHkidkm37Fx9TEKyWgSpPQVN9J/RJHprB4isl1mMV1y/Vio53pRrJPTuiWMKwy5N
ccGxL3T1T8ZCdCFMWCA/t32EoHO81nqgh2zpqLFydEpij9xl3xxZHVfFHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQK/KSQuv8EbmNxh4qhj0hoFc4HMB8GA1UdIwQY
MBaAFMiOWERWVm7FOmgA8s9V6yaiiC4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUk1WVJGWldic1U2YUFEeXoxWHJKcUtJTGhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iMTRkNzEtM2MxMC00Y2FiLTljMzUt
ZThkYTVhMjQxMGVlLzEveUk1WVJGWldic1U2YUFEeXoxWHJKcUtJTGhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9iMTRkNzEtM2MxMC00Y2FiLTljMzUtZThkYTVhMjQxMGVl
LzEveUk1WVJGWldic1U2YUFEeXoxWHJKcUtJTGhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRWUzuzH
JZEe+mI8c5WLb829IbrFW5+cff/1USeIlrVXC7DrWUzOaal3Y1VpT7SYxKvRyqo4
hHukyyPW3ju7SCYyE2uWGie3mUmLJh6o1OTV1LDj1k9d16Mg3zfic01TaiisiXm8
ldMtecKqnHbW1DwCLJJKGlOb0JAJsiLsA4AguCK5KPotXTkkHaNbqGvJj+uVx8i5
0dIwAw5+Kzklw6LdgR4hV5mspqSnyPlQyce+cRF2NBFZR2ftPEkzClh05kWgnDAj
d04+HgeChoXi/1NxaZ7Q6G2C60Dm4u1u8VqnfhjTnjL5zO/wr8OyfXTpZv0JEiJU
2SACaJIVPMDuLA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:53:49 2025 by rpki-client