Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b0a72d-c7a5-4add-9ec2-4be99f65dad4/1/YzGimgm5i4WsSUShSLmvCMJ1RaE.mft
File: YzGimgm5i4WsSUShSLmvCMJ1RaE.mft (raw, json)
Hash identifier: hO2+8pfKSj2ChwvyvlMPl+1gtH1LjAri6tN7KPobRiw=
Subject key identifier: 6E:7F:AB:0A:F8:C5:97:CB:98:85:83:56:85:A2:B2:08:E7:35:91:85
Authority key identifier: 63:31:A2:9A:09:B9:8B:85:AC:49:44:A1:48:B9:AF:08:C2:75:45:A1
Certificate issuer: /CN=6331a29a09b98b85ac4944a148b9af08c27545a1
Certificate serial: 0184C151BC4E783EF831DA5DF1CF83525D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzGimgm5i4WsSUShSLmvCMJ1RaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b0a72d-c7a5-4add-9ec2-4be99f65dad4/1/YzGimgm5i4WsSUShSLmvCMJ1RaE.mft
Manifest number: 0B99
Signing time: Tue 29 Nov 2022 02:57:49 +0000
Manifest this update: Tue 29 Nov 2022 02:57:49 +0000
Manifest next update: Wed 30 Nov 2022 02:57:49 +0000
Files and hashes: 1: JZMstIvEqi96Qis1DLyhc54gH0Q.roa (hash: gz9eJ9RFYV1xh3a6642Khdotd07rZfdDOofsKKz1f2g=)
2: YzGimgm5i4WsSUShSLmvCMJ1RaE.crl (hash: URX6v/88GvsAE9Ru7LdllBCmirQ5a+ANOjRspQNkC/4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c1:51:bc:4e:78:3e:f8:31:da:5d:f1:cf:83:52:5d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6331a29a09b98b85ac4944a148b9af08c27545a1
Validity
Not Before: Nov 29 02:57:49 2022 GMT
Not After : Nov 30 02:57:49 2022 GMT
Subject: CN=6e7fab0af8c597cb9885835685a2b208e7359185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:8b:3b:cc:d8:c3:4c:7c:f8:fc:35:7d:c4:
6e:42:44:a3:e2:e6:a6:d2:1d:75:38:61:50:76:32:
a4:9a:7d:2a:b8:5b:de:64:6c:be:2c:7d:f8:22:3e:
5e:27:fe:a2:b0:7f:f8:b9:6a:09:74:a3:9d:9c:09:
03:b7:54:0d:e9:b3:02:59:16:6a:04:12:ff:76:95:
8e:8a:c4:f4:05:04:69:cb:cc:6c:b3:44:c8:19:46:
4d:25:4a:1a:97:3e:b4:6b:2c:3e:cf:9e:dc:7c:35:
ad:39:f6:d7:49:4b:3d:fe:77:33:7c:99:b9:9b:c1:
33:a8:9b:4c:e3:49:87:5c:c7:a7:be:69:57:64:b6:
97:89:6b:e8:8e:da:10:1a:06:61:92:18:1f:a5:dd:
4c:28:2c:d6:e4:ff:99:d0:85:cf:cf:a3:98:67:90:
6b:86:1b:e0:00:aa:a5:6f:e5:08:14:f4:0c:f9:e1:
2a:f4:bc:76:7b:48:b1:4d:0d:76:33:bf:3b:33:c0:
74:b7:34:4a:bb:7f:ec:00:d2:fd:e1:09:6d:72:16:
a3:dd:3d:a2:d7:28:74:23:06:16:fb:56:ce:b2:c3:
af:b3:47:96:c7:92:8a:ea:2d:cd:73:c3:1d:5f:36:
2b:80:21:e3:1e:ba:01:df:75:e4:f3:61:b2:30:91:
0d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7F:AB:0A:F8:C5:97:CB:98:85:83:56:85:A2:B2:08:E7:35:91:85
X509v3 Authority Key Identifier:
keyid:63:31:A2:9A:09:B9:8B:85:AC:49:44:A1:48:B9:AF:08:C2:75:45:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzGimgm5i4WsSUShSLmvCMJ1RaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b0a72d-c7a5-4add-9ec2-4be99f65dad4/1/YzGimgm5i4WsSUShSLmvCMJ1RaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b0a72d-c7a5-4add-9ec2-4be99f65dad4/1/YzGimgm5i4WsSUShSLmvCMJ1RaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:35:d9:81:2f:d7:47:75:34:14:a7:50:da:4d:bc:ae:c7:96:
0e:13:5c:21:76:39:55:48:fc:e2:d6:dd:94:e6:80:5d:42:06:
20:0d:a8:b3:a6:9e:b3:a9:fb:e3:97:e1:e7:11:74:86:bd:e2:
d2:71:2b:69:4d:18:8d:c6:02:8a:a5:35:60:db:b9:d4:79:63:
43:06:9b:91:89:61:af:d5:f0:a9:0e:dd:b9:e0:66:bf:77:79:
ef:48:89:07:c1:bd:93:34:2b:1e:dc:a2:5c:63:fd:7a:72:1d:
fa:69:50:7c:a7:d2:b3:b3:43:5b:90:ec:bd:d6:de:49:cf:ec:
d0:a1:de:14:01:b4:b0:9c:38:c6:18:0d:15:7a:10:39:30:e4:
55:df:1f:87:f5:e8:8e:b7:6f:5a:89:b7:ca:1d:10:12:0a:48:
91:6e:3e:1c:1c:9c:b0:b6:9d:c4:3d:f4:bf:1c:d6:83:af:b8:
68:ce:c3:1b:be:c7:a0:08:6a:85:d2:40:6a:e7:62:ef:26:b2:
33:a2:10:7d:66:07:b7:34:a5:cd:2f:98:c1:d7:f5:9f:7e:5b:
b8:5e:7a:28:5f:a4:27:0c:d1:17:45:2f:b5:35:be:a1:ec:cd:
ea:df:ed:7a:83:bd:70:1a:6b:89:56:bc:a5:c1:fa:5b:7e:da:
a4:f4:47:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYTBUbxOeD74Mdpd8c+DUl06MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMzFhMjlhMDliOThiODVhYzQ5NDRhMTQ4YjlhZjA4YzI3
NTQ1YTEwHhcNMjIxMTI5MDI1NzQ5WhcNMjIxMTMwMDI1NzQ5WjAzMTEwLwYDVQQD
Eyg2ZTdmYWIwYWY4YzU5N2NiOTg4NTgzNTY4NWEyYjIwOGU3MzU5MTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzGLO8zYw0x8+Pw1fcRuQkSj4uam
0h11OGFQdjKkmn0quFveZGy+LH34Ij5eJ/6isH/4uWoJdKOdnAkDt1QN6bMCWRZq
BBL/dpWOisT0BQRpy8xss0TIGUZNJUoalz60ayw+z57cfDWtOfbXSUs9/nczfJm5
m8EzqJtM40mHXMenvmlXZLaXiWvojtoQGgZhkhgfpd1MKCzW5P+Z0IXPz6OYZ5Br
hhvgAKqlb+UIFPQM+eEq9Lx2e0ixTQ12M787M8B0tzRKu3/sANL94Qltchaj3T2i
1yh0IwYW+1bOssOvs0eWx5KK6i3Nc8MdXzYrgCHjHroB33Xk82GyMJENLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5/qwr4xZfLmIWDVoWisgjnNZGFMB8GA1UdIwQY
MBaAFGMxopoJuYuFrElEoUi5rwjCdUWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXpHaW1nbTVpNFdzU1VTaFNMbXZDTUoxUmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMGE3MmQtYzdhNS00YWRkLTllYzIt
NGJlOTlmNjVkYWQ0LzEvWXpHaW1nbTVpNFdzU1VTaFNMbXZDTUoxUmFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9iMGE3MmQtYzdhNS00YWRkLTllYzItNGJlOTlmNjVkYWQ0
LzEvWXpHaW1nbTVpNFdzU1VTaFNMbXZDTUoxUmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzXZgS/X
R3U0FKdQ2k28rseWDhNcIXY5VUj84tbdlOaAXUIGIA2os6aes6n745fh5xF0hr3i
0nEraU0YjcYCiqU1YNu51HljQwabkYlhr9XwqQ7dueBmv3d570iJB8G9kzQrHtyi
XGP9enId+mlQfKfSs7NDW5DsvdbeSc/s0KHeFAG0sJw4xhgNFXoQOTDkVd8fh/Xo
jrdvWom3yh0QEgpIkW4+HBycsLadxD30vxzWg6+4aM7DG77HoAhqhdJAaudi7yay
M6IQfWYHtzSlzS+Ywdf1n35buF56KF+kJwzRF0UvtTW+oezN6t/teoO9cBpriVa8
pcH6W37apPRHwg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:07 2025 by rpki-client