Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/38321f-f38d-472d-ae03-0bd59949216b/1/YOpYvW0Ox1Fju4LxrFt1isBjxwE.mft
File: YOpYvW0Ox1Fju4LxrFt1isBjxwE.mft (raw, json)
Hash identifier: q3H9bHBr+K6MtWf0Sg+sJl0XKYyrN1zxmIqmW2Mags0=
Subject key identifier: 70:4F:CB:2F:E5:54:7A:89:7E:2F:BF:81:8E:95:91:5A:C4:93:31:BE
Authority key identifier: 60:EA:58:BD:6D:0E:C7:51:63:BB:82:F1:AC:5B:75:8A:C0:63:C7:01
Certificate issuer: /CN=60ea58bd6d0ec75163bb82f1ac5b758ac063c701
Certificate serial: 01936BC8A176F75F2F1091EAEAEEFADFF19E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOpYvW0Ox1Fju4LxrFt1isBjxwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/38321f-f38d-472d-ae03-0bd59949216b/1/YOpYvW0Ox1Fju4LxrFt1isBjxwE.mft
Manifest number: 09E8
Signing time: Wed 27 Nov 2024 04:02:10 +0000
Manifest this update: Wed 27 Nov 2024 04:02:10 +0000
Manifest next update: Thu 28 Nov 2024 04:02:10 +0000
Files and hashes: 1: YOpYvW0Ox1Fju4LxrFt1isBjxwE.crl (hash: jmeUDct7qs2XW9nF8QcxuVr56dWsaKoUUCEmLpmW3yk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:c8:a1:76:f7:5f:2f:10:91:ea:ea:ee:fa:df:f1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ea58bd6d0ec75163bb82f1ac5b758ac063c701
Validity
Not Before: Nov 27 04:02:10 2024 GMT
Not After : Nov 28 04:02:10 2024 GMT
Subject: CN=704fcb2fe5547a897e2fbf818e95915ac49331be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:96:ba:75:6c:54:51:c6:a7:c9:df:bd:60:44:
96:6c:fa:b2:1b:d7:75:c3:f3:ec:0d:34:c8:82:e0:
f3:ca:d9:92:ec:75:95:39:da:57:da:33:52:d3:ab:
7f:a3:e6:53:82:93:b2:44:22:6d:66:37:23:f2:2a:
c6:23:96:9d:14:36:7b:eb:45:a0:1b:23:78:ab:4e:
94:60:79:7e:49:3b:fb:2a:a3:35:64:8a:50:a8:42:
32:2d:08:0e:d7:cb:6f:98:9e:43:03:a7:42:0d:b7:
df:dc:f9:d2:83:98:74:22:d2:11:ee:f7:ea:b0:94:
81:fd:5f:8a:02:7a:d1:da:31:af:d2:9a:30:f6:a0:
bb:85:39:ed:4d:3e:7e:c7:79:3a:40:90:f5:35:ac:
be:bf:e8:28:9c:42:2c:b4:26:7a:a5:b7:aa:e8:1a:
d0:1e:07:fc:12:67:e9:7a:c4:a0:0f:c4:e4:dd:1f:
c2:55:62:52:49:e2:8d:6e:22:d6:b2:5c:3a:38:37:
16:18:e1:43:5d:2e:cc:41:6b:b3:26:42:6e:e3:36:
56:2e:ab:6e:cb:d5:87:56:8e:61:eb:8b:ae:4e:15:
51:47:a2:62:07:37:83:f0:61:88:f4:bb:2f:e6:2d:
53:12:28:da:4b:ef:3c:04:92:f3:6b:22:f2:eb:e8:
5e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4F:CB:2F:E5:54:7A:89:7E:2F:BF:81:8E:95:91:5A:C4:93:31:BE
X509v3 Authority Key Identifier:
keyid:60:EA:58:BD:6D:0E:C7:51:63:BB:82:F1:AC:5B:75:8A:C0:63:C7:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOpYvW0Ox1Fju4LxrFt1isBjxwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/38321f-f38d-472d-ae03-0bd59949216b/1/YOpYvW0Ox1Fju4LxrFt1isBjxwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/38321f-f38d-472d-ae03-0bd59949216b/1/YOpYvW0Ox1Fju4LxrFt1isBjxwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:06:f3:5d:5a:ed:05:af:0a:a5:b2:d4:7b:84:30:b7:5e:39:
82:d9:b5:e1:46:b9:40:e5:db:a5:bd:d1:f1:f0:be:e9:d3:47:
fd:5b:8e:df:79:9c:ae:f0:69:ad:14:26:77:6f:ec:3a:c1:f8:
37:eb:58:65:d0:4a:5f:69:0b:49:31:8d:dd:02:4d:3e:cb:4d:
42:f3:73:7c:a6:f3:01:30:69:ba:b0:c4:7e:24:08:78:a0:7c:
5d:51:78:63:62:65:a6:71:75:71:15:44:66:3b:68:eb:12:cc:
fe:a3:d5:95:5b:2c:00:9f:3d:43:e7:8c:a3:78:55:e7:92:3b:
de:37:a9:1a:43:ae:ee:e3:6b:ba:2e:45:f0:20:6b:84:12:df:
df:bd:af:86:26:60:6f:8f:2f:f3:f1:b7:e7:ba:b4:15:d0:2a:
53:77:72:bf:46:12:8a:85:94:e6:ae:c6:56:8f:98:1d:af:2c:
64:2c:c7:a7:d4:d5:99:ed:03:05:09:fb:4e:04:0a:83:15:5f:
c4:4d:1b:51:db:cd:27:53:d2:06:e9:bf:40:0f:a4:66:36:7d:
3a:0b:7e:c8:78:be:ce:9a:8a:55:9a:53:38:b4:68:01:4d:65:
05:68:e5:ab:b5:64:e1:7a:fa:07:a6:75:17:c4:2e:80:93:79:
9e:cd:7c:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNryKF2918vEJHq6u763/GeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZWE1OGJkNmQwZWM3NTE2M2JiODJmMWFjNWI3NThhYzA2
M2M3MDEwHhcNMjQxMTI3MDQwMjEwWhcNMjQxMTI4MDQwMjEwWjAzMTEwLwYDVQQD
Eyg3MDRmY2IyZmU1NTQ3YTg5N2UyZmJmODE4ZTk1OTE1YWM0OTMzMWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5a6dWxUUcanyd+9YESWbPqyG9d1
w/PsDTTIguDzytmS7HWVOdpX2jNS06t/o+ZTgpOyRCJtZjcj8irGI5adFDZ760Wg
GyN4q06UYHl+STv7KqM1ZIpQqEIyLQgO18tvmJ5DA6dCDbff3PnSg5h0ItIR7vfq
sJSB/V+KAnrR2jGv0pow9qC7hTntTT5+x3k6QJD1Nay+v+gonEIstCZ6pbeq6BrQ
Hgf8EmfpesSgD8Tk3R/CVWJSSeKNbiLWslw6ODcWGOFDXS7MQWuzJkJu4zZWLqtu
y9WHVo5h64uuThVRR6JiBzeD8GGI9Lsv5i1TEijaS+88BJLzayLy6+heuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBPyy/lVHqJfi+/gY6VkVrEkzG+MB8GA1UdIwQY
MBaAFGDqWL1tDsdRY7uC8axbdYrAY8cBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU9wWXZXME94MUZqdTRMeHJGdDFpc0JqeHdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zODMyMWYtZjM4ZC00NzJkLWFlMDMt
MGJkNTk5NDkyMTZiLzEvWU9wWXZXME94MUZqdTRMeHJGdDFpc0JqeHdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8zODMyMWYtZjM4ZC00NzJkLWFlMDMtMGJkNTk5NDkyMTZi
LzEvWU9wWXZXME94MUZqdTRMeHJGdDFpc0JqeHdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtwbzXVrt
Ba8KpbLUe4Qwt145gtm14Ua5QOXbpb3R8fC+6dNH/VuO33mcrvBprRQmd2/sOsH4
N+tYZdBKX2kLSTGN3QJNPstNQvNzfKbzATBpurDEfiQIeKB8XVF4Y2JlpnF1cRVE
Zjto6xLM/qPVlVssAJ89Q+eMo3hV55I73jepGkOu7uNrui5F8CBrhBLf372vhiZg
b48v8/G357q0FdAqU3dyv0YSioWU5q7GVo+YHa8sZCzHp9TVme0DBQn7TgQKgxVf
xE0bUdvNJ1PSBum/QA+kZjZ9Ogt+yHi+zpqKVZpTOLRoAU1lBWjlq7Vk4Xr6B6Z1
F8QugJN5ns18Bg==
-----END CERTIFICATE-----
Generated at Thu May 1 09:04:28 2025 by rpki-client