Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
File: RyyyiCCZANGvGpmLsDnsdX5JPdU.mft (raw, json)
Hash identifier: 3lh8qpHP3ey2AHQ9l9D3RjgsArLizYF0HhG+S0nTspQ=
Subject key identifier: 7D:E0:C7:F8:D4:6B:39:D8:0D:B2:3B:8C:DB:01:13:1A:06:9B:E8:CF
Authority key identifier: 47:2C:B2:88:20:99:00:D1:AF:1A:99:8B:B0:39:EC:75:7E:49:3D:D5
Certificate issuer: /CN=472cb288209900d1af1a998bb039ec757e493dd5
Certificate serial: 0194BCE0C647B99E746A2EFA311E8BAA3B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
Manifest number: 0653
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: RyyyiCCZANGvGpmLsDnsdX5JPdU.crl (hash: s9ZSRSApdZq/1HpbR1oWNrWwxOb1tHYD4EOP3FF1JUo=)
2: S3dIMaIh62_y7HmBxhlxOM_ScHc.roa (hash: wYfLcBDYpc1piz/XiUHEld94m4pY4RAv7rF1GCt4/I0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c6:47:b9:9e:74:6a:2e:fa:31:1e:8b:aa:3b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472cb288209900d1af1a998bb039ec757e493dd5
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=7de0c7f8d46b39d80db23b8cdb01131a069be8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:a3:55:70:90:44:ca:fe:64:fc:1d:5c:52:
ee:f2:38:2c:7a:a3:4b:0d:71:04:5d:fb:75:7c:a0:
c6:ee:45:2c:6e:89:c0:0a:64:ba:1c:d4:0e:c2:4e:
47:b5:79:91:5c:d3:c4:66:25:6c:57:e5:fa:31:b9:
36:03:08:42:31:92:ba:40:58:fe:da:93:1f:81:5f:
8d:1b:5a:9e:c8:94:1e:cb:85:26:33:db:a4:1f:79:
2c:03:5a:74:7d:d9:c0:01:63:84:06:97:1c:71:35:
7d:c9:8b:d7:7c:7c:ee:2c:72:26:c3:d4:1a:0a:bc:
77:4f:78:24:8c:16:18:e2:ce:82:e4:a2:f8:9d:45:
6d:81:48:79:60:41:b5:4d:1c:e8:ec:32:ab:8b:d2:
0c:65:58:d0:4f:9e:08:4c:fa:00:df:d1:65:5b:b8:
c7:4b:7e:41:ef:d2:ee:0f:ef:82:62:fc:cf:18:17:
e4:b5:17:b7:3b:10:f4:31:9c:2c:7d:19:ee:24:62:
2b:a6:6a:4b:34:ea:18:ff:ed:bc:18:f9:ea:54:ec:
c9:7c:3f:cf:20:ce:28:c6:0a:0f:87:b2:b5:13:72:
66:58:e7:96:dd:3c:c7:5a:43:31:38:30:eb:2e:4b:
6c:7a:43:40:0c:e4:dd:f4:c4:fa:94:90:66:92:3c:
ce:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E0:C7:F8:D4:6B:39:D8:0D:B2:3B:8C:DB:01:13:1A:06:9B:E8:CF
X509v3 Authority Key Identifier:
keyid:47:2C:B2:88:20:99:00:D1:AF:1A:99:8B:B0:39:EC:75:7E:49:3D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:38:72:87:b2:c1:c2:37:3a:61:60:cf:b8:1a:c7:54:76:be:
7a:c5:a6:21:55:4d:5d:35:59:a8:20:6d:03:4f:72:92:cf:93:
2f:ad:b1:b0:93:ec:f3:fc:28:c5:42:34:24:0f:ec:7d:26:4a:
56:bb:2f:a9:c6:23:d9:75:df:7a:17:77:b9:cc:13:6b:18:3c:
51:2e:7a:6b:fa:6f:8b:d0:3c:66:d4:51:d5:46:48:b2:9e:9c:
91:cf:64:7a:ca:49:17:bf:57:aa:14:ac:72:63:84:de:8c:87:
92:67:ae:10:36:bb:43:58:18:82:a9:c1:c7:7e:ae:09:5a:d2:
7c:73:cf:82:53:2d:a0:8f:7c:4c:50:72:ed:a3:ff:c3:8f:25:
06:56:a2:1e:f5:b9:29:e0:54:cd:5f:89:06:a3:91:84:8e:1b:
64:ca:81:1d:85:92:13:54:73:60:55:d3:81:95:85:ad:b2:4b:
f6:2a:3d:22:ff:1e:a6:91:4a:99:dc:dc:3f:e0:73:d1:f7:f8:
b7:e3:43:37:68:b6:ff:d2:ad:82:ac:03:20:f3:e2:18:0f:18:
d4:0e:fc:a6:50:6c:00:61:1a:32:bf:a4:9a:0a:11:19:44:0b:
20:69:6f:a1:17:3c:26:2f:06:1e:6b:b8:d2:f3:c2:f2:b1:5d:
2b:8c:51:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:53:13 2025 by rpki-client