Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
File: ryrOvHYcrzdlbb1xU8AEmftzd3c.mft (raw, json)
Hash identifier: yfPHj7CsdnV0H1QRB7diJO/bYAdaoH/gTFP+dA2E4Z8=
Subject key identifier: 54:3E:B2:1E:44:65:90:8B:F9:E4:14:5C:5C:2F:9A:60:BC:A8:B1:9E
Authority key identifier: AF:2A:CE:BC:76:1C:AF:37:65:6D:BD:71:53:C0:04:99:FB:73:77:77
Certificate issuer: /CN=af2acebc761caf37656dbd7153c00499fb737777
Certificate serial: 0194BCAA3C8F71FFFFC763C1A3D0A6246FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
Manifest number: 0480
Signing time: Fri 31 Jan 2025 14:01:00 +0000
Manifest this update: Fri 31 Jan 2025 14:01:00 +0000
Manifest next update: Sat 01 Feb 2025 14:01:00 +0000
Files and hashes: 1: ryrOvHYcrzdlbb1xU8AEmftzd3c.crl (hash: oBhx0ewCab9e+vyzUgKCdnKzG1Q0xz+40XOh1oOX5Vg=)
2: zMLzsvyvzttf1W0nTGnk2Xapur8.roa (hash: RrEXPJicy0wkgDG3hlm5HrYEO3YA5hlKCSWiWB4jQfs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3c:8f:71:ff:ff:c7:63:c1:a3:d0:a6:24:6f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2acebc761caf37656dbd7153c00499fb737777
Validity
Not Before: Jan 31 14:01:00 2025 GMT
Not After : Feb 1 14:01:00 2025 GMT
Subject: CN=543eb21e4465908bf9e4145c5c2f9a60bca8b19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:71:be:37:53:16:e7:f9:d2:b8:e2:48:d3:
8a:34:b3:f6:f0:59:50:0a:40:8a:e1:26:57:59:b2:
e0:4e:9d:d3:79:78:84:3e:90:c6:b8:2d:33:39:c9:
78:ef:84:2e:ac:5b:e3:6d:fd:de:e4:7b:84:08:1c:
35:6c:07:84:0a:94:7e:b0:fe:68:6f:b5:c6:dd:c0:
b7:ce:7d:90:67:9d:f1:61:70:0b:52:36:9f:b9:5c:
6c:f5:df:bb:ae:48:9c:d7:cb:da:30:43:e7:02:14:
40:40:80:1e:cf:eb:a4:fb:4b:fa:03:ad:43:9f:f0:
57:d0:4f:e1:70:80:2c:10:51:95:07:36:9c:13:f0:
db:41:db:23:3e:73:22:e8:ae:38:68:17:09:34:81:
d2:3d:70:32:8d:84:a5:b9:f1:4e:da:b9:90:8c:7d:
2f:ea:91:77:b4:a6:d0:29:00:2a:f8:f6:9a:43:53:
3b:75:02:c5:d9:d8:eb:e1:48:e7:db:e7:ae:a6:cd:
eb:07:12:b5:04:09:e0:57:bf:78:61:04:c9:81:0d:
84:56:8f:23:1d:46:6f:9b:a5:00:a5:b0:dc:83:25:
2f:93:1d:4c:81:1e:6b:9f:b7:12:16:7f:6b:c5:36:
53:c9:ae:8c:84:83:e5:70:0e:c8:f8:a9:2d:75:bd:
6a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3E:B2:1E:44:65:90:8B:F9:E4:14:5C:5C:2F:9A:60:BC:A8:B1:9E
X509v3 Authority Key Identifier:
keyid:AF:2A:CE:BC:76:1C:AF:37:65:6D:BD:71:53:C0:04:99:FB:73:77:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:0a:51:67:aa:5a:7a:72:44:0a:32:0b:a4:c6:dd:7f:20:a7:
b5:d1:df:82:80:61:5f:2d:84:ee:7f:c8:44:f0:15:1a:91:2b:
a6:2b:a7:de:70:12:b4:32:aa:62:04:9a:96:bc:b0:43:9d:d1:
32:a9:c9:2d:47:87:79:fc:35:e2:b6:7a:46:c2:05:a5:a9:53:
09:54:e6:d3:10:51:57:2a:44:ad:4f:c8:ec:de:69:1a:7b:90:
cc:5e:44:15:49:01:4f:10:7e:ee:01:32:18:83:51:a7:ad:75:
e4:d3:7d:31:49:7a:45:bc:93:20:f7:75:c2:83:74:ae:a8:9d:
16:88:89:d3:89:66:27:7e:60:2b:a2:49:e1:7f:38:da:a5:6f:
77:4b:28:70:c6:25:fb:19:74:c0:22:e1:a8:e5:bf:ca:f7:9f:
b3:71:dd:17:8c:12:8b:49:f5:3d:c6:7c:6d:c2:b5:3a:37:75:
b1:57:56:17:51:44:57:38:72:7d:97:34:be:6e:29:9e:c9:07:
1d:f9:47:82:98:9c:72:b8:6d:d7:6b:e0:3d:b5:71:80:03:66:
42:d4:2a:e6:8e:90:b9:ae:86:db:95:eb:9a:f7:e2:36:03:f8:
64:49:62:69:c0:b1:b7:2c:b5:5b:23:ed:d0:72:0f:1d:33:f5:
7a:35:23:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qjyPcf//x2PBo9CmJG/WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMmFjZWJjNzYxY2FmMzc2NTZkYmQ3MTUzYzAwNDk5ZmI3
Mzc3NzcwHhcNMjUwMTMxMTQwMTAwWhcNMjUwMjAxMTQwMTAwWjAzMTEwLwYDVQQD
Eyg1NDNlYjIxZTQ0NjU5MDhiZjllNDE0NWM1YzJmOWE2MGJjYThiMTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumNxvjdTFuf50rjiSNOKNLP28FlQ
CkCK4SZXWbLgTp3TeXiEPpDGuC0zOcl474QurFvjbf3e5HuECBw1bAeECpR+sP5o
b7XG3cC3zn2QZ53xYXALUjafuVxs9d+7rkic18vaMEPnAhRAQIAez+uk+0v6A61D
n/BX0E/hcIAsEFGVBzacE/DbQdsjPnMi6K44aBcJNIHSPXAyjYSlufFO2rmQjH0v
6pF3tKbQKQAq+PaaQ1M7dQLF2djr4Ujn2+eups3rBxK1BAngV794YQTJgQ2EVo8j
HUZvm6UApbDcgyUvkx1MgR5rn7cSFn9rxTZTya6MhIPlcA7I+Kktdb1q5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQ+sh5EZZCL+eQUXFwvmmC8qLGeMB8GA1UdIwQY
MBaAFK8qzrx2HK83ZW29cVPABJn7c3d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnlyT3ZIWWNyemRsYmIxeFU4QUVtZnR6ZDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85MzgwNGUtYjFmMi00MDM0LTliMjYt
M2NlZjhhOGQ2ZWExLzEvcnlyT3ZIWWNyemRsYmIxeFU4QUVtZnR6ZDNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi85MzgwNGUtYjFmMi00MDM0LTliMjYtM2NlZjhhOGQ2ZWEx
LzEvcnlyT3ZIWWNyemRsYmIxeFU4QUVtZnR6ZDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqwpRZ6pa
enJECjILpMbdfyCntdHfgoBhXy2E7n/IRPAVGpErpiun3nAStDKqYgSalrywQ53R
MqnJLUeHefw14rZ6RsIFpalTCVTm0xBRVypErU/I7N5pGnuQzF5EFUkBTxB+7gEy
GINRp6115NN9MUl6RbyTIPd1woN0rqidFoiJ04lmJ35gK6JJ4X842qVvd0socMYl
+xl0wCLhqOW/yvefs3HdF4wSi0n1PcZ8bcK1Ojd1sVdWF1FEVzhyfZc0vm4pnskH
HflHgpiccrht12vgPbVxgANmQtQq5o6Qua6G25XrmvfiNgP4ZEliacCxtyy1WyPt
0HIPHTP1ejUjvA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:17:17 2025 by rpki-client