Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
File: RyjroAE1nN1Bg0b2UcChh8ifur8.mft (raw, json)
Hash identifier: FKWxpUgZLzkTskRagazUEpmnTMvD7vto7sw6W2Wtw3Q=
Subject key identifier: 4B:E6:7F:BA:28:44:88:1F:64:68:F2:7C:55:80:66:A8:90:C9:63:FE
Authority key identifier: 47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
Certificate issuer: /CN=4728eba001359cdd418346f651c0a187c89fbabf
Certificate serial: 0194BCA9F52CD946070F1B25A1FBC88554FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: RyjroAE1nN1Bg0b2UcChh8ifur8.crl (hash: 9NRaPZJmy/dJ//2lnddwR1eu3Hg+K+JV44dkpS3pghs=)
2: cBEyoeOIQqPilDWr0_I994MOPuI.roa (hash: isPNyBmr4XWxQFWKBdpcs0T6FtXR/DTgtbw1P60u2i4=)
3: i2M6rq1mSxd454EFcJs47ZfxfI8.roa (hash: x+6kMu73XXcjQUZNpiQj7d3/5eInEGiFNdUUMK9AZB0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f5:2c:d9:46:07:0f:1b:25:a1:fb:c8:85:54:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4728eba001359cdd418346f651c0a187c89fbabf
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=4be67fba2844881f6468f27c558066a890c963fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:af:e7:43:5e:d6:9a:8b:73:d9:77:a1:0b:8a:
b8:1f:a4:33:66:9e:81:38:20:4b:39:c6:10:a8:9e:
3f:d3:46:ce:f6:e5:95:86:4c:82:50:bd:65:16:4a:
26:5f:b2:84:80:61:a9:4a:b7:33:39:e5:1a:a7:ae:
4b:28:41:84:fb:f7:98:8c:22:2e:56:06:36:ea:f2:
a1:7f:0e:d7:46:c4:38:c1:57:00:c3:6a:d7:75:a7:
0c:ea:3f:62:f2:f5:27:a9:27:c7:96:91:e1:3e:1b:
79:0b:b5:1d:c7:9f:f6:1c:44:35:73:87:ca:b2:dc:
54:8e:b0:5b:ad:64:93:35:1f:10:3d:15:9c:e5:f7:
31:44:c6:a2:b5:01:b7:72:27:3f:41:4c:71:6d:4f:
f7:56:fc:c2:c1:7b:83:cf:f8:31:28:88:24:c0:86:
35:4d:53:82:ed:1c:ec:59:2e:a9:45:aa:ee:78:cf:
13:fe:1f:26:cd:9d:c8:ab:14:b5:c1:5d:59:23:6d:
43:3b:0a:9c:03:93:50:f9:d9:d3:ac:f2:2d:c4:ff:
13:1f:1f:aa:13:e5:c3:a9:98:36:bc:8d:f1:47:16:
f8:6f:d0:61:49:ba:20:1a:ac:d3:46:44:86:80:a4:
5c:8b:f0:7c:4d:53:1c:b2:a7:66:db:88:7f:e0:fa:
74:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E6:7F:BA:28:44:88:1F:64:68:F2:7C:55:80:66:A8:90:C9:63:FE
X509v3 Authority Key Identifier:
keyid:47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:03:87:af:27:6c:41:ba:0f:d3:19:d4:75:cb:c6:98:c3:80:
8d:d0:e3:52:90:33:18:ec:8e:3f:2b:1a:f9:0d:76:02:4d:cc:
e3:ab:b8:f5:95:46:9e:f0:2d:98:ab:5b:d3:63:46:90:61:26:
bc:da:4a:4f:90:32:92:63:18:ea:40:b3:f9:62:dc:92:10:41:
69:41:fd:54:22:3c:06:6c:e0:7f:bc:ee:26:02:32:14:fb:ac:
23:33:a4:0c:b3:6f:7e:45:4c:fb:e9:08:18:5f:2f:78:58:ef:
5e:ce:9c:64:e2:be:e4:05:f5:2e:aa:39:7a:65:95:e0:80:60:
37:b6:a8:e0:1b:5c:1a:83:4a:86:64:db:e7:a1:06:07:03:ca:
4a:2e:b7:59:08:6e:54:6a:05:84:3c:46:f0:f7:35:27:99:61:
1e:9b:76:5b:8b:26:17:d2:37:5e:62:9f:8e:b7:b9:f1:10:ff:
ae:b6:82:bb:ef:99:31:71:54:a2:84:1c:ca:3f:fe:8a:c1:43:
31:07:b3:dc:34:f1:51:ba:41:ca:b8:2f:c6:cf:87:19:4c:1d:
c7:2f:0a:74:e4:51:bd:5a:2e:b8:4e:4e:29:cd:0a:7e:da:3c:
f2:c4:d3:db:20:1d:39:cd:d3:70:73:46:48:1f:c8:49:54:ed:
24:4e:1f:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qfUs2UYHDxslofvIhVT7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MjhlYmEwMDEzNTljZGQ0MTgzNDZmNjUxYzBhMTg3Yzg5
ZmJhYmYwHhcNMjUwMTMxMTQwMDQyWhcNMjUwMjAxMTQwMDQyWjAzMTEwLwYDVQQD
Eyg0YmU2N2ZiYTI4NDQ4ODFmNjQ2OGYyN2M1NTgwNjZhODkwYzk2M2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa/nQ17Wmotz2XehC4q4H6QzZp6B
OCBLOcYQqJ4/00bO9uWVhkyCUL1lFkomX7KEgGGpSrczOeUap65LKEGE+/eYjCIu
VgY26vKhfw7XRsQ4wVcAw2rXdacM6j9i8vUnqSfHlpHhPht5C7Udx5/2HEQ1c4fK
stxUjrBbrWSTNR8QPRWc5fcxRMaitQG3cic/QUxxbU/3VvzCwXuDz/gxKIgkwIY1
TVOC7RzsWS6pRarueM8T/h8mzZ3IqxS1wV1ZI21DOwqcA5NQ+dnTrPItxP8THx+q
E+XDqZg2vI3xRxb4b9BhSbogGqzTRkSGgKRci/B8TVMcsqdm24h/4Pp0qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvmf7ooRIgfZGjyfFWAZqiQyWP+MB8GA1UdIwQY
MBaAFEco66ABNZzdQYNG9lHAoYfIn7q/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnlqcm9BRTFuTjFCZzBiMlVjQ2hoOGlmdXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8yOGM1YjYtMjNmMC00NWZiLTliMjEt
Mjk0ZDljZjc5ZTJlLzEvUnlqcm9BRTFuTjFCZzBiMlVjQ2hoOGlmdXI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8yOGM1YjYtMjNmMC00NWZiLTliMjEtMjk0ZDljZjc5ZTJl
LzEvUnlqcm9BRTFuTjFCZzBiMlVjQ2hoOGlmdXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgOHryds
QboP0xnUdcvGmMOAjdDjUpAzGOyOPysa+Q12Ak3M46u49ZVGnvAtmKtb02NGkGEm
vNpKT5AykmMY6kCz+WLckhBBaUH9VCI8Bmzgf7zuJgIyFPusIzOkDLNvfkVM++kI
GF8veFjvXs6cZOK+5AX1Lqo5emWV4IBgN7ao4BtcGoNKhmTb56EGBwPKSi63WQhu
VGoFhDxG8Pc1J5lhHpt2W4smF9I3XmKfjre58RD/rraCu++ZMXFUooQcyj/+isFD
MQez3DTxUbpByrgvxs+HGUwdxy8KdORRvVouuE5OKc0Kfto88sTT2yAdOc3TcHNG
SB/ISVTtJE4fNg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:37 2025 by rpki-client