Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
File: SROyYa2_ee42pqOt-mh6fsZYIQs.mft (raw, json)
Hash identifier: 3LkfbQI8SJHGjcWOQyAuSWwWdWSol/i2nsZn5FbkbA8=
Subject key identifier: 9A:28:94:5F:48:FA:AA:49:9F:E3:AF:51:A2:A9:CA:56:8E:37:F3:85
Authority key identifier: 49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
Certificate issuer: /CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Certificate serial: 0194BD4E766342AD1044DF6086CD5B06581B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
Manifest number: 0B2A
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: 9VMEesSV6a-x_SjygxcaosIGoNs.roa (hash: j886WgvsxRYSzK/QB3dbJNQTgLbqJaUrZ8NkjBVnb/g=)
2: SROyYa2_ee42pqOt-mh6fsZYIQs.crl (hash: 5LyvhL5mCsO+DhIy35L7YTxsyJ56oq4pwN5XIgFt5dk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:76:63:42:ad:10:44:df:60:86:cd:5b:06:58:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=9a28945f48faaa499fe3af51a2a9ca568e37f385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d8:66:b2:ce:58:08:c6:50:52:fc:66:5d:d0:
e5:4b:50:9b:96:2d:26:16:b1:36:a1:6f:51:ca:e2:
ef:66:46:b5:ce:8c:1d:b0:d4:87:6b:81:f1:61:b8:
10:c2:ae:fc:0e:31:42:50:72:c1:a6:30:e5:c6:68:
f2:ef:3b:86:a1:59:a2:9e:53:17:0b:53:b3:00:39:
2c:ac:b3:3a:44:9e:01:a1:8a:5e:65:9d:3d:61:b0:
92:3f:a2:6c:bb:99:89:79:98:a9:a9:2b:a8:e5:29:
0e:96:dd:44:d7:82:98:c8:07:43:6d:f3:c2:f1:83:
82:62:de:35:e6:35:ba:d6:68:d9:18:78:3f:79:95:
b6:74:15:19:b9:7c:fb:7a:27:40:4a:22:88:4f:0a:
4a:a2:d4:b8:2f:38:af:e3:7e:4f:90:47:2a:4b:dd:
79:04:8e:a7:ba:27:b8:cb:83:5e:b7:92:8b:6d:ec:
7e:6c:08:77:8e:f3:3c:ca:1a:17:eb:18:ed:cb:b3:
f4:cf:13:71:58:ee:67:52:a5:67:5d:68:d6:a2:f1:
99:42:71:b2:2d:bd:3d:26:a1:19:82:70:f9:b1:06:
de:17:10:c1:d5:8d:f3:89:8a:0c:f6:70:01:fa:bb:
6e:64:96:fc:dc:a6:ab:c2:33:33:60:10:98:32:01:
25:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:28:94:5F:48:FA:AA:49:9F:E3:AF:51:A2:A9:CA:56:8E:37:F3:85
X509v3 Authority Key Identifier:
keyid:49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e7:51:a9:6c:4c:01:b8:61:c4:b5:0f:8b:29:d8:a8:e9:5d:
86:d7:c4:20:5f:ca:88:44:39:40:22:4d:8b:0f:a4:bb:07:31:
f1:02:84:e0:df:8f:40:25:20:a7:92:f0:ed:ab:9c:92:97:4f:
0a:52:94:49:0d:6e:76:67:46:0d:1c:fc:a4:e8:42:74:50:12:
10:d0:57:c8:fc:a6:34:ae:93:a7:9e:a2:da:2b:52:5c:60:0e:
27:5f:39:4e:5d:5d:4e:c6:22:d8:cc:16:23:52:c8:0c:f8:d1:
d5:ae:c9:be:29:1e:9f:32:f4:c9:2b:ff:f1:ca:eb:32:48:c7:
3b:4a:ac:4d:06:60:79:f3:30:ff:49:80:e4:34:e0:f6:0f:13:
76:02:62:97:a7:fb:7e:e6:01:b3:c9:7a:21:12:06:7c:2e:f1:
62:5e:d3:9c:8b:cf:ff:28:33:e7:2f:97:44:98:9d:d1:11:05:
25:36:08:9b:0b:80:70:3a:a0:53:b5:4e:76:7a:12:f7:6f:6a:
18:b9:fd:6c:4d:8a:28:e1:6f:c7:d3:07:ff:d5:6e:20:48:63:
66:81:37:db:3b:f0:17:e9:5c:d9:d2:03:82:c9:6f:da:84:ac:
1e:48:8d:29:a5:5b:57:68:56:86:e4:3a:eb:2d:38:93:3a:b8:
ed:f5:a6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:12 2025 by rpki-client