Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft
File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json)
Hash identifier: OlacRpWuSp/3W6pojZW81WniAzi1Iu1gWH+mhAQsFEY=
Subject key identifier: EF:A2:DC:AF:C3:04:40:D5:00:9A:A0:A8:F5:20:D4:12:AD:D9:B2:ED
Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2
Certificate serial: 0194BBCE1005271BD4413195B101906F5124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft
Manifest number: 1437
Signing time: Fri 31 Jan 2025 10:00:31 +0000
Manifest this update: Fri 31 Jan 2025 10:00:31 +0000
Manifest next update: Sat 01 Feb 2025 10:00:31 +0000
Files and hashes: 1: 9lwL98-HDVBrZzYLRCpSdOAFXpo.roa (hash: Za/9eX9VNb3FiSxJk6MAE/CpFGWxRO5mjghE1elRivc=)
2: B0iUIhkwv2ZZdyXRyu9yUh7Z61o.roa (hash: F6O6OkDRyyyGqFimHsLztSYsh0AUNFPNkRW3jSPwvEw=)
3: I1EoUAseUd3MHO-sI_txqICBiwc.roa (hash: khM+HdjIw9WozXCqEk/wtCOtMrpNfxWXErjSXn8BT5M=)
4: KQ7nGqqdl8DwDw35UdDbOJPZhfY.roa (hash: 8pIf1gsysAeCO62ayw5k2bU+b1g8t0mrR6+zNCtTibQ=)
5: LS_oKjOyENRZwn9y786G7x_fDEc.roa (hash: qwrjawF9Z67WE+ivjm8mPIl3xqaLReHxca9+SNnwKPE=)
6: Pvub5ztTS47f0XG6tBZE9ngX8Rw.roa (hash: euQ5dqT6xwCfoTsPu9P7kfQ9UGdbPzkkEJWSyFwCBTw=)
7: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: 37RtfCRNsuBY6KLurZVhQn3Uvetj4pGbrwRpxSzszC8=)
8: _LfqsdVGhW4A1SPJtiQ2NnVoWys.roa (hash: +dTCK/x9fE8c7deSCLKMT+2K8D0PbHFEzGK9fqz9QgI=)
9: lqxGizsVmZbvi7xpd3yzs2I4ILw.roa (hash: aTi4SECMvkjegR9/FyzL9HTmeGkM0AsiVgyipWCsYrY=)
10: sFnlwbiQ75y8_114DKwn3kP_iWc.roa (hash: dkHr9wKemXLLSQfaJK2+kCvWwELtA6u+nMBynz2rXgQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:10:05:27:1b:d4:41:31:95:b1:01:90:6f:51:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2
Validity
Not Before: Jan 31 10:00:31 2025 GMT
Not After : Feb 1 10:00:31 2025 GMT
Subject: CN=efa2dcafc30440d5009aa0a8f520d412add9b2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cb:7f:64:4c:77:69:f0:3e:3d:80:48:0a:fe:
24:35:22:5b:40:21:c5:ee:60:98:b8:fb:80:f7:10:
a2:56:a2:b1:25:81:7a:76:21:78:5b:ca:31:55:2d:
9f:91:40:90:9c:32:b9:2f:a8:9d:35:cb:00:c6:d6:
51:36:68:10:ad:c5:17:46:a6:19:98:f0:0d:ac:b0:
f6:d3:05:75:3f:ff:bd:c5:c5:35:f5:db:0a:cb:21:
33:94:e2:a6:37:45:53:98:f5:7d:96:c9:a4:7d:26:
bb:30:d0:df:af:59:62:12:ce:a8:29:cc:11:20:dc:
26:d2:92:53:12:c2:bc:d5:50:c7:31:fd:a0:ad:a2:
7e:7f:e1:be:0c:fb:01:19:a5:46:de:9f:8d:6f:57:
39:6a:41:ca:2e:f0:78:ff:cd:8b:70:c9:37:a5:00:
03:a6:45:8f:7c:0c:b2:3b:db:47:25:72:3e:25:54:
e7:6e:d5:19:22:fa:b4:b9:de:f8:ba:31:8c:a9:b5:
e7:29:30:58:d7:cf:c5:1b:ee:36:f0:a6:74:0b:58:
4d:28:85:fd:2c:63:e6:d5:ec:8d:ed:55:41:0c:8b:
3b:2b:0a:08:8e:ca:67:52:dd:48:e2:a0:66:62:d4:
83:a6:4f:99:55:06:02:2e:1e:63:e1:00:7b:58:7c:
65:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A2:DC:AF:C3:04:40:D5:00:9A:A0:A8:F5:20:D4:12:AD:D9:B2:ED
X509v3 Authority Key Identifier:
keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:62:bc:1f:e2:2a:e6:77:ac:94:5a:d1:af:1b:f9:9a:54:0c:
7e:14:6b:ae:34:0c:92:8f:2b:47:27:f9:84:6e:08:6e:55:59:
93:88:e5:2a:13:9c:6e:ac:2e:d3:2b:c2:91:94:8a:93:74:29:
ed:13:10:79:8a:b8:d0:e6:fd:ed:c0:60:9c:3d:45:db:19:6a:
67:d3:f5:7a:43:b4:f1:7b:ed:86:c5:27:07:6b:4f:a3:53:f9:
0b:4d:45:ac:66:b0:e0:18:44:aa:2e:8b:39:0d:1d:08:f9:25:
0b:ff:af:e9:ad:4a:1f:7c:e8:11:15:46:57:c1:09:49:9e:64:
a0:0e:b5:87:c0:7c:bc:65:a9:61:2b:89:5e:51:18:0e:90:af:
e2:00:2a:29:d3:73:a1:10:5f:e6:cb:9b:66:1b:2b:e4:c5:b5:
4e:de:6d:5e:06:ec:cd:ef:bc:bc:d4:b8:1a:5b:ad:b8:29:52:
1a:17:e4:b4:2a:49:a6:37:42:a8:83:fc:32:de:38:98:e3:85:
b8:f8:c9:03:81:37:93:08:5d:c0:67:76:c7:fa:09:6c:76:b9:
3c:71:4c:29:d2:1c:a3:ad:20:12:a7:ee:6c:5b:7a:d1:5b:4f:
60:a0:0b:5b:ae:91:3f:ff:84:74:5b:a8:98:76:a8:07:7e:a6:
c2:64:ab:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:24 2025 by rpki-client