Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
File: RYg0xSq-MEJ_CiKqRv09CAntRYU.mft (raw, json)
Hash identifier: gYv0NflxVxNwbmthHYJJCWstO7X/10LCMk1SxLrIvNA=
Subject key identifier: 5B:F7:B5:2C:89:98:B0:ED:8F:83:A6:00:70:F0:47:6E:CC:E1:38:75
Authority key identifier: 45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
Certificate issuer: /CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Certificate serial: 0194BD4E748322A74F277F431B22165513EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: 9EAsH9WiZD4VxilaYIDfYTgwfr8.roa (hash: S6lIJn8kLzJ0SR0mYeMv6RwOAdGOeRdde/Wo386MMZ0=)
2: RYg0xSq-MEJ_CiKqRv09CAntRYU.crl (hash: KSw0YdRuPTnogQqZ3NrnTjeaDHp8vA1ijXuvjFGuLDk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:74:83:22:a7:4f:27:7f:43:1b:22:16:55:13:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=5bf7b52c8998b0ed8f83a60070f0476ecce13875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e0:58:8f:5b:f1:ee:f5:87:3c:8a:e4:e3:a3:
62:1a:4a:8c:26:12:c5:07:f3:7d:c5:83:c9:09:4d:
9f:42:65:f3:c3:03:42:0b:72:a6:71:92:2f:6f:e6:
81:ec:5f:8e:05:89:57:f6:97:c0:43:76:23:24:e9:
01:4a:7f:e8:76:07:9d:b4:09:c0:6e:22:b3:23:b0:
f4:e1:66:49:d3:18:b4:8b:76:9a:8b:38:ec:cf:e7:
d5:a8:e7:76:51:b7:ed:79:6b:9e:21:c4:eb:ee:b5:
ba:f1:83:9a:dd:36:58:9b:8c:2f:db:b4:58:76:bd:
6d:f6:e9:98:fe:b1:98:4f:85:99:b9:b1:f5:9b:12:
dc:e6:e0:65:f1:9c:62:a9:e8:e5:32:59:2a:99:c5:
41:e4:80:93:38:15:c8:57:1e:e4:2c:86:e5:fa:ae:
81:72:48:c1:71:cb:d9:8d:08:97:cc:4a:28:a4:f2:
90:4f:5f:f2:cc:df:7d:96:33:29:fe:38:c7:f4:ec:
18:f9:61:bf:55:a1:02:7c:2d:9b:e6:6a:a4:9f:3c:
e7:d3:9d:37:46:51:9a:73:87:b5:3d:db:36:68:51:
09:b9:aa:dc:0c:24:71:19:6e:23:88:60:04:12:fa:
81:ff:3e:85:5d:2f:6b:a3:d2:fb:17:db:9c:da:12:
b2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F7:B5:2C:89:98:B0:ED:8F:83:A6:00:70:F0:47:6E:CC:E1:38:75
X509v3 Authority Key Identifier:
keyid:45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1f:32:9a:62:bd:7c:a9:78:d3:e3:20:ec:a7:7f:4b:89:fd:
bb:4d:64:fe:45:ae:48:2f:16:53:7f:cf:d6:35:9e:ab:76:fa:
b5:c6:f8:bf:43:30:a6:ef:b3:d3:eb:95:9d:a0:2f:1a:1c:58:
b7:b1:78:6e:85:8c:e8:2e:a1:53:9d:e3:df:7f:55:e4:63:3d:
96:72:1e:67:63:f8:e8:94:04:93:d7:4e:e5:bd:45:21:a0:ef:
b9:b2:b3:d9:66:42:3a:2c:b9:52:19:66:4e:f4:b3:f6:41:63:
12:f7:ff:69:4d:50:c1:fd:23:06:f8:be:8c:bc:25:69:d8:62:
24:73:33:6c:6a:9b:47:23:9e:8f:39:0a:99:a0:53:03:89:15:
78:50:fb:90:8c:77:8c:79:03:38:67:c1:8b:d2:1d:29:25:ee:
a4:e0:a9:95:10:73:dc:e1:f6:db:9d:2d:f2:e3:69:d7:98:49:
a9:23:c7:2c:23:37:05:39:b3:41:04:ba:9d:2b:d7:64:ea:29:
c4:2c:14:66:f5:ff:54:6a:db:1b:a6:5f:e4:a8:04:cd:d8:fd:
f6:4d:b7:b0:03:8f:9d:2c:30:f7:99:1c:3a:06:bb:36:9c:15:
15:82:07:44:d6:34:4c:b6:b6:f2:a0:52:01:7a:38:b8:b4:37:
30:d3:46:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TnSDIqdPJ39DGyIWVRPqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ODgzNGM1MmFiZTMwNDI3ZjBhMjJhYTQ2ZmQzZDA4MDll
ZDQ1ODUwHhcNMjUwMTMxMTcwMDIyWhcNMjUwMjAxMTcwMDIyWjAzMTEwLwYDVQQD
Eyg1YmY3YjUyYzg5OThiMGVkOGY4M2E2MDA3MGYwNDc2ZWNjZTEzODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeBYj1vx7vWHPIrk46NiGkqMJhLF
B/N9xYPJCU2fQmXzwwNCC3KmcZIvb+aB7F+OBYlX9pfAQ3YjJOkBSn/odgedtAnA
biKzI7D04WZJ0xi0i3aaizjsz+fVqOd2UbfteWueIcTr7rW68YOa3TZYm4wv27RY
dr1t9umY/rGYT4WZubH1mxLc5uBl8ZxiqejlMlkqmcVB5ICTOBXIVx7kLIbl+q6B
ckjBccvZjQiXzEoopPKQT1/yzN99ljMp/jjH9OwY+WG/VaECfC2b5mqknzzn0503
RlGac4e1Pds2aFEJuarcDCRxGW4jiGAEEvqB/z6FXS9ro9L7F9uc2hKyUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFv3tSyJmLDtj4OmAHDwR27M4Th1MB8GA1UdIwQY
MBaAFEWINMUqvjBCfwoiqkb9PQgJ7UWFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUllnMHhTcS1NRUpfQ2lLcVJ2MDlDQW50UllVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jOTVhMjQtMjI2Yy00NzZhLWFkZGIt
YTMxMTQzNDYzYmU5LzEvUllnMHhTcS1NRUpfQ2lLcVJ2MDlDQW50UllVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9jOTVhMjQtMjI2Yy00NzZhLWFkZGItYTMxMTQzNDYzYmU5
LzEvUllnMHhTcS1NRUpfQ2lLcVJ2MDlDQW50UllVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKB8ymmK9
fKl40+Mg7Kd/S4n9u01k/kWuSC8WU3/P1jWeq3b6tcb4v0Mwpu+z0+uVnaAvGhxY
t7F4boWM6C6hU53j339V5GM9lnIeZ2P46JQEk9dO5b1FIaDvubKz2WZCOiy5Uhlm
TvSz9kFjEvf/aU1Qwf0jBvi+jLwladhiJHMzbGqbRyOejzkKmaBTA4kVeFD7kIx3
jHkDOGfBi9IdKSXupOCplRBz3OH2250t8uNp15hJqSPHLCM3BTmzQQS6nSvXZOop
xCwUZvX/VGrbG6Zf5KgEzdj99k23sAOPnSww95kcOga7NpwVFYIHRNY0TLa28qBS
AXo4uLQ3MNNGtw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:58 2025 by rpki-client