Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
File: ryv4L9oo4I9iKUYLouJBQUZDMeU.mft (raw, json)
Hash identifier: 9cTRtFxsn41oxdJdumY8JF1TMe1wKBCnVkWciZxa/Is=
Subject key identifier: AF:C0:9F:81:43:DD:E6:88:D6:A5:8D:22:91:09:69:41:3D:F7:91:F1
Authority key identifier: AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
Certificate issuer: /CN=af2bf82fda28e08f6229460ba2e24141464331e5
Certificate serial: 0194BD4EA5427016110CFD6DF20EEA88F27E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
Manifest number: 1418
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: TCLTZN7AGKUB7xzA7aAzZJCLGEY.roa (hash: eeX0IhSYNZ9FE4vi+lYEY7nwkpcGZsK3aVToAyhv5yM=)
2: ryv4L9oo4I9iKUYLouJBQUZDMeU.crl (hash: vooyBuZ3zVVlfG4ZaANEfEgIU6k9r6kwCvhiAFyb2GY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a5:42:70:16:11:0c:fd:6d:f2:0e:ea:88:f2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2bf82fda28e08f6229460ba2e24141464331e5
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=afc09f8143dde688d6a58d22910969413df791f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:d4:f7:ba:ba:9e:71:4f:8e:21:e2:09:d7:
56:c4:6f:ee:bb:9d:0f:64:e2:63:7a:86:24:1c:9a:
44:15:3b:41:d9:8e:b5:2c:80:c4:8c:44:31:5b:20:
04:3d:ef:a5:0c:e3:63:3a:fc:38:a9:1d:5d:b3:c5:
d2:a9:04:7e:7b:93:ac:60:19:56:47:c1:bd:51:8c:
de:72:ac:f0:f5:6b:33:8a:9f:56:96:65:57:ef:b7:
15:10:62:f2:eb:f2:9c:6e:bd:e7:4a:a1:90:b8:dd:
97:1b:82:7a:49:a3:54:0d:2a:8e:d4:b2:37:b8:d4:
5a:ed:cc:43:07:f9:6e:6b:f7:25:32:f6:a5:0f:c7:
dd:2f:ec:2c:f8:be:9b:2f:69:8b:2a:5f:84:ae:90:
c5:3b:5e:84:3c:50:cb:6c:32:5f:00:53:2a:1d:bb:
41:75:ea:a3:a1:e0:58:9b:03:c0:52:e2:57:90:63:
ba:25:76:f1:2a:bd:8e:4d:c2:16:5f:f3:51:63:82:
b4:5f:f8:51:8e:56:c3:4c:21:a5:61:f8:1a:1b:e8:
bc:ea:c2:92:98:33:55:7b:2d:a1:3f:54:8f:f3:85:
9b:d0:0f:fe:0a:af:fc:eb:d1:00:1b:e9:47:18:28:
3f:9a:ca:76:a9:7a:14:bb:a3:55:33:03:38:9c:1a:
73:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C0:9F:81:43:DD:E6:88:D6:A5:8D:22:91:09:69:41:3D:F7:91:F1
X509v3 Authority Key Identifier:
keyid:AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b9:ba:2f:ec:f5:56:e8:74:91:7b:83:5b:a2:43:3b:ac:17:
6a:0e:bc:45:9f:1d:74:bf:3d:e8:f5:8d:ae:53:18:9f:42:10:
dd:5b:19:49:d9:ca:64:ec:84:bb:c5:46:f2:7b:f3:d4:f6:cd:
2b:eb:97:33:19:ec:b6:7a:c6:fa:4e:94:f4:3e:a3:ae:67:f2:
ba:64:c7:03:d9:b1:64:19:f0:4f:10:f8:e7:b9:98:59:51:99:
4c:ae:25:f1:70:9b:9d:48:ba:15:33:7a:84:31:5d:8d:ab:08:
0c:a6:dd:22:d2:16:50:49:34:f2:c8:7b:14:02:c6:10:c7:72:
dc:8a:be:0c:36:42:fe:c6:c2:bd:ec:78:e7:4e:bf:2d:6d:7c:
f4:87:8c:32:1f:05:98:54:84:2a:d5:16:ed:b6:98:3c:6d:dc:
14:3f:38:0c:3f:be:42:62:71:97:6b:b7:e0:1b:ba:03:8c:a5:
51:da:2f:d5:56:d2:e5:40:eb:67:f4:b7:02:24:a6:e3:4f:de:
c3:37:0b:e6:7f:ed:fe:ff:7b:f2:07:a0:8c:d6:94:79:05:65:
75:2f:a0:ca:2d:de:fb:26:90:d6:9f:a4:40:76:c9:4b:4c:cb:
5e:3f:21:0b:e2:57:77:74:0f:01:2a:cc:b5:59:d9:ea:ec:f1:
37:1d:42:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TqVCcBYRDP1t8g7qiPJ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMmJmODJmZGEyOGUwOGY2MjI5NDYwYmEyZTI0MTQxNDY0
MzMxZTUwHhcNMjUwMTMxMTcwMDM1WhcNMjUwMjAxMTcwMDM1WjAzMTEwLwYDVQQD
EyhhZmMwOWY4MTQzZGRlNjg4ZDZhNThkMjI5MTA5Njk0MTNkZjc5MWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKXU97q6nnFPjiHiCddWxG/uu50P
ZOJjeoYkHJpEFTtB2Y61LIDEjEQxWyAEPe+lDONjOvw4qR1ds8XSqQR+e5OsYBlW
R8G9UYzecqzw9Wszip9WlmVX77cVEGLy6/Kcbr3nSqGQuN2XG4J6SaNUDSqO1LI3
uNRa7cxDB/lua/clMvalD8fdL+ws+L6bL2mLKl+ErpDFO16EPFDLbDJfAFMqHbtB
deqjoeBYmwPAUuJXkGO6JXbxKr2OTcIWX/NRY4K0X/hRjlbDTCGlYfgaG+i86sKS
mDNVey2hP1SP84Wb0A/+Cq/869EAG+lHGCg/msp2qXoUu6NVMwM4nBpzQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/An4FD3eaI1qWNIpEJaUE995HxMB8GA1UdIwQY
MBaAFK8r+C/aKOCPYilGC6LiQUFGQzHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnl2NEw5b280STlpS1VZTG91SkJRVVpETWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zYjkxYTItZDJhNy00ZTY5LTljODYt
YmRmMzkxN2E5MjY3LzEvcnl2NEw5b280STlpS1VZTG91SkJRVVpETWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zYjkxYTItZDJhNy00ZTY5LTljODYtYmRmMzkxN2E5MjY3
LzEvcnl2NEw5b280STlpS1VZTG91SkJRVVpETWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7m6L+z1
Vuh0kXuDW6JDO6wXag68RZ8ddL896PWNrlMYn0IQ3VsZSdnKZOyEu8VG8nvz1PbN
K+uXMxnstnrG+k6U9D6jrmfyumTHA9mxZBnwTxD457mYWVGZTK4l8XCbnUi6FTN6
hDFdjasIDKbdItIWUEk08sh7FALGEMdy3Iq+DDZC/sbCvex4506/LW189IeMMh8F
mFSEKtUW7baYPG3cFD84DD++QmJxl2u34Bu6A4ylUdov1VbS5UDrZ/S3AiSm40/e
wzcL5n/t/v978gegjNaUeQVldS+gyi3e+yaQ1p+kQHbJS0zLXj8hC+JXd3QPASrM
tVnZ6uzxNx1CtA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:11 2025 by rpki-client