Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
File: CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json)
Hash identifier: D8gh2v86s4fnf+HPZdhjwxo216eunurqTxnGvr4J+is=
Subject key identifier: AD:87:F2:F4:13:D3:65:0B:59:56:04:85:F4:BA:9F:9F:7A:7B:C3:E2
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 0194BCA9E89BC097CA3674EDE8D02EC03A4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
Manifest number: 08C8
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: vsDnm7hfGTK5FtolRUEgyJE7mZ7gp/xHHpmGf2456ao=)
2: I8Nmh37tFNFzjXmw0t9bEIAE8Eo.roa (hash: YNeRziRUhmhLTOn+PVSXP3A/jlP0J/ORfeC6qUdAH/s=)
3: JSU_Gc7eqTUqpDFkA2FIvbeqiUE.roa (hash: SjI9SwLiNWQSlSCpLAULn3MZkkJhenDEWQ7CDz2aZ/E=)
4: bu8KznYx0QOfA9r3NfTHKNDotjg.roa (hash: YHg8diII5N5WBFanvQLz6TPq9DMUYRhzlxmLWT5bEpk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e8:9b:c0:97:ca:36:74:ed:e8:d0:2e:c0:3a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=ad87f2f413d3650b59560485f4ba9f9f7a7bc3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f3:3f:d4:dd:a8:db:da:0d:73:df:1e:9b:4d:
75:88:9a:0c:05:f1:b9:ef:28:bd:a7:af:71:60:71:
32:b5:3f:8b:8d:9e:c9:c1:1e:9e:26:d8:2b:0a:25:
48:e9:dc:1f:f0:35:fa:68:2c:06:ab:7d:14:39:af:
7d:9a:f1:9c:54:39:b9:1c:af:f3:16:9e:47:59:70:
ba:12:c1:b1:75:c0:f7:f3:13:30:26:f8:47:6d:b4:
7a:c7:0a:64:02:aa:8a:54:07:0a:19:ac:82:ff:65:
a4:e5:70:8d:d4:fd:31:69:05:fa:5f:3d:c5:7f:d7:
3a:06:8b:48:ac:f5:d2:39:d0:62:d6:08:22:09:53:
5b:28:db:d8:49:4d:6e:2e:12:d7:d7:66:b6:1e:9a:
a2:4c:e3:05:e6:39:02:c7:dc:70:94:af:09:a7:e2:
08:90:db:70:a8:6e:22:4d:a0:cc:df:3a:c4:a7:ec:
91:a7:cb:c9:26:8a:51:1a:68:b9:73:0c:ac:7a:ad:
80:af:e4:87:4b:56:60:c7:27:cb:fe:ec:9e:e5:22:
27:aa:d8:aa:a0:bb:bd:f6:83:1d:06:9c:da:6b:7d:
b6:ef:43:01:ca:7d:f5:fe:64:da:ef:7a:f8:60:a6:
51:27:73:5c:28:4b:14:c0:6b:68:18:a3:d6:6b:b8:
98:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:87:F2:F4:13:D3:65:0B:59:56:04:85:F4:BA:9F:9F:7A:7B:C3:E2
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:79:c1:19:17:77:4d:c1:55:fc:36:f7:84:ea:31:bf:71:3d:
76:e6:3d:fc:cf:ad:58:df:2f:41:c3:cd:72:04:4c:99:76:81:
3d:3b:88:2d:ef:d3:ac:65:83:52:21:1d:c3:f8:97:31:16:85:
31:1c:51:31:48:fa:42:e8:b3:b2:ec:19:ae:2a:bf:75:bf:23:
c1:fe:32:c7:a7:7e:1a:b9:65:0d:ec:74:4e:0c:29:b7:8c:cd:
9f:1e:e9:db:8f:3f:29:1f:4f:9f:9e:ce:0e:1e:e8:77:5d:a2:
9c:4d:68:4c:2e:1f:da:8d:e6:ea:ed:58:bc:9d:a4:fb:84:0d:
45:e7:80:71:65:98:98:b5:c7:86:db:25:e2:b4:9c:e5:39:62:
81:f0:87:f7:cc:6a:17:68:6b:4c:15:20:7c:f8:42:a9:b9:bf:
c9:c0:b3:0e:d1:df:3b:79:d9:01:7e:6f:3f:76:fb:77:dc:03:
84:f2:e6:54:68:1f:f4:45:98:20:c6:fb:e0:d5:a2:77:f7:6c:
92:e6:b6:b5:a9:ac:d0:5e:1d:70:dc:17:96:bf:a9:dd:d4:34:
38:be:f3:51:40:8e:a1:32:6c:b1:3a:a0:f2:71:34:84:b4:a1:
ef:20:64:52:65:2a:f7:23:b9:4a:e2:c9:bf:e0:6d:8f:d9:ac:
88:33:93:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:19 2025 by rpki-client