Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
File: ryNYW_zdBhypRuLZ6ouX5FucMdY.mft (raw, json)
Hash identifier: Z/GQSPMAm6yw9Pb6vRgfl2AQPaJgYe2kD4lU/fIsAtM=
Subject key identifier: A7:D2:84:6E:E8:34:2E:A7:C3:E0:0E:16:6B:38:48:F0:F3:F1:BD:A1
Authority key identifier: AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
Certificate issuer: /CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Certificate serial: 0194BC731E4F806BA2312534A026A9EADCB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
Manifest number: 1390
Signing time: Fri 31 Jan 2025 13:00:48 +0000
Manifest this update: Fri 31 Jan 2025 13:00:48 +0000
Manifest next update: Sat 01 Feb 2025 13:00:48 +0000
Files and hashes: 1: SeufauaKg6Zpqe8UY9h9PfD262s.roa (hash: f9EK4NXbDLFnpfyftEzrpn9paJMCGETNbGO1nrHQTYE=)
2: ryNYW_zdBhypRuLZ6ouX5FucMdY.crl (hash: C5uNDdC7kOLnI8L8MrDFlw5boOb61dTbvVCBvHM6+Tc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1e:4f:80:6b:a2:31:25:34:a0:26:a9:ea:dc:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Validity
Not Before: Jan 31 13:00:48 2025 GMT
Not After : Feb 1 13:00:48 2025 GMT
Subject: CN=a7d2846ee8342ea7c3e00e166b3848f0f3f1bda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:95:ea:55:94:ed:aa:64:ad:c0:97:10:08:08:
97:c0:1f:6f:6f:a8:73:f5:0e:61:7f:ea:1b:9b:f2:
2c:27:44:e6:af:c4:24:65:12:d7:c3:a7:2e:56:e6:
52:37:da:ae:79:f7:6f:bb:1a:1b:28:6a:1b:32:29:
96:56:d9:9f:a5:8b:1b:6f:5d:db:e2:ba:b1:37:be:
38:1d:52:00:dc:8a:10:86:ac:fd:0e:5d:d2:26:5a:
ce:5a:01:65:d6:fd:9b:28:48:33:39:eb:3c:45:62:
79:8f:90:91:df:61:70:41:2e:53:a9:f7:c8:76:8d:
a9:a2:9a:28:2e:8b:a0:a2:b4:4b:42:57:43:bc:81:
d9:89:e2:15:07:4d:2d:0b:7a:b0:aa:a8:99:15:d1:
c7:c4:c4:29:7e:cf:0e:2c:19:14:ec:b9:8c:55:3c:
6a:02:83:ae:88:80:4f:60:a7:2f:0f:c3:69:61:2c:
8c:79:74:32:15:7d:2e:4e:f4:8c:f7:54:fc:6a:04:
a8:3a:5b:cc:d4:c0:77:72:9b:93:70:f4:38:46:53:
23:32:fb:3d:94:24:78:2d:43:ca:5b:ec:e3:d8:38:
0c:54:a1:28:c5:b4:21:b4:5b:25:06:14:6d:4a:1e:
56:c9:2e:ec:c6:17:82:59:c4:61:e3:fe:f5:3e:3b:
94:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D2:84:6E:E8:34:2E:A7:C3:E0:0E:16:6B:38:48:F0:F3:F1:BD:A1
X509v3 Authority Key Identifier:
keyid:AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:60:42:23:f6:f6:ff:8f:11:40:87:2b:35:77:e8:ad:e6:e8:
ec:b8:53:65:c4:96:bc:67:fa:89:ff:5f:fc:95:bf:cd:69:d1:
d5:a6:f6:0d:d6:fc:5a:10:16:ee:ff:04:e1:0e:72:c1:c3:9b:
46:2a:c2:99:02:2f:79:ed:75:54:b2:8f:05:74:bc:11:7a:3e:
24:17:d2:73:ae:4d:e4:bd:5d:a5:3e:fd:8c:cd:8b:b3:7a:89:
24:4e:ed:1a:c5:e0:3e:ec:d3:c6:00:2f:9c:95:ab:d9:27:d5:
68:81:0d:7f:8f:72:3b:5f:fc:be:e3:65:42:2a:af:4f:f6:0b:
fa:49:f2:da:bd:76:3e:68:2b:e6:f7:a1:57:e5:16:8b:2b:b6:
7a:2b:b6:0c:c1:f6:2f:d0:68:3f:cf:24:d9:7c:18:fa:08:17:
52:6c:3d:e4:09:b2:4c:c3:d7:b6:0a:ab:44:d2:b2:56:14:b2:
0d:86:e7:6c:53:ca:6e:4d:8d:23:76:c9:b9:eb:a6:a9:c9:e0:
90:11:1a:4d:46:f9:06:b0:ba:35:f6:8b:a6:b8:b7:07:e1:67:
5c:bf:78:c6:4d:ec:10:a0:2d:df:bc:14:93:19:a1:cc:a3:00:
7a:f6:de:bb:28:f9:2c:58:18:e4:87:ae:80:12:8d:4c:cb:6b:
38:05:92:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cx5PgGuiMSU0oCap6ty2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMjM1ODViZmNkZDA2MWNhOTQ2ZTJkOWVhOGI5N2U0NWI5
YzMxZDYwHhcNMjUwMTMxMTMwMDQ4WhcNMjUwMjAxMTMwMDQ4WjAzMTEwLwYDVQQD
EyhhN2QyODQ2ZWU4MzQyZWE3YzNlMDBlMTY2YjM4NDhmMGYzZjFiZGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15XqVZTtqmStwJcQCAiXwB9vb6hz
9Q5hf+obm/IsJ0Tmr8QkZRLXw6cuVuZSN9quefdvuxobKGobMimWVtmfpYsbb13b
4rqxN744HVIA3IoQhqz9Dl3SJlrOWgFl1v2bKEgzOes8RWJ5j5CR32FwQS5TqffI
do2popooLougorRLQldDvIHZieIVB00tC3qwqqiZFdHHxMQpfs8OLBkU7LmMVTxq
AoOuiIBPYKcvD8NpYSyMeXQyFX0uTvSM91T8agSoOlvM1MB3cpuTcPQ4RlMjMvs9
lCR4LUPKW+zj2DgMVKEoxbQhtFslBhRtSh5WyS7sxheCWcRh4/71PjuU+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfShG7oNC6nw+AOFms4SPDz8b2hMB8GA1UdIwQY
MBaAFK8jWFv83QYcqUbi2eqLl+RbnDHWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnlOWVdfemRCaHlwUnVMWjZvdVg1RnVjTWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xZjM2ZDUtMzA4MC00YTBlLTlkNjMt
NzkzNDRkYTNhMmU2LzEvcnlOWVdfemRCaHlwUnVMWjZvdVg1RnVjTWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8xZjM2ZDUtMzA4MC00YTBlLTlkNjMtNzkzNDRkYTNhMmU2
LzEvcnlOWVdfemRCaHlwUnVMWjZvdVg1RnVjTWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiGBCI/b2
/48RQIcrNXforebo7LhTZcSWvGf6if9f/JW/zWnR1ab2Ddb8WhAW7v8E4Q5ywcOb
RirCmQIvee11VLKPBXS8EXo+JBfSc65N5L1dpT79jM2Ls3qJJE7tGsXgPuzTxgAv
nJWr2SfVaIENf49yO1/8vuNlQiqvT/YL+kny2r12Pmgr5vehV+UWiyu2eiu2DMH2
L9BoP88k2XwY+ggXUmw95AmyTMPXtgqrRNKyVhSyDYbnbFPKbk2NI3bJueumqcng
kBEaTUb5BrC6NfaLpri3B+FnXL94xk3sEKAt37wUkxmhzKMAevbeuyj5LFgY5Ieu
gBKNTMtrOAWSkA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:51:34 2025 by rpki-client