Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
File: RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft (raw, json)
Hash identifier: no4fEZy61IA75ElHQrX51cncc1qc/vDSlVLQNBxcoDE=
Subject key identifier: 1F:8A:F1:F6:B5:6C:4D:DE:26:2D:6B:4C:E3:54:79:1B:8F:22:30:C0
Authority key identifier: 47:21:BF:48:E4:01:66:0E:E9:61:1B:35:C0:4B:5D:1D:1F:3F:AB:FA
Certificate issuer: /CN=4721bf48e401660ee9611b35c04b5d1d1f3fabfa
Certificate serial: 0194BD8523A1DBFCE3F723CAF7D31D7D76FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
Manifest number: 05BE
Signing time: Fri 31 Jan 2025 18:00:06 +0000
Manifest this update: Fri 31 Jan 2025 18:00:06 +0000
Manifest next update: Sat 01 Feb 2025 18:00:06 +0000
Files and hashes: 1: Q0tX8C3mAUGr4XLZlc4tVpO7Am4.roa (hash: hVicWWTtt7YlyO3V3zzscqDP1fMclWoLBHVq6weE/Lo=)
2: RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl (hash: EiiXMNbTub2XEketse/YQI9QwyLRYPubreApsqjq+Z4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:23:a1:db:fc:e3:f7:23:ca:f7:d3:1d:7d:76:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4721bf48e401660ee9611b35c04b5d1d1f3fabfa
Validity
Not Before: Jan 31 18:00:06 2025 GMT
Not After : Feb 1 18:00:06 2025 GMT
Subject: CN=1f8af1f6b56c4dde262d6b4ce354791b8f2230c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b7:5c:a6:94:ef:3f:ef:52:34:cc:ff:3b:99:
9f:ed:77:31:e4:dc:95:95:df:38:a9:ce:ee:7c:dc:
ae:47:06:05:a5:6f:ea:72:9c:2a:bc:52:25:2c:0c:
3d:8e:40:fc:af:85:19:99:70:26:05:db:7f:5b:1a:
4a:94:e6:36:51:ce:06:85:54:48:29:1d:f1:b4:c4:
2b:bd:68:b8:e5:75:41:4e:5c:d8:79:6a:67:90:9f:
ec:bb:c8:18:dc:5b:fb:e6:22:ce:23:79:dc:99:77:
26:97:41:ff:58:1b:ae:c9:d9:6d:4d:30:0e:90:4f:
b3:d9:6e:3e:b8:d1:24:fd:0f:cf:3e:0c:d3:b2:d5:
08:27:52:9a:bf:b8:14:65:f0:df:19:d6:86:9e:a6:
ef:9f:76:ef:1d:40:c8:15:64:af:01:0d:25:d0:ae:
0a:dc:56:e5:21:b4:58:bd:28:8e:e0:be:05:b3:0b:
6d:a5:56:d8:6b:79:5e:16:34:23:03:07:b0:aa:63:
4b:8d:30:46:0c:6c:13:ad:26:03:38:39:3a:bc:1e:
38:a4:5c:78:18:5c:da:c4:97:74:9a:15:5e:1d:91:
59:7d:c5:e7:1a:fe:96:97:a1:80:b4:57:d0:05:8b:
4b:a4:3d:86:b4:1f:47:87:a7:32:25:e7:79:a2:58:
e3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8A:F1:F6:B5:6C:4D:DE:26:2D:6B:4C:E3:54:79:1B:8F:22:30:C0
X509v3 Authority Key Identifier:
keyid:47:21:BF:48:E4:01:66:0E:E9:61:1B:35:C0:4B:5D:1D:1F:3F:AB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:be:e4:88:87:3a:a3:33:5e:1d:70:a5:a7:b9:32:e6:31:03:
65:77:42:73:08:5b:de:b3:ee:d6:c6:2a:57:ac:d7:5d:ca:55:
12:44:1f:cd:00:65:e1:f8:79:5b:ef:2e:a7:01:3b:2d:41:a8:
9a:95:bf:f0:1f:fa:af:51:1d:bf:70:37:47:24:6e:0e:bb:ff:
70:d3:8d:81:a7:f0:dc:e8:44:a4:ea:1b:58:16:9d:14:6b:db:
32:be:53:49:a7:cd:20:d4:8c:e2:bf:b4:c6:37:7a:1f:5d:cd:
6a:5a:65:23:67:87:0b:3e:fd:da:e0:f2:59:16:47:25:ed:ba:
1a:95:61:d4:71:ce:cb:34:61:3b:ae:4a:9c:e5:07:f1:3e:68:
c4:bd:bd:06:f6:e6:84:84:20:72:7e:54:a4:c1:01:90:1d:9e:
72:d4:d4:c7:bc:2b:14:35:91:b3:da:ec:4d:6c:93:32:7e:81:
10:dd:ac:51:3e:90:df:ce:cb:3e:ae:9f:eb:32:3a:76:2c:51:
33:09:ad:21:5b:12:18:f4:6e:f9:d9:96:4b:46:91:2b:6c:6e:
93:bf:63:82:26:c7:c4:7b:1a:e0:39:6c:d1:2e:a8:ec:01:5c:
fd:6b:75:8a:07:9a:37:a9:23:29:2b:ab:00:af:76:69:8f:c0:
2a:ca:d5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:16 2025 by rpki-client