Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f0a2a1-66fc-4a34-ac5a-5d5117b7140d/1/ROY-_JSDhp5AIT5tEBlVOhG9G3Q.mft
File: ROY-_JSDhp5AIT5tEBlVOhG9G3Q.mft (raw, json)
Hash identifier: VsSgfEZq5lDMKOpWWVBt3FuHucMmQjcH3mYLQ2n6Ru0=
Subject key identifier: 27:CD:D5:BF:80:84:BD:D2:9F:4F:2E:E1:21:22:BC:58:26:AF:5E:F9
Authority key identifier: 44:E6:3E:FC:94:83:86:9E:40:21:3E:6D:10:19:55:3A:11:BD:1B:74
Certificate issuer: /CN=44e63efc9483869e40213e6d1019553a11bd1b74
Certificate serial: 0194BD85907000752750AA10A5D53BD35FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROY-_JSDhp5AIT5tEBlVOhG9G3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f0a2a1-66fc-4a34-ac5a-5d5117b7140d/1/ROY-_JSDhp5AIT5tEBlVOhG9G3Q.mft
Manifest number: 0BA2
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: ROY-_JSDhp5AIT5tEBlVOhG9G3Q.crl (hash: 67IwUeuaTM8N6yZHRAkplNztXCc4vNTUKuZit4RW7xs=)
2: zmIoOW_WysITCnVOzx8kPBAmdwQ.roa (hash: mCikIlOItfa1ee0rOshM9ilk6OnHdR8PgP1+31G7Ef4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:90:70:00:75:27:50:aa:10:a5:d5:3b:d3:5f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e63efc9483869e40213e6d1019553a11bd1b74
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=27cdd5bf8084bdd29f4f2ee12122bc5826af5ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:ee:39:26:74:a6:71:b1:0c:a5:40:a9:20:
2f:bb:7b:44:f3:a9:f4:57:34:c8:2d:91:55:d8:51:
eb:2d:13:19:33:80:11:8c:ca:af:e2:26:88:c5:22:
ff:00:78:38:09:cb:8b:a5:df:22:69:2d:ac:ad:fe:
8c:27:72:92:6f:47:df:87:fd:8f:6b:73:7c:e1:dd:
04:24:a5:d6:53:02:b3:bc:0d:b6:90:5f:f5:c6:dd:
57:df:91:cd:fd:e3:c9:e8:1f:60:df:7f:f1:93:32:
e2:d7:bd:d1:1c:d4:8f:23:ba:33:b8:75:1a:eb:f5:
4d:c7:26:a8:38:02:2e:f1:59:7f:43:a7:ef:53:8c:
65:8b:80:dc:4e:50:c4:78:55:e2:24:55:e8:0f:a8:
6b:65:de:d4:37:06:7a:d4:0c:bc:0c:7c:7b:3c:9a:
50:f8:5c:22:1f:f5:a8:06:99:bc:d8:06:bd:4d:17:
3f:41:f9:30:76:20:a9:38:dd:eb:28:e4:2b:94:1d:
85:22:ac:22:79:98:07:11:af:22:08:91:a4:f9:3b:
c5:1e:a1:6f:5a:2e:6e:5b:4d:5e:be:c4:25:27:af:
d8:bb:da:47:a2:4b:e5:f8:12:a7:d3:27:a8:76:37:
56:ac:2c:fa:fc:9a:5f:7b:6c:e3:a1:e7:92:30:00:
7e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CD:D5:BF:80:84:BD:D2:9F:4F:2E:E1:21:22:BC:58:26:AF:5E:F9
X509v3 Authority Key Identifier:
keyid:44:E6:3E:FC:94:83:86:9E:40:21:3E:6D:10:19:55:3A:11:BD:1B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROY-_JSDhp5AIT5tEBlVOhG9G3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f0a2a1-66fc-4a34-ac5a-5d5117b7140d/1/ROY-_JSDhp5AIT5tEBlVOhG9G3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f0a2a1-66fc-4a34-ac5a-5d5117b7140d/1/ROY-_JSDhp5AIT5tEBlVOhG9G3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d0:34:c5:c3:75:d2:d7:1f:51:a9:1f:5e:ca:f8:50:11:ce:
19:88:18:5a:dd:b8:61:42:0d:30:cd:3d:7c:d1:10:9b:6e:c5:
13:a3:02:03:2b:d6:1c:04:33:df:6f:4d:30:ef:16:1a:29:7c:
e0:98:fc:ff:8d:e5:22:e2:ce:43:50:ed:ad:00:ed:78:9f:5d:
5e:e1:39:ea:b5:97:7a:e4:43:2e:39:88:4b:c6:28:98:7d:8f:
76:c7:08:4a:0e:d0:f7:a0:92:09:11:b9:1a:92:ba:1b:9b:d2:
7b:3a:77:e7:8e:f7:e0:fd:99:66:fb:70:2f:c9:55:7d:22:55:
b7:94:39:7e:28:40:e7:7f:c2:cc:08:e8:ba:5c:7a:09:4a:af:
39:75:26:30:85:ae:d8:ff:75:02:47:55:0f:ac:81:bf:c6:64:
8c:ef:06:84:8b:8f:6b:60:81:f5:a9:1d:bc:aa:d9:49:b3:77:
ec:3b:87:9b:3f:dc:f4:62:c3:80:27:bb:88:0b:b1:b8:9b:6f:
90:4b:da:92:de:09:21:f1:29:b8:9e:32:5a:1b:65:ac:51:08:
40:a1:07:b3:81:74:a0:f8:17:a9:11:13:e4:a9:49:d7:c0:2d:
9a:5a:e8:48:38:56:0a:5a:41:15:27:37:2f:52:da:25:ad:eb:
fb:fd:ef:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZBwAHUnUKoQpdU701+0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZTYzZWZjOTQ4Mzg2OWU0MDIxM2U2ZDEwMTk1NTNhMTFi
ZDFiNzQwHhcNMjUwMTMxMTgwMDM0WhcNMjUwMjAxMTgwMDM0WjAzMTEwLwYDVQQD
EygyN2NkZDViZjgwODRiZGQyOWY0ZjJlZTEyMTIyYmM1ODI2YWY1ZWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7buOSZ0pnGxDKVAqSAvu3tE86n0
VzTILZFV2FHrLRMZM4ARjMqv4iaIxSL/AHg4CcuLpd8iaS2srf6MJ3KSb0ffh/2P
a3N84d0EJKXWUwKzvA22kF/1xt1X35HN/ePJ6B9g33/xkzLi173RHNSPI7ozuHUa
6/VNxyaoOAIu8Vl/Q6fvU4xli4DcTlDEeFXiJFXoD6hrZd7UNwZ61Ay8DHx7PJpQ
+FwiH/WoBpm82Aa9TRc/QfkwdiCpON3rKOQrlB2FIqwieZgHEa8iCJGk+TvFHqFv
Wi5uW01evsQlJ6/Yu9pHokvl+BKn0yeodjdWrCz6/Jpfe2zjoeeSMAB+6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfN1b+AhL3Sn08u4SEivFgmr175MB8GA1UdIwQY
MBaAFETmPvyUg4aeQCE+bRAZVToRvRt0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk9ZLV9KU0RocDVBSVQ1dEVCbFZPaEc5RzNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mMGEyYTEtNjZmYy00YTM0LWFjNWEt
NWQ1MTE3YjcxNDBkLzEvUk9ZLV9KU0RocDVBSVQ1dEVCbFZPaEc5RzNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mMGEyYTEtNjZmYy00YTM0LWFjNWEtNWQ1MTE3YjcxNDBk
LzEvUk9ZLV9KU0RocDVBSVQ1dEVCbFZPaEc5RzNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANA0xcN1
0tcfUakfXsr4UBHOGYgYWt24YUINMM09fNEQm27FE6MCAyvWHAQz329NMO8WGil8
4Jj8/43lIuLOQ1DtrQDteJ9dXuE56rWXeuRDLjmIS8YomH2PdscISg7Q96CSCRG5
GpK6G5vSezp354734P2ZZvtwL8lVfSJVt5Q5fihA53/CzAjoulx6CUqvOXUmMIWu
2P91AkdVD6yBv8ZkjO8GhIuPa2CB9akdvKrZSbN37DuHmz/c9GLDgCe7iAuxuJtv
kEvakt4JIfEpuJ4yWhtlrFEIQKEHs4F0oPgXqRET5KlJ18AtmlroSDhWClpBFSc3
L1LaJa3r+/3vGw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:59 2025 by rpki-client