Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
File: ryfUX8GLqRerHomhfvC2NgmEgiQ.mft (raw, json)
Hash identifier: MLIo7ns3ep1qQRT/uQJUNGQ+eKvVbG43lFIuU+xaL5g=
Subject key identifier: 54:46:26:83:99:67:18:7D:C9:FD:69:7E:E6:90:47:7D:BB:99:CC:D0
Authority key identifier: AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
Certificate issuer: /CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Certificate serial: 0194BC05332688A280BF0C1BA0560A9849EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
Manifest number: 10D0
Signing time: Fri 31 Jan 2025 11:00:44 +0000
Manifest this update: Fri 31 Jan 2025 11:00:44 +0000
Manifest next update: Sat 01 Feb 2025 11:00:44 +0000
Files and hashes: 1: a6gSjoyyxA0jzVsKg2TRp_kSrLQ.roa (hash: TkZgEIE0WCyZ9imlr2J33jw3qYRJMd6zJEIKXRGdgO0=)
2: ryfUX8GLqRerHomhfvC2NgmEgiQ.crl (hash: +zlel8BQ81Zpfi8+wZhChQuleyMsKM+CHQ9K6IjrMhQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:33:26:88:a2:80:bf:0c:1b:a0:56:0a:98:49:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Validity
Not Before: Jan 31 11:00:44 2025 GMT
Not After : Feb 1 11:00:44 2025 GMT
Subject: CN=544626839967187dc9fd697ee690477dbb99ccd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:35:6e:02:66:80:53:a9:ac:b6:50:2c:a9:ed:
08:c0:af:b2:3f:af:ae:ed:70:eb:37:f3:32:bc:e8:
cf:27:12:11:99:46:b1:77:3a:1f:6c:aa:47:62:2a:
56:fb:60:b9:1e:e5:7c:16:34:a7:8b:8d:22:a5:aa:
2c:1f:2a:e8:4e:f2:86:9a:c3:1d:a1:a3:8e:78:c6:
0f:ba:6c:5f:e5:94:b8:ae:a8:a2:04:c6:d2:97:31:
25:db:05:ac:e1:3d:3a:d4:90:e7:5b:52:13:7c:9e:
13:c5:82:ea:5a:18:a3:11:d7:80:71:14:c7:ea:b4:
26:3d:7d:c0:98:0c:12:cc:00:a2:52:98:a2:e4:4a:
55:21:bb:3e:58:9d:de:ae:da:38:d6:d3:cc:44:27:
a4:a4:11:75:3a:25:54:14:4c:c1:89:cf:a7:2b:81:
0b:23:18:f0:04:e0:59:75:68:fb:a4:72:84:1a:6f:
f5:9e:17:ef:b0:84:c3:5d:16:3c:92:1b:74:c6:89:
74:b6:6c:8d:d3:3c:bd:9b:d0:29:1b:24:a7:31:5d:
8a:bc:89:29:9c:6c:9f:96:7c:bf:bc:44:ae:66:88:
91:50:b6:07:73:43:33:0a:d3:66:9b:69:08:5f:62:
7c:f4:28:26:f5:57:73:63:df:12:61:cb:2d:8f:3b:
ac:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:46:26:83:99:67:18:7D:C9:FD:69:7E:E6:90:47:7D:BB:99:CC:D0
X509v3 Authority Key Identifier:
keyid:AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:02:cd:ad:ea:6e:b1:ab:d2:0a:f3:44:bb:35:78:72:88:5e:
9e:b5:de:3d:29:78:ed:ec:1c:8d:cb:1e:47:0f:c7:87:26:2f:
20:82:a9:13:94:2d:18:10:c2:ea:40:21:d1:10:e3:82:84:01:
71:e1:85:36:6f:55:dd:64:12:51:64:35:b7:c9:73:d0:2d:f8:
6a:15:98:a2:e2:9e:0c:1e:51:c9:40:de:44:87:fa:44:f2:e1:
42:bf:cc:61:9f:8d:41:1d:cf:ec:d9:d6:d5:7c:a7:20:ab:26:
97:a7:21:be:f6:13:cb:18:e7:ce:d3:28:22:0a:bf:45:98:ad:
c4:26:ba:63:20:a6:eb:97:97:cc:97:e3:63:c7:b5:3e:5f:bc:
9f:d7:af:c9:bc:dd:b1:7d:96:75:6a:85:91:47:b5:9d:ef:a2:
d8:c8:48:9a:ce:8a:64:ef:15:da:98:b2:8a:78:9d:26:0e:14:
76:af:4a:63:99:92:f9:e6:e2:4d:a9:c7:2f:36:ed:01:48:51:
ea:b5:05:d2:bf:e1:52:1b:25:6d:34:aa:19:b3:4a:03:33:28:
5c:71:54:a9:24:6a:ae:5f:7e:6c:18:9a:90:1d:3c:1b:d2:02:
31:b3:7a:7a:9a:be:84:43:f6:7b:a2:41:08:08:ba:6d:81:f0:
31:69:a1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:40 2025 by rpki-client