Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.mft
File: rysOIXo1FoOSIGvac85hlTWgLzU.mft (raw, json)
Hash identifier: Td2LyemKs4EWfnNnceT7/n5/1fYxRwj+V6BSZp4YFgU=
Subject key identifier: 85:CB:1F:1C:D3:3B:9F:AE:34:C1:FC:A8:65:81:C4:1B:57:BE:C8:94
Authority key identifier: AF:2B:0E:21:7A:35:16:83:92:20:6B:DA:73:CE:61:95:35:A0:2F:35
Certificate issuer: /CN=af2b0e217a35168392206bda73ce619535a02f35
Certificate serial: 0194BD858D1F093BB9D00ADD4C3EECA4BABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rysOIXo1FoOSIGvac85hlTWgLzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.mft
Manifest number: 08D2
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: rysOIXo1FoOSIGvac85hlTWgLzU.crl (hash: Nn+rZrwg940aHw9hHNkcmHidXHhZEVai7NUt63UBa94=)
2: s_N59_9YuYx_S_S9Hm1lKARjffo.roa (hash: GhhV4leMWyahypivsrxSC4fcpybmWn8mstmkJxBTYXU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8d:1f:09:3b:b9:d0:0a:dd:4c:3e:ec:a4:ba:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2b0e217a35168392206bda73ce619535a02f35
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=85cb1f1cd33b9fae34c1fca86581c41b57bec894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fd:96:4b:ef:a4:d2:8e:cc:85:56:6d:81:58:
a2:f4:c2:a3:58:25:45:cd:57:4c:9b:cf:9c:70:59:
ce:ff:4f:5d:45:f2:3c:28:3e:49:26:70:bb:d6:ca:
b9:94:1f:85:7c:57:f6:a4:f8:31:8b:a9:98:30:bb:
9c:b3:36:1d:6e:38:65:80:42:1c:9a:b1:c8:75:bd:
b1:58:78:af:c0:80:3f:dd:dc:b4:30:60:52:d5:06:
40:73:66:1d:39:4c:bc:64:bf:b0:eb:46:6c:98:31:
49:a6:b1:97:75:6f:c5:9d:50:16:88:02:75:fa:35:
43:d9:15:fc:d8:a8:50:16:07:ea:b5:7e:84:fd:16:
99:c4:27:78:2b:1f:b8:8e:ca:13:cb:b4:db:2e:f1:
3e:b1:53:80:f2:62:bd:91:40:80:30:c8:bd:42:67:
5c:65:ec:f6:ed:d8:a9:06:97:fc:16:e0:bd:87:bd:
99:f0:9f:9a:d3:25:0e:4b:06:82:e5:31:e2:76:70:
73:f7:0b:1a:0a:00:36:2f:d2:ce:3e:3e:6e:b0:6d:
cf:28:3d:5e:87:1b:34:00:55:d0:96:32:7b:a4:54:
32:10:d5:35:57:2b:44:d4:af:05:eb:e7:3e:86:da:
fb:76:36:b4:de:f6:6c:83:c2:de:8e:42:38:1a:7e:
26:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CB:1F:1C:D3:3B:9F:AE:34:C1:FC:A8:65:81:C4:1B:57:BE:C8:94
X509v3 Authority Key Identifier:
keyid:AF:2B:0E:21:7A:35:16:83:92:20:6B:DA:73:CE:61:95:35:A0:2F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rysOIXo1FoOSIGvac85hlTWgLzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:50:e2:89:e1:7d:87:5f:13:63:f6:b3:bc:a6:b1:51:db:c9:
73:0a:8c:f6:c3:2d:53:46:8b:ae:f2:ec:bf:f6:d6:6f:c3:9f:
5a:e4:8f:99:09:9c:1e:55:c6:c5:0c:7c:27:36:6f:54:82:61:
c2:54:12:b8:37:ab:b1:03:ab:82:ba:c7:0d:0e:c0:2e:46:75:
c2:9d:2a:18:6e:e2:85:e2:c1:93:34:b3:3e:21:fc:4d:98:8b:
76:7d:95:16:09:ae:c2:bc:22:07:10:b3:dc:8e:a0:b6:12:8d:
af:7b:eb:0f:7f:03:e7:b6:b7:98:b3:d8:7a:94:f4:40:f1:40:
f3:ff:d8:79:8c:75:60:e8:5f:a9:f7:f8:91:69:65:2b:d5:65:
98:c7:ba:4f:7c:64:cf:4d:cc:eb:47:59:fb:eb:fe:a0:df:a6:
d0:aa:87:3a:1d:92:5f:85:a1:d8:52:7a:d2:8e:5a:62:ba:3b:
dc:07:0b:9c:23:26:a7:ae:24:1e:d9:8c:7a:6b:d7:82:01:c5:
22:b6:96:08:0a:cc:7e:22:b9:4e:d2:2e:c1:4b:80:e8:5d:ad:
0e:ed:a9:62:68:bd:37:76:dc:19:52:a7:04:7b:1d:aa:d5:f8:
15:f3:ae:df:e6:4e:31:78:1c:54:3c:09:0a:a3:0e:ca:cd:a6:
0a:b7:82:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hY0fCTu50ArdTD7spLq6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMmIwZTIxN2EzNTE2ODM5MjIwNmJkYTczY2U2MTk1MzVh
MDJmMzUwHhcNMjUwMTMxMTgwMDMzWhcNMjUwMjAxMTgwMDMzWjAzMTEwLwYDVQQD
Eyg4NWNiMWYxY2QzM2I5ZmFlMzRjMWZjYTg2NTgxYzQxYjU3YmVjODk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5v2WS++k0o7MhVZtgVii9MKjWCVF
zVdMm8+ccFnO/09dRfI8KD5JJnC71sq5lB+FfFf2pPgxi6mYMLucszYdbjhlgEIc
mrHIdb2xWHivwIA/3dy0MGBS1QZAc2YdOUy8ZL+w60ZsmDFJprGXdW/FnVAWiAJ1
+jVD2RX82KhQFgfqtX6E/RaZxCd4Kx+4jsoTy7TbLvE+sVOA8mK9kUCAMMi9Qmdc
Zez27dipBpf8FuC9h72Z8J+a0yUOSwaC5THidnBz9wsaCgA2L9LOPj5usG3PKD1e
hxs0AFXQljJ7pFQyENU1VytE1K8F6+c+htr7dja03vZsg8LejkI4Gn4mgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXLHxzTO5+uNMH8qGWBxBtXvsiUMB8GA1UdIwQY
MBaAFK8rDiF6NRaDkiBr2nPOYZU1oC81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnlzT0lYbzFGb09TSUd2YWM4NWhsVFdnTHpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kMjU0MWUtNzU5Ny00ODIwLWJlZDct
ZjBkMTk4MDk4NzRhLzEvcnlzT0lYbzFGb09TSUd2YWM4NWhsVFdnTHpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kMjU0MWUtNzU5Ny00ODIwLWJlZDctZjBkMTk4MDk4NzRh
LzEvcnlzT0lYbzFGb09TSUd2YWM4NWhsVFdnTHpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFDiieF9
h18TY/azvKaxUdvJcwqM9sMtU0aLrvLsv/bWb8OfWuSPmQmcHlXGxQx8JzZvVIJh
wlQSuDersQOrgrrHDQ7ALkZ1wp0qGG7iheLBkzSzPiH8TZiLdn2VFgmuwrwiBxCz
3I6gthKNr3vrD38D57a3mLPYepT0QPFA8//YeYx1YOhfqff4kWllK9VlmMe6T3xk
z03M60dZ++v+oN+m0KqHOh2SX4Wh2FJ60o5aYro73AcLnCMmp64kHtmMemvXggHF
IraWCArMfiK5TtIuwUuA6F2tDu2pYmi9N3bcGVKnBHsdqtX4FfOu3+ZOMXgcVDwJ
CqMOys2mCreCfA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:07:18 2025 by rpki-client