Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
File: ryto8Mg63Zo6O4arJPuRCpYCYsY.mft (raw, json)
Hash identifier: 2rXCpN8M0Orp6f7nChHI+fRcWHrLudSDm3Ksst0HAIs=
Subject key identifier: AF:67:4C:FE:FC:BF:BF:43:7A:9C:DC:11:24:61:92:94:49:38:92:BB
Authority key identifier: AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
Certificate issuer: /CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Certificate serial: 0194BBCE857362A0EAF2CEF710AE4A641920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
Manifest number: 0F99
Signing time: Fri 31 Jan 2025 10:01:01 +0000
Manifest this update: Fri 31 Jan 2025 10:01:01 +0000
Manifest next update: Sat 01 Feb 2025 10:01:01 +0000
Files and hashes: 1: ryto8Mg63Zo6O4arJPuRCpYCYsY.crl (hash: znmA21dS7AuFaEHtfakqttL094u+UWaig8NJp3yZNuQ=)
2: ya12EPtNrcF0udvEcU2cfD6dvXE.roa (hash: JqrMXae8q96ruf/DmoCDw76yVSkMluiHBgpoAg21vqs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:85:73:62:a0:ea:f2:ce:f7:10:ae:4a:64:19:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Validity
Not Before: Jan 31 10:01:01 2025 GMT
Not After : Feb 1 10:01:01 2025 GMT
Subject: CN=af674cfefcbfbf437a9cdc1124619294493892bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:23:2a:3e:41:54:df:32:88:73:dc:b0:80:c0:
64:26:71:ab:74:f6:ba:21:97:0c:35:9d:a8:8e:aa:
6b:5b:c6:52:34:94:cd:14:b6:3c:3d:a9:0d:36:ae:
ea:ff:60:59:b7:f6:b4:ad:e9:58:86:f2:2a:72:0c:
43:0a:d2:31:e7:88:9a:f1:0c:b7:4a:c2:30:c5:49:
c8:76:b6:a0:1c:f4:67:94:e6:ad:44:00:3a:21:c2:
2c:10:ce:67:08:bf:3e:43:55:cf:03:d0:20:6f:09:
8c:96:c4:71:8b:b7:89:69:c4:59:c5:35:2f:b1:9b:
e5:62:58:b2:8f:1f:3c:03:94:8c:a8:a9:5e:41:62:
7c:a7:19:94:a5:03:d8:b9:23:c8:ed:f5:4c:4c:d1:
29:41:65:52:ad:54:ab:37:75:7f:d8:e0:91:d7:ce:
d9:24:30:12:ef:86:1f:5a:10:07:ec:79:5b:38:51:
55:fb:e8:ec:3b:68:f6:9f:af:a1:06:74:0a:1e:19:
1d:fe:63:b0:98:3d:3e:4e:b1:15:8b:9c:be:26:5a:
00:29:aa:ba:bc:5b:8e:c6:29:fd:d7:a3:07:eb:b3:
93:31:60:1e:96:60:32:22:e3:b4:da:27:d3:2b:34:
65:a8:6e:be:2a:e1:c2:11:78:17:59:8b:ff:c4:bd:
a4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:67:4C:FE:FC:BF:BF:43:7A:9C:DC:11:24:61:92:94:49:38:92:BB
X509v3 Authority Key Identifier:
keyid:AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f6:21:c8:9d:4b:e9:8f:c9:d5:72:f7:5e:36:58:f0:63:40:
e9:02:81:ba:97:bd:7e:e1:5e:8e:66:92:e2:e4:54:4e:93:42:
c3:cc:6a:e0:ee:53:3f:0c:24:0e:ce:f5:a7:ad:6a:f5:47:6c:
69:80:4f:e1:4a:78:62:90:97:da:7b:53:39:d4:9f:0c:c0:a8:
41:b7:f0:15:e5:37:14:39:15:e9:7d:3e:2f:b7:c6:4a:fd:1f:
3d:7c:c4:e0:a3:cf:20:f5:12:31:ab:a7:03:d6:e5:51:da:d0:
29:d1:e3:c3:84:e4:f5:5c:17:8c:c7:8c:cf:0e:5d:20:f7:b5:
56:96:8a:85:24:ff:d0:30:a6:75:75:bc:df:76:e0:71:2b:42:
75:5f:99:1a:f6:bc:00:59:a9:3d:ed:f7:7f:0d:aa:8c:94:c9:
73:81:fa:d2:97:c0:31:2c:fa:d4:95:24:6a:0b:10:c8:56:d7:
77:f9:e5:c1:59:67:26:78:47:89:4f:cd:9a:c2:dd:97:be:58:
f0:55:1f:24:e2:45:ae:a1:e1:7e:29:2d:d0:d5:1a:35:27:21:
df:db:6a:5e:b9:be:91:f7:e5:43:97:13:fb:a8:1c:3d:44:98:
c9:be:59:57:58:64:5d:dc:62:73:f8:68:47:3d:03:a6:fe:bf:
2a:11:c0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:26 2025 by rpki-client