Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9a7a61-bbea-423f-8d57-4d80bb85ffe0/1/RyXkYaho_LMPdAudg4yLQl-KIp8.mft
File: RyXkYaho_LMPdAudg4yLQl-KIp8.mft (raw, json)
Hash identifier: IWA3btkS3h9G2Ye95t1rB79hAcIs4yYNsBm1Xe10rsM=
Subject key identifier: 9B:9F:0D:C1:19:35:E5:18:94:FB:CE:81:A0:CC:8A:6D:F2:5B:40:B6
Authority key identifier: 47:25:E4:61:A8:68:FC:B3:0F:74:0B:9D:83:8C:8B:42:5F:8A:22:9F
Certificate issuer: /CN=4725e461a868fcb30f740b9d838c8b425f8a229f
Certificate serial: 018DCB43394FEACF2F3EA0929D0FBFC15669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyXkYaho_LMPdAudg4yLQl-KIp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/9a7a61-bbea-423f-8d57-4d80bb85ffe0/1/RyXkYaho_LMPdAudg4yLQl-KIp8.mft
Manifest number: 0734
Signing time: Wed 21 Feb 2024 10:43:16 +0000
Manifest this update: Wed 21 Feb 2024 10:43:16 +0000
Manifest next update: Thu 22 Feb 2024 10:43:16 +0000
Files and hashes: 1: AN2Uqc6zBuPtkclXzUZU16TX-iU.roa (hash: RgCItiOeOOJDRGaWadrSWzkXPwOdHk0wx6X8JpQXON8=)
2: RyXkYaho_LMPdAudg4yLQl-KIp8.crl (hash: x5RZKMKdqi6sHPI47KV3ooys2Dv/YfAFkKK8YXEKS0E=)
3: zTWe7ysvG1Jd6zy2ZYpAJC5tv4Y.roa (hash: rch3UEex8yxKMpZQo2sp/7sJSGJt7Es0IRvTG9qwVUY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cb:43:39:4f:ea:cf:2f:3e:a0:92:9d:0f:bf:c1:56:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4725e461a868fcb30f740b9d838c8b425f8a229f
Validity
Not Before: Feb 21 10:43:16 2024 GMT
Not After : Feb 22 10:43:16 2024 GMT
Subject: CN=9b9f0dc11935e51894fbce81a0cc8a6df25b40b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:45:c5:ba:0e:2a:c9:45:02:55:91:2c:9c:9d:
7f:a7:85:88:a9:01:7e:71:ec:44:d6:0d:a6:24:40:
03:52:00:82:d7:24:aa:b4:54:2a:f4:34:a2:d2:ca:
fb:67:2a:1f:b9:47:97:87:9b:33:a8:09:aa:cd:b1:
d7:17:34:74:2c:75:76:2d:7e:da:1c:50:9f:05:98:
a9:b7:38:27:35:05:39:98:3a:8f:5e:dc:65:09:97:
f0:18:53:96:03:71:40:9a:a1:3e:a8:54:38:d4:37:
ae:63:d8:d3:34:07:c6:3b:32:d7:f0:7d:de:6f:5d:
27:94:06:1d:b3:89:b8:d5:64:8a:84:7d:07:f5:20:
cb:9d:c1:c8:42:89:7f:8e:8f:90:51:cd:24:f3:53:
24:43:a8:0c:21:f4:23:83:4c:77:52:c4:08:da:54:
2d:f6:c0:84:f4:c5:cc:70:75:7b:7c:41:ec:07:62:
65:51:ab:54:f2:72:81:8f:07:b5:52:b9:7b:8a:44:
82:54:2a:bf:3a:15:aa:d1:80:48:55:57:86:a4:4f:
c2:9c:52:51:a8:6d:eb:c7:15:4e:58:dc:b7:3e:4e:
40:5e:e0:98:f9:7f:ed:53:cb:26:1c:aa:e4:1b:e0:
f0:18:79:f4:49:60:fc:1b:08:5a:b7:51:61:04:9b:
67:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9F:0D:C1:19:35:E5:18:94:FB:CE:81:A0:CC:8A:6D:F2:5B:40:B6
X509v3 Authority Key Identifier:
keyid:47:25:E4:61:A8:68:FC:B3:0F:74:0B:9D:83:8C:8B:42:5F:8A:22:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyXkYaho_LMPdAudg4yLQl-KIp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9a7a61-bbea-423f-8d57-4d80bb85ffe0/1/RyXkYaho_LMPdAudg4yLQl-KIp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9a7a61-bbea-423f-8d57-4d80bb85ffe0/1/RyXkYaho_LMPdAudg4yLQl-KIp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3b:65:dc:0f:0f:d5:95:72:6b:e3:fa:b2:72:32:e3:80:a4:
fb:4d:d3:e5:7c:20:ff:28:91:dc:02:a2:ee:c2:7f:d5:4c:d3:
f9:0b:f5:3a:5f:ff:b9:55:75:ca:c8:8b:a8:ee:bc:60:29:f2:
45:6a:aa:c3:07:7e:69:24:06:0e:07:83:2c:9f:6b:b0:88:c3:
29:dd:a4:0a:4f:a3:dd:4e:7a:e4:36:5a:e3:54:a4:06:06:9d:
7a:6f:7b:0c:6d:8e:62:40:7c:1b:ca:b7:90:ee:45:58:d3:28:
56:e7:68:5d:b8:8d:c8:5a:69:cc:aa:52:6b:24:5b:f5:43:53:
77:10:66:ce:01:ac:9b:ca:e9:37:cb:83:88:a4:2b:1b:48:1a:
13:69:b2:1e:4b:a4:d8:d2:56:6e:b6:b1:79:c6:67:2a:8a:79:
99:e5:07:69:f8:75:84:41:ce:71:b3:65:0f:2e:05:ce:40:2b:
f4:ee:00:29:21:f5:4f:7e:d9:10:b7:17:24:81:19:f4:3e:66:
35:5c:25:da:ec:91:21:ab:91:12:da:80:e9:be:0a:c5:1b:a1:
f4:a7:90:2f:30:dd:5d:46:f8:50:49:c9:76:21:ca:87:d9:2c:
84:5f:1b:59:64:9f:5f:27:8b:05:43:a7:54:99:a9:e0:43:05:
3a:fc:d7:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY3LQzlP6s8vPqCSnQ+/wVZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MjVlNDYxYTg2OGZjYjMwZjc0MGI5ZDgzOGM4YjQyNWY4
YTIyOWYwHhcNMjQwMjIxMTA0MzE2WhcNMjQwMjIyMTA0MzE2WjAzMTEwLwYDVQQD
Eyg5YjlmMGRjMTE5MzVlNTE4OTRmYmNlODFhMGNjOGE2ZGYyNWI0MGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUXFug4qyUUCVZEsnJ1/p4WIqQF+
cexE1g2mJEADUgCC1ySqtFQq9DSi0sr7ZyofuUeXh5szqAmqzbHXFzR0LHV2LX7a
HFCfBZiptzgnNQU5mDqPXtxlCZfwGFOWA3FAmqE+qFQ41DeuY9jTNAfGOzLX8H3e
b10nlAYds4m41WSKhH0H9SDLncHIQol/jo+QUc0k81MkQ6gMIfQjg0x3UsQI2lQt
9sCE9MXMcHV7fEHsB2JlUatU8nKBjwe1Url7ikSCVCq/OhWq0YBIVVeGpE/CnFJR
qG3rxxVOWNy3Pk5AXuCY+X/tU8smHKrkG+DwGHn0SWD8Gwhat1FhBJtnhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJufDcEZNeUYlPvOgaDMim3yW0C2MB8GA1UdIwQY
MBaAFEcl5GGoaPyzD3QLnYOMi0JfiiKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnlYa1lhaG9fTE1QZEF1ZGc0eUxRbC1LSXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85YTdhNjEtYmJlYS00MjNmLThkNTct
NGQ4MGJiODVmZmUwLzEvUnlYa1lhaG9fTE1QZEF1ZGc0eUxRbC1LSXA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi85YTdhNjEtYmJlYS00MjNmLThkNTctNGQ4MGJiODVmZmUw
LzEvUnlYa1lhaG9fTE1QZEF1ZGc0eUxRbC1LSXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjtl3A8P
1ZVya+P6snIy44Ck+03T5Xwg/yiR3AKi7sJ/1UzT+Qv1Ol//uVV1ysiLqO68YCny
RWqqwwd+aSQGDgeDLJ9rsIjDKd2kCk+j3U565DZa41SkBgadem97DG2OYkB8G8q3
kO5FWNMoVudoXbiNyFppzKpSayRb9UNTdxBmzgGsm8rpN8uDiKQrG0gaE2myHkuk
2NJWbraxecZnKop5meUHafh1hEHOcbNlDy4FzkAr9O4AKSH1T37ZELcXJIEZ9D5m
NVwl2uyRIauREtqA6b4KxRuh9KeQLzDdXUb4UEnJdiHKh9kshF8bWWSfXyeLBUOn
VJmp4EMFOvzXHw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:20:15 2025 by rpki-client