Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/0a0665-07a2-4407-94ba-4a5ce0d7d00c/1/RyOkO4YKkhUPcS7SD8t7ft-8-3s.mft
File: RyOkO4YKkhUPcS7SD8t7ft-8-3s.mft (raw, json)
Hash identifier: yYonSXdzLwCeUNYtQixq4WWnYaC7fekouEvdHNulMoo=
Subject key identifier: 54:58:E8:5E:E4:FA:2F:C2:04:21:16:15:9B:8A:53:C3:19:80:89:CF
Authority key identifier: 47:23:A4:3B:86:0A:92:15:0F:71:2E:D2:0F:CB:7B:7E:DF:BC:FB:7B
Certificate issuer: /CN=4723a43b860a92150f712ed20fcb7b7edfbcfb7b
Certificate serial: 0416670A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyOkO4YKkhUPcS7SD8t7ft-8-3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/0a0665-07a2-4407-94ba-4a5ce0d7d00c/1/RyOkO4YKkhUPcS7SD8t7ft-8-3s.mft
Manifest number: 0535
Signing time: Fri 18 Mar 2022 12:35:30 +0000
Manifest this update: Fri 18 Mar 2022 12:35:30 +0000
Manifest next update: Sat 19 Mar 2022 12:35:30 +0000
Files and hashes: 1: I1RDlMWi47MxWtV3Ywc-BEuMhFI.roa (hash: Q2VNkdcseYTGvtqd7MNX6atSZXseiIzeR67AtfIQxtY=)
2: RyOkO4YKkhUPcS7SD8t7ft-8-3s.crl (hash: NT4xxmo/j0Wyal8GzSzTbuesc+7URFLpfhYFoJdixD8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68577034 (0x416670a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4723a43b860a92150f712ed20fcb7b7edfbcfb7b
Validity
Not Before: Mar 18 12:35:30 2022 GMT
Not After : Mar 19 12:35:30 2022 GMT
Subject: CN=5458e85ee4fa2fc2042116159b8a53c3198089cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:88:0b:9b:cf:42:14:1b:54:e6:b6:a9:b3:
ff:28:a4:6f:11:09:79:c5:84:04:d8:8c:e2:be:96:
b0:62:40:8f:02:4a:c8:e6:6c:34:03:35:bf:41:ef:
84:e4:01:a1:8d:0b:96:16:26:cf:5c:eb:7d:ca:f0:
76:fd:e0:23:82:47:90:56:c9:91:9a:f6:a4:07:6f:
1a:44:92:08:61:13:28:b6:2a:bf:ba:32:90:28:c1:
b7:50:93:45:79:90:ce:b5:1c:9d:9e:91:8f:c6:56:
9a:cb:e3:d0:18:46:0f:af:97:37:6f:78:ba:54:6f:
52:d0:d3:1f:94:67:8e:cc:62:c5:57:dd:ce:6a:dd:
bb:0e:07:92:8c:b8:9a:dc:e0:4a:8e:ae:1b:37:67:
dc:c8:b7:d7:be:62:9f:6d:f1:11:f2:8d:04:6d:ab:
48:1b:31:50:6e:fb:4b:78:42:17:97:37:79:78:09:
4c:7e:fc:14:a7:55:8d:b6:7d:90:57:81:0e:79:58:
0f:0d:e6:08:f5:30:a2:49:2c:5a:18:83:32:5c:60:
26:f6:a6:4f:13:1d:be:3f:75:30:5c:70:d7:e0:01:
c2:9c:7d:fd:be:1a:7c:f9:f3:97:1f:c7:64:b0:35:
1e:9a:a8:90:82:6e:6c:d1:9e:96:dc:58:13:b0:27:
2e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:58:E8:5E:E4:FA:2F:C2:04:21:16:15:9B:8A:53:C3:19:80:89:CF
X509v3 Authority Key Identifier:
keyid:47:23:A4:3B:86:0A:92:15:0F:71:2E:D2:0F:CB:7B:7E:DF:BC:FB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyOkO4YKkhUPcS7SD8t7ft-8-3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0a0665-07a2-4407-94ba-4a5ce0d7d00c/1/RyOkO4YKkhUPcS7SD8t7ft-8-3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0a0665-07a2-4407-94ba-4a5ce0d7d00c/1/RyOkO4YKkhUPcS7SD8t7ft-8-3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8e:80:a3:c9:0f:a8:64:50:d6:00:63:57:e7:82:7d:7b:5b:
75:38:6b:e4:c5:a3:2c:0b:c0:c9:98:7e:b4:d3:8a:a0:2d:a1:
eb:fc:e1:e4:0a:c7:57:9a:14:f5:0e:5f:45:16:d0:58:13:32:
50:c6:70:37:cb:5a:62:7e:e5:b2:a5:3f:8e:48:ea:d1:16:12:
c7:3f:37:07:a5:4c:b7:53:5b:6a:10:b0:3f:b9:03:c7:f7:8c:
b4:40:69:e4:80:4d:81:73:05:a1:d6:1f:6c:85:85:d3:20:66:
37:be:08:a6:08:bf:93:41:70:4b:27:ee:b4:8c:64:11:fb:2a:
4e:f9:7b:0d:72:f3:7d:ed:a4:39:8d:f7:27:2a:8b:fc:d7:1a:
6b:4c:a0:7e:aa:b1:e9:c7:bf:1e:e9:1a:db:8f:a6:fd:a4:cc:
5b:12:5b:b0:b1:35:6a:3d:96:50:89:54:10:30:82:7a:e8:43:
21:cb:16:63:4f:dc:8f:f9:43:9f:63:4e:af:cd:3d:4b:9b:39:
9e:09:e0:5f:a4:72:a7:18:67:8d:2f:8f:40:20:05:48:35:70:
03:a9:cb:6b:8b:e5:f0:70:13:18:38:a2:00:9b:42:15:48:a2:
e7:01:84:67:6d:cd:ba:b9:aa:83:d0:7c:48:39:e9:e9:97:8a:
ce:48:73:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:09 2025 by rpki-client