Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f0a2a1-66fc-4a34-ac5a-5d5117b7140d/1/ROY-_JSDhp5AIT5tEBlVOhG9G3Q.mft
File: ROY-_JSDhp5AIT5tEBlVOhG9G3Q.mft (raw, json)
Hash identifier: J0KTFQ6JOihlY3+P4frDBjb5qUnSpLmI6fsj54q01NE=
Subject key identifier: 4E:EE:76:4C:31:CF:53:D6:62:14:31:10:59:15:2B:C2:09:BE:31:B5
Authority key identifier: 44:E6:3E:FC:94:83:86:9E:40:21:3E:6D:10:19:55:3A:11:BD:1B:74
Certificate issuer: /CN=44e63efc9483869e40213e6d1019553a11bd1b74
Certificate serial: 01967F7D261958F7690C2DF633B0E2E302F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROY-_JSDhp5AIT5tEBlVOhG9G3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f0a2a1-66fc-4a34-ac5a-5d5117b7140d/1/ROY-_JSDhp5AIT5tEBlVOhG9G3Q.mft
Manifest number: 0C8B
Signing time: Tue 29 Apr 2025 03:00:30 +0000
Manifest this update: Tue 29 Apr 2025 03:00:30 +0000
Manifest next update: Wed 30 Apr 2025 03:00:30 +0000
Files and hashes: 1: ROY-_JSDhp5AIT5tEBlVOhG9G3Q.crl (hash: 5Ii5ZL5Ee6kgoWgHKj1klRbYbq/1vXs8AJqWoKKJmkQ=)
2: zmIoOW_WysITCnVOzx8kPBAmdwQ.roa (hash: mCikIlOItfa1ee0rOshM9ilk6OnHdR8PgP1+31G7Ef4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:26:19:58:f7:69:0c:2d:f6:33:b0:e2:e3:02:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e63efc9483869e40213e6d1019553a11bd1b74
Validity
Not Before: Apr 29 03:00:30 2025 GMT
Not After : Apr 30 03:00:30 2025 GMT
Subject: CN=4eee764c31cf53d66214311059152bc209be31b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:59:bd:78:10:7b:49:f2:0d:97:f8:23:7d:21:
76:04:66:20:0a:80:0b:5f:45:3a:d8:c6:aa:23:49:
87:d5:26:4e:ec:31:17:cc:6a:f6:59:94:b1:7e:32:
eb:e8:3b:30:45:30:3f:74:44:1c:e1:ca:ec:71:e0:
7e:af:43:e2:47:90:1e:1a:34:fd:33:a7:6e:8d:fb:
6e:d9:08:d3:3d:1c:b1:0f:96:86:a7:cc:39:61:b7:
03:55:63:99:c5:93:bb:1e:4b:85:bc:e1:b7:bc:72:
64:c3:75:e0:72:d8:37:b0:a8:42:dc:99:be:ef:88:
02:2c:2e:3f:f6:75:15:74:9d:03:3d:bc:37:60:a5:
ea:c1:c5:ab:bd:24:42:ab:e7:f5:6b:7d:8b:ee:41:
a1:72:09:55:28:e8:af:d6:dd:63:59:57:99:8e:c2:
36:7a:7d:cc:79:f8:38:26:31:c7:4f:6e:ef:80:fe:
43:e5:1e:b8:b0:ab:78:a7:ad:d7:ad:79:2f:c4:47:
cf:5c:a5:b1:cf:75:de:55:ce:64:76:85:38:6a:17:
16:b2:bf:81:ad:b1:f0:19:5e:d6:b4:f1:8d:94:a6:
de:d3:6e:ae:12:5b:e5:60:9d:99:8f:d5:ef:c4:14:
9c:d0:65:43:28:90:1f:b2:a4:b6:66:64:0d:46:13:
a2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EE:76:4C:31:CF:53:D6:62:14:31:10:59:15:2B:C2:09:BE:31:B5
X509v3 Authority Key Identifier:
keyid:44:E6:3E:FC:94:83:86:9E:40:21:3E:6D:10:19:55:3A:11:BD:1B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROY-_JSDhp5AIT5tEBlVOhG9G3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f0a2a1-66fc-4a34-ac5a-5d5117b7140d/1/ROY-_JSDhp5AIT5tEBlVOhG9G3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f0a2a1-66fc-4a34-ac5a-5d5117b7140d/1/ROY-_JSDhp5AIT5tEBlVOhG9G3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:43:d9:2b:04:b0:48:fb:7d:6d:48:dd:fe:d2:7d:7c:14:91:
ab:23:e3:bf:a7:17:88:39:11:f1:30:f3:32:a7:27:00:04:7f:
89:e6:d4:94:d0:55:ab:df:de:df:7d:09:0c:59:c6:56:5f:86:
a5:d4:b5:18:15:df:61:dd:5c:42:73:5f:61:59:62:97:dd:36:
9c:51:f5:e1:13:57:86:4b:40:bd:c9:cd:c6:32:5c:37:ac:f2:
7a:e9:cd:cf:96:fb:ff:e4:18:8e:37:e3:83:79:e8:81:71:82:
80:a7:61:4b:f8:13:22:72:02:93:e0:4a:cc:5f:ac:0c:80:b9:
b6:9f:1a:c1:ed:1a:03:8d:95:e6:66:07:8a:fb:c3:98:e5:b3:
cf:cc:41:ed:8a:5d:84:af:e7:92:cd:81:d2:7e:c8:65:36:f4:
fe:c0:fb:98:fc:77:e2:5f:c0:45:2d:8e:25:98:5e:65:a7:35:
30:34:1a:ec:b1:ca:b6:0b:d9:31:37:67:7d:f7:33:84:6a:c1:
46:f2:04:4e:f2:bd:66:60:52:10:cc:27:57:91:3f:87:e0:23:
7b:9d:6c:bb:33:58:36:9c:c4:5a:7f:32:87:d9:88:b1:4e:28:
22:f7:4d:55:3e:29:0c:c5:f3:09:e1:0c:6c:40:99:96:37:fa:
36:88:01:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:39:37 2025 by rpki-client