Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier: Ip0NEBwK7ZH93MVpm26DN1wAyGhcJLnX+gIglJum2bc=
Subject key identifier: EA:11:A5:94:7C:2C:9B:5E:B7:4A:FE:A9:CF:7E:39:78:F5:C8:A2:72
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 0194BD17EB631927E92534E6D9C5D6631CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 16:00:48 +0000
Manifest this update: Fri 31 Jan 2025 16:00:48 +0000
Manifest next update: Sat 01 Feb 2025 16:00:48 +0000
Files and hashes: 1: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: HABqOXJGbSQdqDt3A+L4ZDsl5r6/EgOym4C5QeXn0C0=)
2: wa92ho6_TOaY7ldqJSaYCa_XBQs.roa (hash: uu+6gbbAJilj/6MKax6vLpnZpiiIVCtzv4wgRcQIz20=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:eb:63:19:27:e9:25:34:e6:d9:c5:d6:63:1c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: Jan 31 16:00:48 2025 GMT
Not After : Feb 1 16:00:48 2025 GMT
Subject: CN=ea11a5947c2c9b5eb74afea9cf7e3978f5c8a272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:65:da:8a:1c:76:18:45:d0:da:21:f3:a4:
ff:e0:a4:fc:49:b1:33:bc:7d:4e:8d:40:1e:44:41:
3d:a4:2f:dc:e4:4e:b3:33:c7:e3:30:70:26:73:fc:
fc:ea:12:a1:c2:b0:1b:66:bc:be:4b:81:01:00:68:
91:85:93:c6:0b:06:31:e9:79:31:5b:e2:e5:82:35:
4d:e0:1a:5d:dc:44:0b:48:4b:88:5a:11:d8:f1:85:
fc:40:35:8d:de:3b:3b:03:dd:8c:a6:8a:00:1d:0a:
48:e4:5b:b2:ff:65:a5:4a:54:08:18:5a:bb:8f:59:
66:d8:b3:ba:31:28:a8:7d:a8:c2:94:74:4c:ec:da:
99:fe:ad:6c:b8:ce:27:42:0f:3b:06:3b:c4:0a:45:
36:c0:af:5a:6d:c0:de:6e:d3:8d:f5:90:2d:9c:dd:
1a:22:6f:8b:1f:83:6b:7d:09:51:c1:78:0c:5e:1e:
13:1e:a7:a6:67:2c:3b:6c:bf:3b:45:f3:78:72:ad:
1f:64:ec:15:dc:c0:dd:44:02:a1:81:42:13:53:ab:
44:3d:39:a4:1f:39:01:11:7c:ff:c8:c6:96:b0:95:
98:44:25:c2:70:d0:2f:19:e0:a7:f7:5e:37:de:39:
df:07:1a:9c:4d:f5:d5:65:9d:fa:cb:50:3d:69:cf:
11:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:11:A5:94:7C:2C:9B:5E:B7:4A:FE:A9:CF:7E:39:78:F5:C8:A2:72
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:df:be:05:69:b3:98:ee:56:af:c9:dc:f0:0c:ba:e9:e9:b1:
cb:70:76:dc:0b:3b:ce:0d:df:27:d2:ad:3b:93:6c:7a:e9:ea:
9b:00:ed:e2:f4:98:55:c8:81:da:cf:23:d7:2b:1e:96:e9:29:
03:85:20:b5:19:e6:08:18:d1:b1:38:a8:0f:22:27:28:9a:b1:
75:9e:cb:37:4a:10:3b:21:ce:33:b7:4f:0c:c4:29:90:93:da:
65:f2:ca:f0:99:e4:a0:1d:e1:dc:23:63:be:04:aa:89:b8:39:
d8:2d:17:4d:a5:75:a7:13:a2:c3:c0:c5:8e:d3:ee:38:43:cb:
ac:21:9a:94:e9:f2:1f:9b:34:15:24:ca:8c:2f:9a:03:88:49:
30:c4:f2:b3:6d:18:27:46:ec:f1:aa:d0:7b:4c:c0:09:02:d1:
ca:08:58:4a:5a:33:e1:9f:81:a8:20:d4:27:8b:99:4f:26:54:
c1:8a:c9:ba:33:dc:96:aa:ad:c4:19:e1:32:a6:07:84:07:fb:
1c:18:73:9a:48:bf:b4:d4:48:6e:b4:7a:b1:21:72:9e:e4:9a:
95:9e:88:e3:5b:3c:8c:35:2d:85:46:71:d1:80:af:7f:e6:b3:
15:bf:e5:16:a9:6a:2f:03:3d:03:c2:8e:4f:b1:28:a0:7c:db:
02:a8:a4:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F+tjGSfpJTTm2cXWYxytMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMmVlMmIzOTcxMjM3N2I0YmZlYzllNjZhYzdlNmU5MDhl
ZmNlZWMwHhcNMjUwMTMxMTYwMDQ4WhcNMjUwMjAxMTYwMDQ4WjAzMTEwLwYDVQQD
EyhlYTExYTU5NDdjMmM5YjVlYjc0YWZlYTljZjdlMzk3OGY1YzhhMjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGZl2oocdhhF0Noh86T/4KT8SbEz
vH1OjUAeREE9pC/c5E6zM8fjMHAmc/z86hKhwrAbZry+S4EBAGiRhZPGCwYx6Xkx
W+LlgjVN4Bpd3EQLSEuIWhHY8YX8QDWN3js7A92MpooAHQpI5Fuy/2WlSlQIGFq7
j1lm2LO6MSiofajClHRM7NqZ/q1suM4nQg87BjvECkU2wK9abcDebtON9ZAtnN0a
Im+LH4NrfQlRwXgMXh4THqemZyw7bL87RfN4cq0fZOwV3MDdRAKhgUITU6tEPTmk
HzkBEXz/yMaWsJWYRCXCcNAvGeCn91433jnfBxqcTfXVZZ36y1A9ac8R9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoRpZR8LJtet0r+qc9+OXj1yKJyMB8GA1UdIwQY
MBaAFLMu4rOXEjd7S/7J5mrH5ukI787sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3k3aXM1Y1NOM3RMX3NubWFzZm02UWp2enV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kZmE1MWItNDZhYS00MDg0LWEzNDMt
ZjAxNmNhNWRhMjE5LzEvc3k3aXM1Y1NOM3RMX3NubWFzZm02UWp2enV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9kZmE1MWItNDZhYS00MDg0LWEzNDMtZjAxNmNhNWRhMjE5
LzEvc3k3aXM1Y1NOM3RMX3NubWFzZm02UWp2enV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqt++BWmz
mO5Wr8nc8Ay66emxy3B23As7zg3fJ9KtO5NseunqmwDt4vSYVciB2s8j1yselukp
A4UgtRnmCBjRsTioDyInKJqxdZ7LN0oQOyHOM7dPDMQpkJPaZfLK8JnkoB3h3CNj
vgSqibg52C0XTaV1pxOiw8DFjtPuOEPLrCGalOnyH5s0FSTKjC+aA4hJMMTys20Y
J0bs8arQe0zACQLRyghYSloz4Z+BqCDUJ4uZTyZUwYrJujPclqqtxBnhMqYHhAf7
HBhzmki/tNRIbrR6sSFynuSalZ6I41s8jDUthUZx0YCvf+azFb/lFqlqLwM9A8KO
T7EooHzbAqikQQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:58 2025 by rpki-client