Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
File: sYxKQwCDfE6hetHjghoJrVN2QIc.mft (raw, json)
Hash identifier: ik7vGgnAXhP4VM70VcJ3PzHw47jRTzd7O8jcp42tkdo=
Subject key identifier: 29:F8:8E:C6:26:C2:BA:89:B4:76:04:DB:03:02:88:01:21:C9:93:6F
Authority key identifier: B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
Certificate issuer: /CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Certificate serial: 0194BBCE1D038684929FDC710EBB444A6D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
Manifest number: 0CC2
Signing time: Fri 31 Jan 2025 10:00:34 +0000
Manifest this update: Fri 31 Jan 2025 10:00:34 +0000
Manifest next update: Sat 01 Feb 2025 10:00:34 +0000
Files and hashes: 1: 2pelV4FedV45XCLKgpg6a9aqnGU.roa (hash: JAMnQ7Ljsuvl5vUTIxSzwNI1IGVq+RkAOKUEPceEiRc=)
2: sYxKQwCDfE6hetHjghoJrVN2QIc.crl (hash: RI8Fx/gqtJP5aqA5SRbEjnjmvVhiyhuq01+DSUufxTQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1d:03:86:84:92:9f:dc:71:0e:bb:44:4a:6d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Validity
Not Before: Jan 31 10:00:34 2025 GMT
Not After : Feb 1 10:00:34 2025 GMT
Subject: CN=29f88ec626c2ba89b47604db0302880121c9936f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4c:59:25:e2:f1:f8:1c:26:5e:b3:a4:46:6f:
13:4b:4e:89:46:89:21:c3:98:03:98:c7:7d:de:97:
28:22:38:73:6c:c3:01:45:b4:4e:d7:e5:85:eb:56:
96:68:ef:3a:7d:20:77:43:3d:f0:d4:c1:6e:79:ee:
a1:82:22:17:dd:36:47:54:85:02:f8:a9:f9:40:d3:
5c:66:83:e6:22:19:b5:6c:4f:94:cc:d5:b6:c6:b1:
25:22:de:9f:fc:bf:4f:c0:30:cd:43:de:af:d9:e3:
db:dc:05:48:fc:72:b3:dc:36:94:2b:64:72:fe:82:
d6:a6:fd:d2:4f:b1:2e:52:84:34:56:63:23:3b:1b:
f0:e5:63:1d:d4:ab:b5:73:6b:0d:ec:fc:ac:31:4d:
c1:14:26:af:57:b7:f1:92:b5:a4:71:08:c8:da:ac:
4d:7b:6d:88:ea:79:77:02:4a:29:3b:38:72:c7:bd:
9c:0d:4c:5d:a0:93:da:2e:f9:2c:70:0f:d1:82:ed:
0a:79:11:f0:9c:0e:35:44:53:63:0b:f3:08:56:05:
4e:e1:7d:9c:87:c5:43:30:e7:64:bf:92:35:94:b7:
d0:24:9d:b5:c5:0b:42:54:0b:c3:c1:ae:fc:06:26:
d9:46:e0:54:0d:92:aa:1d:01:7c:0b:87:cd:ac:03:
d3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F8:8E:C6:26:C2:BA:89:B4:76:04:DB:03:02:88:01:21:C9:93:6F
X509v3 Authority Key Identifier:
keyid:B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2f:be:66:92:08:ed:f0:82:88:2b:3e:3c:36:89:69:a3:e5:
5b:3e:3d:8f:ac:a4:34:9f:e8:4c:6a:c4:35:18:3b:18:c2:29:
44:bb:c5:ed:ce:87:f9:c4:d1:b0:08:0c:66:22:8d:44:f6:e2:
41:bf:71:d3:b6:3c:55:bc:38:ed:e6:29:63:61:b4:a5:bd:07:
b4:70:16:73:1f:8b:d6:08:f1:dd:bd:d4:c4:0a:3f:56:ea:82:
de:e2:f7:cd:b4:1a:46:b9:5c:6f:c1:4e:d7:24:dc:f9:7d:11:
76:85:07:cd:9d:19:54:cd:c5:ee:7f:5d:08:17:c4:b3:5e:72:
fe:07:9e:c8:ac:18:c1:83:bc:68:b3:59:56:77:bb:b2:43:a2:
f1:0f:44:5d:7f:a0:32:e4:5c:95:29:75:a3:70:dd:e7:17:bf:
76:a4:bf:68:ad:3e:38:67:ff:0a:de:8a:ab:85:80:6c:bd:6e:
e9:a4:61:c0:68:be:68:bd:54:9a:bc:1d:03:a9:a5:50:f0:3b:
66:16:e4:60:6e:22:39:c9:e5:da:65:d1:59:a8:2e:48:f7:1b:
97:86:23:aa:27:c4:c0:7e:6d:92:2a:2d:1f:c0:38:b0:89:ff:
b8:a1:92:17:89:be:be:f1:d6:8d:f8:a1:72:2b:92:84:42:e5:
64:14:0b:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zh0DhoSSn9xxDrtESm1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxOGM0YTQzMDA4MzdjNGVhMTdhZDFlMzgyMWEwOWFkNTM3
NjQwODcwHhcNMjUwMTMxMTAwMDM0WhcNMjUwMjAxMTAwMDM0WjAzMTEwLwYDVQQD
EygyOWY4OGVjNjI2YzJiYTg5YjQ3NjA0ZGIwMzAyODgwMTIxYzk5MzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kxZJeLx+BwmXrOkRm8TS06JRokh
w5gDmMd93pcoIjhzbMMBRbRO1+WF61aWaO86fSB3Qz3w1MFuee6hgiIX3TZHVIUC
+Kn5QNNcZoPmIhm1bE+UzNW2xrElIt6f/L9PwDDNQ96v2ePb3AVI/HKz3DaUK2Ry
/oLWpv3ST7EuUoQ0VmMjOxvw5WMd1Ku1c2sN7PysMU3BFCavV7fxkrWkcQjI2qxN
e22I6nl3AkopOzhyx72cDUxdoJPaLvkscA/Rgu0KeRHwnA41RFNjC/MIVgVO4X2c
h8VDMOdkv5I1lLfQJJ21xQtCVAvDwa78BibZRuBUDZKqHQF8C4fNrAPTxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCn4jsYmwrqJtHYE2wMCiAEhyZNvMB8GA1UdIwQY
MBaAFLGMSkMAg3xOoXrR44IaCa1TdkCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1l4S1F3Q0RmRTZoZXRIamdob0pyVk4yUUljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hZjRlNGItMjAyNi00YmJiLTk2Mjgt
ZjA4YTBhZTkyYjhkLzEvc1l4S1F3Q0RmRTZoZXRIamdob0pyVk4yUUljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9hZjRlNGItMjAyNi00YmJiLTk2MjgtZjA4YTBhZTkyYjhk
LzEvc1l4S1F3Q0RmRTZoZXRIamdob0pyVk4yUUljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJy++ZpII
7fCCiCs+PDaJaaPlWz49j6ykNJ/oTGrENRg7GMIpRLvF7c6H+cTRsAgMZiKNRPbi
Qb9x07Y8Vbw47eYpY2G0pb0HtHAWcx+L1gjx3b3UxAo/VuqC3uL3zbQaRrlcb8FO
1yTc+X0RdoUHzZ0ZVM3F7n9dCBfEs15y/geeyKwYwYO8aLNZVne7skOi8Q9EXX+g
MuRclSl1o3Dd5xe/dqS/aK0+OGf/Ct6Kq4WAbL1u6aRhwGi+aL1UmrwdA6mlUPA7
ZhbkYG4iOcnl2mXRWaguSPcbl4YjqifEwH5tkiotH8A4sIn/uKGSF4m+vvHWjfih
ciuShELlZBQLHw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:57 2025 by rpki-client