Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
File: Sb1NKMUsLxLkah774RMkG-AMpY8.mft (raw, json)
Hash identifier: Gqd73OwwjKHaBjdxwnuBvyYHiJe/ca4a/hnm/u/B2Zk=
Subject key identifier: DC:9B:ED:D4:A4:ED:7D:0A:24:2E:A6:74:45:51:DA:0E:1D:2B:C2:8B
Authority key identifier: 49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
Certificate issuer: /CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Certificate serial: 0194BD4E6C6BCD2404E569AC5B8B2E034E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
Manifest number: 1382
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: 10P0bMy88DkqDnF3PvY9nmC2O1M.roa (hash: z1uASFf3RP6HkHfunh4ieLOto4QGWqIZauClWljNwT8=)
2: Sb1NKMUsLxLkah774RMkG-AMpY8.crl (hash: 0qyk/Q7WaoOMAD/A1Wdibyrc0QF1BDXELhbgypxdb6E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6c:6b:cd:24:04:e5:69:ac:5b:8b:2e:03:4e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=dc9bedd4a4ed7d0a242ea6744551da0e1d2bc28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1e:11:b7:55:0e:f4:58:9a:ef:eb:6d:de:73:
5b:d8:c6:10:3a:a3:2d:0d:78:1e:45:e6:ce:c7:c9:
c2:48:83:2c:84:c7:07:95:9c:35:43:e8:d9:33:a1:
02:ad:ea:7a:b0:af:a3:5c:61:4f:41:21:f2:1d:d9:
b5:f5:40:dd:8f:20:23:3c:e1:d8:2a:87:10:75:92:
ca:dd:79:2d:8c:93:24:67:ba:1c:c8:b3:f3:ed:52:
bc:98:4d:9f:47:26:9e:ac:42:21:6b:d7:06:72:36:
1f:a7:09:f6:9f:52:52:ca:0c:e3:4c:c7:14:cf:c3:
73:8f:52:08:81:f7:ba:76:10:9b:8b:bf:50:4b:49:
f2:f4:e8:5e:a3:78:88:2f:48:d9:89:b3:d4:f2:72:
22:6d:03:89:e9:c2:29:8d:e4:a0:b6:89:14:d2:71:
c2:67:97:94:c1:f5:6d:67:2b:c4:d8:c0:5f:d8:3e:
43:cd:7e:16:83:d1:b3:96:d7:18:30:d9:5e:34:4c:
84:d0:03:79:03:83:87:f0:1f:b1:80:f4:4e:1a:10:
c3:f0:ef:a5:6a:9a:b7:14:70:f9:8a:12:ea:c9:b4:
0a:b3:05:75:00:90:4b:de:25:0f:1f:2a:f1:26:b4:
51:98:72:f7:26:02:1a:83:af:aa:44:1d:0c:49:f2:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9B:ED:D4:A4:ED:7D:0A:24:2E:A6:74:45:51:DA:0E:1D:2B:C2:8B
X509v3 Authority Key Identifier:
keyid:49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:43:c3:20:66:35:be:58:13:2a:24:e0:dc:83:d2:03:18:3a:
2d:b1:50:a0:19:c2:8a:89:ec:08:42:b7:d6:52:52:da:ad:f0:
0e:a5:80:30:1e:60:54:b2:22:3c:29:e2:8e:2d:3b:ab:d9:44:
2b:3b:b0:46:41:93:bc:f4:07:b9:b8:32:8d:f1:ea:ae:d9:ab:
9d:46:9d:bf:aa:d9:93:84:fc:22:e5:c9:e4:fa:1b:7d:1f:ec:
1c:96:89:94:e8:ca:0b:df:9f:49:01:e2:62:12:e6:74:82:b0:
7f:cd:96:14:eb:7e:5c:01:8e:bd:52:64:ad:c4:1c:90:78:86:
76:61:50:0b:8d:c9:a5:5d:cb:11:91:05:2d:f0:ce:19:e7:69:
43:b2:2d:8b:0d:69:69:28:d0:de:d1:f6:da:ef:37:7a:2b:08:
9e:26:16:0a:3b:53:5d:df:68:4d:9e:f6:64:76:a6:82:6a:8a:
ed:1d:33:b4:b6:65:71:5c:b9:95:78:27:be:f6:ee:e3:17:3a:
50:7c:fc:a0:a4:cd:f1:1b:c3:b1:72:ed:2f:d3:df:8f:f0:34:
79:2d:65:df:72:cf:b5:db:a6:bb:c1:2f:d8:31:9d:18:fa:51:
3c:de:49:1b:be:de:08:df:5e:71:f2:b1:0e:16:c7:4e:7a:90:
fd:54:db:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TmxrzSQE5WmsW4suA06SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YmQ0ZDI4YzUyYzJmMTJlNDZhMWVmYmUxMTMyNDFiZTAw
Y2E1OGYwHhcNMjUwMTMxMTcwMDIwWhcNMjUwMjAxMTcwMDIwWjAzMTEwLwYDVQQD
EyhkYzliZWRkNGE0ZWQ3ZDBhMjQyZWE2NzQ0NTUxZGEwZTFkMmJjMjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB4Rt1UO9Fia7+tt3nNb2MYQOqMt
DXgeRebOx8nCSIMshMcHlZw1Q+jZM6ECrep6sK+jXGFPQSHyHdm19UDdjyAjPOHY
KocQdZLK3XktjJMkZ7ocyLPz7VK8mE2fRyaerEIha9cGcjYfpwn2n1JSygzjTMcU
z8Nzj1IIgfe6dhCbi79QS0ny9Oheo3iIL0jZibPU8nIibQOJ6cIpjeSgtokU0nHC
Z5eUwfVtZyvE2MBf2D5DzX4Wg9GzltcYMNleNEyE0AN5A4OH8B+xgPROGhDD8O+l
apq3FHD5ihLqybQKswV1AJBL3iUPHyrxJrRRmHL3JgIag6+qRB0MSfK8kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyb7dSk7X0KJC6mdEVR2g4dK8KLMB8GA1UdIwQY
MBaAFEm9TSjFLC8S5Goe++ETJBvgDKWPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNWFmNDctOTQ1Mi00YzU1LWJjMmYt
NTc0NjAwN2NiMmEzLzEvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iNWFmNDctOTQ1Mi00YzU1LWJjMmYtNTc0NjAwN2NiMmEz
LzEvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0PDIGY1
vlgTKiTg3IPSAxg6LbFQoBnCionsCEK31lJS2q3wDqWAMB5gVLIiPCniji07q9lE
KzuwRkGTvPQHubgyjfHqrtmrnUadv6rZk4T8IuXJ5PobfR/sHJaJlOjKC9+fSQHi
YhLmdIKwf82WFOt+XAGOvVJkrcQckHiGdmFQC43JpV3LEZEFLfDOGedpQ7Itiw1p
aSjQ3tH22u83eisIniYWCjtTXd9oTZ72ZHamgmqK7R0ztLZlcVy5lXgnvvbu4xc6
UHz8oKTN8RvDsXLtL9Pfj/A0eS1l33LPtdumu8Ev2DGdGPpRPN5JG77eCN9ecfKx
DhbHTnqQ/VTbMw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:53 2025 by rpki-client