Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
File: sho_SvlKWA6557WFQqAISyHCsJs.mft (raw, json)
Hash identifier: TqoDats35JtEfX6wixWYvv0D3NYbcXttIFEChDZOpIQ=
Subject key identifier: 59:80:75:EB:90:B8:76:E2:1A:43:79:3B:A1:8E:4F:ED:B8:05:54:27
Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
Certificate issuer: /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Certificate serial: 0194BC3C597EBDBE07C65C2C756889BE2D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
Manifest number: 0508
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: UXRIjhO3UUO4YoZo2r0jseniB20.roa (hash: KSt+2WBEDCtsKI4qArbIQ4v7Y4cNWZ7oIb8Mm9wlcS0=)
2: sho_SvlKWA6557WFQqAISyHCsJs.crl (hash: UzId6UZ1M6XKhvJqhDgdX8kNMTCTDX+yUYo20TXwwog=)
3: ygg1jPU11rM4AgPA_fHJm1HIbDA.roa (hash: bQEdp6E9utyQGzeJGQwHEXnTvCFMaSrhkRZ3o6gqExk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:59:7e:bd:be:07:c6:5c:2c:75:68:89:be:2d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=598075eb90b876e21a43793ba18e4fedb8055427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e8:b5:01:4c:6f:5f:a6:16:e1:39:59:76:56:
31:25:bc:13:86:ab:50:76:81:18:80:02:35:6a:3e:
47:f5:dd:58:7f:98:49:c0:b3:89:0c:5d:3e:bb:67:
9a:42:df:c0:a6:3e:2d:70:c3:36:ee:bc:f2:67:54:
3d:e7:8c:a7:c5:1d:e5:02:69:1b:8d:69:a6:51:64:
56:50:68:65:96:97:6d:31:07:8e:07:ad:8b:fd:8c:
24:a1:18:31:68:f2:3e:46:8e:02:18:fc:5b:2a:27:
ad:f0:94:09:99:3b:38:a8:f3:2f:10:55:a4:52:a2:
ce:d0:48:2f:6f:74:a6:45:7a:ea:7b:cf:90:a0:79:
57:d8:be:b7:46:38:1d:7e:94:f0:06:c2:55:ba:82:
f4:6c:2b:aa:ca:d2:67:a6:88:ab:4a:8e:2e:c2:24:
2f:25:14:66:eb:ae:57:b9:46:3d:ff:fe:8a:e5:cd:
b5:67:75:16:e5:1a:b5:cb:69:d8:af:02:10:a0:05:
82:8a:6a:e9:fe:83:7b:20:08:6b:d2:99:e1:da:36:
15:22:e7:62:c3:40:f9:0d:1e:6b:05:65:5f:27:4f:
64:f1:13:60:81:41:4f:b2:98:ca:5c:d1:bf:e8:64:
8f:50:91:a1:67:5c:5b:3f:17:bc:f2:cb:80:7e:be:
f6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:80:75:EB:90:B8:76:E2:1A:43:79:3B:A1:8E:4F:ED:B8:05:54:27
X509v3 Authority Key Identifier:
keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:46:a4:29:cd:de:d6:e4:f3:d1:c8:45:b5:29:97:63:7b:16:
d1:84:67:ce:51:1f:38:ea:d1:57:dc:21:ec:98:70:d1:26:94:
b6:c7:5f:28:38:d0:0b:dc:19:61:6c:02:09:76:e4:89:f2:9a:
10:7b:97:d8:f3:ab:9e:8e:00:68:69:24:16:e2:79:76:48:bb:
bd:05:58:30:3a:b8:b2:46:ab:1b:04:5a:28:61:b4:97:c8:01:
34:21:46:a1:4c:02:44:a1:e5:9e:de:73:68:ff:da:3e:73:d0:
6f:19:bc:7c:6d:a5:31:79:14:d2:23:85:76:65:aa:88:e2:78:
76:26:6d:15:e2:0e:e2:5d:99:09:f8:50:4a:f5:75:16:43:da:
37:ad:04:d9:ff:3d:f5:5d:28:56:06:49:c2:35:79:90:90:df:
d1:87:13:95:51:db:ec:79:4b:f1:b0:6c:64:5b:09:38:a3:fd:
fb:e7:5d:fb:b1:40:b7:4d:59:ed:fc:85:9b:56:73:46:c4:c2:
6d:1c:1a:89:fe:7a:13:51:fb:43:e6:d2:7e:bd:90:23:77:cd:
89:09:22:e8:e1:41:95:de:42:04:0f:bf:9d:11:26:a8:5e:89:
12:6e:7e:71:32:47:f7:da:eb:66:a9:5d:d6:60:dc:1e:1c:73:
de:96:5c:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PFl+vb4HxlwsdWiJvi2HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMWEzZjRhZjk0YTU4MGViOWU3YjU4NTQyYTAwODRiMjFj
MmIwOWIwHhcNMjUwMTMxMTIwMDU5WhcNMjUwMjAxMTIwMDU5WjAzMTEwLwYDVQQD
Eyg1OTgwNzVlYjkwYjg3NmUyMWE0Mzc5M2JhMThlNGZlZGI4MDU1NDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ei1AUxvX6YW4TlZdlYxJbwThqtQ
doEYgAI1aj5H9d1Yf5hJwLOJDF0+u2eaQt/Apj4tcMM27rzyZ1Q954ynxR3lAmkb
jWmmUWRWUGhllpdtMQeOB62L/YwkoRgxaPI+Ro4CGPxbKiet8JQJmTs4qPMvEFWk
UqLO0Egvb3SmRXrqe8+QoHlX2L63RjgdfpTwBsJVuoL0bCuqytJnpoirSo4uwiQv
JRRm665XuUY9//6K5c21Z3UW5Rq1y2nYrwIQoAWCimrp/oN7IAhr0pnh2jYVIudi
w0D5DR5rBWVfJ09k8RNggUFPspjKXNG/6GSPUJGhZ1xbPxe88suAfr72gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmAdeuQuHbiGkN5O6GOT+24BVQnMB8GA1UdIwQY
MBaAFLIaP0r5SlgOuee1hUKgCEshwrCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2hvX1N2bEtXQTY1NTdXRlFxQUlTeUhDc0pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85OTFmMWMtOTk5Yi00Zjc1LWIwYmYt
NTEyOTE3MmI2OTY2LzEvc2hvX1N2bEtXQTY1NTdXRlFxQUlTeUhDc0pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS85OTFmMWMtOTk5Yi00Zjc1LWIwYmYtNTEyOTE3MmI2OTY2
LzEvc2hvX1N2bEtXQTY1NTdXRlFxQUlTeUhDc0pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEakKc3e
1uTz0chFtSmXY3sW0YRnzlEfOOrRV9wh7Jhw0SaUtsdfKDjQC9wZYWwCCXbkifKa
EHuX2POrno4AaGkkFuJ5dki7vQVYMDq4skarGwRaKGG0l8gBNCFGoUwCRKHlnt5z
aP/aPnPQbxm8fG2lMXkU0iOFdmWqiOJ4diZtFeIO4l2ZCfhQSvV1FkPaN60E2f89
9V0oVgZJwjV5kJDf0YcTlVHb7HlL8bBsZFsJOKP9++dd+7FAt01Z7fyFm1ZzRsTC
bRwaif56E1H7Q+bSfr2QI3fNiQki6OFBld5CBA+/nREmqF6JEm5+cTJH99rrZqld
1mDcHhxz3pZcIg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:58 2025 by rpki-client