Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
File: SF92J0yAXSWxFaOtuh0uoVTe6tc.mft (raw, json)
Hash identifier: SWymGtsEn5dbb9KOlSsb1OOk36eyG3BtwpkkK0fQrNE=
Subject key identifier: 8D:BC:8C:E4:D3:B9:E7:AD:CD:4C:1C:D9:C3:E8:30:E2:DA:DE:C3:74
Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
Certificate issuer: /CN=485f76274c805d25b115a3adba1d2ea154deead7
Certificate serial: 0194BC3C23E8E638F7EB359A77838A8DA28D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
Manifest number: 0E1D
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: JWbxkXMT1AbpQisEDcJK6XiKzB0.roa (hash: j5i4M4w+YBqEaXEsOz14p6tq/xzrFVxmrAYSCZG3o+M=)
2: S81leN1fuHkrYmn7HxOWRSa_EgA.roa (hash: jKDEc5FdU7Yds63BEna9vHfX9LdcVE/wlCXgfCTj304=)
3: SF92J0yAXSWxFaOtuh0uoVTe6tc.crl (hash: +Q5lo6xWDpV6Y1BqFrFy+4fq9zE4aGrfC5O2IMjOtqY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:23:e8:e6:38:f7:eb:35:9a:77:83:8a:8d:a2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=8dbc8ce4d3b9e7adcd4c1cd9c3e830e2dadec374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:53:d6:c6:16:6c:5f:6e:24:f9:10:6e:46:
9a:a5:65:54:42:56:a8:34:c7:ab:dd:af:e4:79:e0:
74:ee:fe:d7:56:f7:5d:fa:33:10:6a:22:ab:e8:8a:
2f:7d:20:47:2c:00:cf:c2:50:ea:f3:85:8a:ba:e7:
05:25:46:3d:76:e6:63:2d:4c:6f:8c:3e:41:78:25:
c9:93:d8:d2:4e:e0:fd:de:41:0d:e6:59:91:76:9e:
51:47:fa:2d:61:76:24:5d:0c:5f:cd:7a:a3:57:5e:
b2:cd:68:e1:12:d7:92:b8:94:0c:ad:56:82:e3:a7:
36:8f:22:36:f7:31:9a:de:3d:fd:8b:bd:06:52:a4:
ef:34:15:9e:d8:9b:87:29:71:aa:21:57:37:11:49:
81:79:d9:32:d5:0e:ae:44:05:32:76:9c:ce:54:9f:
aa:b8:e5:3f:a9:cd:c3:c2:02:5c:48:11:21:3e:e4:
de:a3:43:c5:55:e9:af:01:01:54:40:fc:e6:e0:70:
e2:7c:3d:9f:84:6a:d0:74:68:76:17:87:18:88:f9:
ff:7b:37:24:0a:65:5c:35:a6:a5:5b:77:39:48:44:
a7:02:f3:b5:c1:bc:89:d6:42:b9:ce:9a:47:67:13:
0a:69:b2:5d:4c:d0:a2:11:b7:ae:37:21:04:16:16:
bb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BC:8C:E4:D3:B9:E7:AD:CD:4C:1C:D9:C3:E8:30:E2:DA:DE:C3:74
X509v3 Authority Key Identifier:
keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f5:f4:8e:2c:09:fb:0d:58:ae:aa:a6:a8:62:e6:90:3e:59:
28:f5:f2:1f:f4:78:bb:7d:84:1f:6d:5c:81:bb:07:06:38:1b:
91:74:ce:d6:3d:13:3e:c9:27:35:c6:84:34:33:59:c2:0e:e4:
43:06:0b:32:5c:a0:34:32:a9:00:99:64:aa:69:05:33:8b:8f:
87:d1:0f:73:77:83:39:1c:34:cc:57:18:b3:7d:54:05:5b:ef:
cf:a2:f1:fd:26:bf:08:b8:8a:c6:1d:3c:91:a1:06:d9:0f:18:
6e:f1:f0:b1:5a:c4:eb:ef:97:29:be:65:1f:9b:2f:65:ce:8c:
44:b5:ce:54:ad:ac:24:ad:a0:17:22:86:f6:26:f3:1c:97:45:
59:71:bc:62:66:0a:f4:41:29:95:f6:94:c0:93:59:3e:c2:e0:
33:54:e6:da:27:d7:0a:68:3f:ee:6c:88:f8:83:97:a4:e9:01:
7b:1b:a0:20:f6:1f:fe:f0:70:93:4d:70:1b:e8:cb:df:0a:d2:
8c:0a:49:15:65:0e:f0:01:0a:1e:04:c2:5f:ad:d7:d7:47:83:
ce:a2:95:0f:58:72:a4:3a:47:8e:5b:91:67:b9:60:45:35:63:
97:54:46:53:08:b5:25:7f:93:9f:a3:0d:13:ca:94:08:59:fe:
8e:fa:a0:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PCPo5jj36zWad4OKjaKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NWY3NjI3NGM4MDVkMjViMTE1YTNhZGJhMWQyZWExNTRk
ZWVhZDcwHhcNMjUwMTMxMTIwMDQ1WhcNMjUwMjAxMTIwMDQ1WjAzMTEwLwYDVQQD
Eyg4ZGJjOGNlNGQzYjllN2FkY2Q0YzFjZDljM2U4MzBlMmRhZGVjMzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUxT1sYWbF9uJPkQbkaapWVUQlao
NMer3a/keeB07v7XVvdd+jMQaiKr6IovfSBHLADPwlDq84WKuucFJUY9duZjLUxv
jD5BeCXJk9jSTuD93kEN5lmRdp5RR/otYXYkXQxfzXqjV16yzWjhEteSuJQMrVaC
46c2jyI29zGa3j39i70GUqTvNBWe2JuHKXGqIVc3EUmBedky1Q6uRAUydpzOVJ+q
uOU/qc3DwgJcSBEhPuTeo0PFVemvAQFUQPzm4HDifD2fhGrQdGh2F4cYiPn/ezck
CmVcNaalW3c5SESnAvO1wbyJ1kK5zppHZxMKabJdTNCiEbeuNyEEFha71QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI28jOTTueetzUwc2cPoMOLa3sN0MB8GA1UdIwQY
MBaAFEhfdidMgF0lsRWjrbodLqFU3urXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0Y5MkoweUFYU1d4RmFPdHVoMHVvVlRlNnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ODViNTMtNmYxMS00MWRiLWJlYWQt
NDNlYWY3NTY3Y2FhLzEvU0Y5MkoweUFYU1d4RmFPdHVoMHVvVlRlNnRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ODViNTMtNmYxMS00MWRiLWJlYWQtNDNlYWY3NTY3Y2Fh
LzEvU0Y5MkoweUFYU1d4RmFPdHVoMHVvVlRlNnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/X0jiwJ
+w1YrqqmqGLmkD5ZKPXyH/R4u32EH21cgbsHBjgbkXTO1j0TPsknNcaENDNZwg7k
QwYLMlygNDKpAJlkqmkFM4uPh9EPc3eDORw0zFcYs31UBVvvz6Lx/Sa/CLiKxh08
kaEG2Q8YbvHwsVrE6++XKb5lH5svZc6MRLXOVK2sJK2gFyKG9ibzHJdFWXG8YmYK
9EEplfaUwJNZPsLgM1Tm2ifXCmg/7myI+IOXpOkBexugIPYf/vBwk01wG+jL3wrS
jApJFWUO8AEKHgTCX63X10eDzqKVD1hypDpHjluRZ7lgRTVjl1RGUwi1JX+Tn6MN
E8qUCFn+jvqgbg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:55 2025 by rpki-client