Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
File: s7b1TqmxWovU8zglOGyyd7A0Od0.mft (raw, json)
Hash identifier: 3SfNtVcCqfQmZyr1NcsTFyMdIG6VZJpTQ2j0FQdy/IE=
Subject key identifier: 22:22:C0:08:D9:71:64:95:9D:CF:D4:80:9F:88:76:5B:C3:9D:F5:64
Authority key identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
Certificate issuer: /CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Certificate serial: 0194BBCE38647792077C618B322422FD99BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: 92biv5HuF4-MCYX3-JYKsYM_9oQ.roa (hash: lEdkt5OxgfIQLcK/b1IaxhpYCzESUh8WNTGGBlxICaA=)
2: s7b1TqmxWovU8zglOGyyd7A0Od0.crl (hash: qAG7Kx18udxT448EaWtOmUnpweqb5R54DvKcWnWnT2o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:38:64:77:92:07:7c:61:8b:32:24:22:fd:99:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=2222c008d97164959dcfd4809f88765bc39df564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8b:06:ca:09:93:13:f8:b0:3a:3b:d9:29:1a:
e5:e7:b7:3e:6c:c0:52:3a:b9:65:07:3b:a4:bc:42:
59:06:9a:21:de:c3:02:0e:f2:98:ac:d1:4d:04:ba:
95:be:b5:55:ae:f7:39:4b:20:ba:b0:a1:55:42:7c:
5f:97:40:fd:d8:ca:03:7e:1d:e8:e1:e1:be:73:a8:
04:d7:17:ca:66:de:a9:0a:77:25:3b:64:27:c3:75:
1b:2b:f7:d5:a5:7b:3d:63:14:b8:0b:7c:0c:67:31:
ed:6f:ea:f9:ef:ab:dd:87:83:56:ad:02:df:35:da:
52:af:26:7f:4a:d0:36:88:04:5f:5e:58:8b:99:9f:
13:e3:c4:bd:b9:fb:26:73:c9:c9:82:eb:da:67:e9:
19:2d:12:5c:f0:b9:e8:c8:9a:2f:fd:cf:67:88:2a:
50:f3:28:bb:05:d3:22:ea:b7:46:4c:30:83:40:cc:
cc:9b:33:8c:e2:a4:46:d3:9f:a8:03:a0:b0:51:a6:
3a:99:9f:ad:91:2a:81:00:63:34:59:ff:d4:f4:b0:
aa:d7:e4:87:dd:4b:43:c3:fc:0a:7d:eb:84:f7:d1:
c6:f5:d0:d0:9f:7a:64:4b:75:17:18:07:e0:fc:ed:
06:d0:36:e7:23:35:99:26:b7:b9:c0:dd:05:ac:b6:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:22:C0:08:D9:71:64:95:9D:CF:D4:80:9F:88:76:5B:C3:9D:F5:64
X509v3 Authority Key Identifier:
keyid:B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:5d:40:44:b8:b1:09:26:e4:0e:cc:01:2a:bc:a6:8b:6a:e9:
33:c0:4a:23:19:7f:fe:58:40:2f:8c:18:31:8f:0b:dd:4a:5d:
5d:7b:ec:fe:1e:33:d8:8c:e1:b3:b0:68:22:5e:6a:dd:db:40:
d9:05:4b:42:07:cc:78:31:71:79:b6:56:df:cf:52:72:b3:2d:
d3:45:8a:3d:dd:3b:74:d2:76:e2:c7:cb:92:e2:de:21:6b:4a:
ad:ac:a6:0d:a8:20:10:13:59:7d:53:82:8e:71:8f:bb:30:f2:
6a:a9:68:23:55:2d:c3:f3:4b:d1:b7:2c:0b:65:4c:5b:f5:30:
d5:84:82:c8:a4:ab:7d:98:64:8b:1d:5b:bf:72:26:13:b0:0e:
c6:dd:48:57:ff:c2:da:0a:43:02:7b:93:1c:07:9d:e3:b7:04:
f4:36:89:12:c6:dd:b5:cf:65:ea:57:26:95:f9:a3:c3:dd:10:
ee:e2:6d:1d:dc:b5:d6:70:8b:7a:a2:d8:0c:a1:52:0b:91:ad:
e7:93:ce:2c:e0:90:a2:05:d2:be:4f:ed:42:4e:ca:80:92:82:
22:cd:d5:2a:b7:ac:ac:45:28:ce:63:17:27:94:3e:f7:f6:d8:
d0:0e:61:97:60:02:c7:e7:b2:b7:e0:aa:33:26:6d:af:9b:46:
2a:4e:8a:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zjhkd5IHfGGLMiQi/Zm/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYjZmNTRlYTliMTVhOGJkNGYzMzgyNTM4NmNiMjc3YjAz
NDM5ZGQwHhcNMjUwMTMxMTAwMDQxWhcNMjUwMjAxMTAwMDQxWjAzMTEwLwYDVQQD
EygyMjIyYzAwOGQ5NzE2NDk1OWRjZmQ0ODA5Zjg4NzY1YmMzOWRmNTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzosGygmTE/iwOjvZKRrl57c+bMBS
OrllBzukvEJZBpoh3sMCDvKYrNFNBLqVvrVVrvc5SyC6sKFVQnxfl0D92MoDfh3o
4eG+c6gE1xfKZt6pCnclO2Qnw3UbK/fVpXs9YxS4C3wMZzHtb+r576vdh4NWrQLf
NdpSryZ/StA2iARfXliLmZ8T48S9ufsmc8nJguvaZ+kZLRJc8LnoyJov/c9niCpQ
8yi7BdMi6rdGTDCDQMzMmzOM4qRG05+oA6CwUaY6mZ+tkSqBAGM0Wf/U9LCq1+SH
3UtDw/wKfeuE99HG9dDQn3pkS3UXGAfg/O0G0DbnIzWZJre5wN0FrLbXfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIiwAjZcWSVnc/UgJ+IdlvDnfVkMB8GA1UdIwQY
MBaAFLO29U6psVqL1PM4JThssnewNDndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczdiMVRxbXhXb3ZVOHpnbE9HeXlkN0EwT2QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84ZGU0YTMtOGQ1YS00NmIxLWE3MzUt
MmY0NmU5MzE3Y2M2LzEvczdiMVRxbXhXb3ZVOHpnbE9HeXlkN0EwT2QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84ZGU0YTMtOGQ1YS00NmIxLWE3MzUtMmY0NmU5MzE3Y2M2
LzEvczdiMVRxbXhXb3ZVOHpnbE9HeXlkN0EwT2QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAol1ARLix
CSbkDswBKrymi2rpM8BKIxl//lhAL4wYMY8L3UpdXXvs/h4z2Izhs7BoIl5q3dtA
2QVLQgfMeDFxebZW389ScrMt00WKPd07dNJ24sfLkuLeIWtKraymDaggEBNZfVOC
jnGPuzDyaqloI1Utw/NL0bcsC2VMW/Uw1YSCyKSrfZhkix1bv3ImE7AOxt1IV//C
2gpDAnuTHAed47cE9DaJEsbdtc9l6lcmlfmjw90Q7uJtHdy11nCLeqLYDKFSC5Gt
55POLOCQogXSvk/tQk7KgJKCIs3VKresrEUozmMXJ5Q+9/bY0A5hl2ACx+eyt+Cq
MyZtr5tGKk6KEw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 08:04:58 2025 by rpki-client