Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
File: sKclKqZD0NvELaQQ6cIPVwM2jNg.mft (raw, json)
Hash identifier: Ba8q6nl65O2QkR/AHcE9hpfgRA+JtGfzZbSSNZwknAA=
Subject key identifier: FC:1F:86:9A:4C:2D:82:4B:85:8A:2D:5E:E5:0B:D1:F4:EE:82:BD:0F
Authority key identifier: B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8
Certificate issuer: /CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8
Certificate serial: 0194BC72E4970F4C999A0A4C77C682403653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: n60UwFRR1GBkJeWW6TyEPviSqRg.roa (hash: 1Igyo5YmuM6qjLho9mnJYZI0b/XVpfl/12bJjKoYl+o=)
2: sKclKqZD0NvELaQQ6cIPVwM2jNg.crl (hash: drCzW6jcwfTfMl94u6LJx+n46bTXKidRoV5yXLhW9a4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e4:97:0f:4c:99:9a:0a:4c:77:c6:82:40:36:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=fc1f869a4c2d824b858a2d5ee50bd1f4ee82bd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:74:ee:6d:2f:75:49:de:fc:84:d9:24:1c:aa:
80:97:64:dc:ac:2e:a1:7f:0b:71:3c:5e:fc:02:30:
09:ae:b7:b9:31:a0:0a:97:d5:39:8f:33:ab:1b:85:
4f:a4:21:5a:93:ce:49:21:41:54:ad:04:41:b6:35:
6f:d5:04:4b:10:75:ab:93:d0:69:52:63:6a:20:2a:
3e:94:d8:5c:8b:95:f2:74:b1:ef:36:e4:ed:f7:63:
17:0b:62:70:d6:31:9b:9d:5d:f8:c7:a2:68:9c:9a:
ec:c7:f1:9b:a2:b2:6d:45:2b:43:57:93:e4:76:a4:
32:ef:63:d5:be:d2:ba:6f:06:f2:69:40:05:a0:1e:
b0:d1:52:3a:57:0e:67:fc:7f:de:00:0f:6c:51:e7:
dc:0b:ae:47:b9:b7:a8:f7:80:7a:e3:a2:f3:d1:72:
4a:c5:46:9d:df:74:df:e2:02:12:ac:76:4d:4d:11:
25:69:26:64:8f:ff:99:49:92:40:e6:05:8f:c8:51:
b6:6f:b9:4d:7d:13:cc:1a:8d:b3:c7:be:9e:54:50:
01:4c:a1:ee:d5:4c:cf:66:1d:32:c2:4c:6a:05:3f:
26:7c:9d:85:eb:aa:2e:95:c2:56:59:3a:85:a1:41:
61:ba:68:0e:e9:18:fe:5d:77:62:4d:ee:65:23:5c:
cb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1F:86:9A:4C:2D:82:4B:85:8A:2D:5E:E5:0B:D1:F4:EE:82:BD:0F
X509v3 Authority Key Identifier:
keyid:B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5d:22:c9:28:36:83:69:77:97:44:f4:64:0d:b6:fa:b8:3a:
b1:a8:05:41:98:d5:3f:b4:a1:9d:37:3d:53:58:f3:91:ce:a7:
26:79:b8:c6:cd:f6:2b:d6:8f:b2:16:e7:d6:7d:31:9e:18:70:
40:36:ef:b8:9b:a9:a6:85:d7:58:7f:ee:00:35:50:79:80:a0:
26:ee:69:6e:c8:a9:a4:f4:ff:b2:af:cf:bd:a7:27:b8:f2:cc:
89:a7:d0:da:11:6b:85:84:df:ec:9f:cf:e7:49:b8:1e:d3:f8:
70:66:b5:db:81:d5:34:31:0c:e2:d1:81:c8:dd:96:da:37:09:
13:06:c5:d2:fa:53:55:e2:81:ec:4d:61:27:3b:a7:56:38:79:
b1:06:f9:77:ed:9a:22:4f:41:46:ee:76:67:48:fa:ce:58:21:
eb:86:d4:d3:1a:59:f7:12:7f:7b:5d:53:dc:8c:c6:00:46:78:
0b:54:1a:f1:92:fe:99:58:c2:cb:3d:90:33:db:a9:ab:24:32:
6a:8b:de:63:e4:a1:8a:b7:bb:42:3a:93:55:46:2c:fc:4c:3c:
e6:44:fb:6b:c6:79:95:f5:49:08:24:73:e1:b7:95:de:2c:44:
94:d8:86:89:7e:87:17:93:d7:72:b9:7c:ac:9f:a9:d7:01:1e:
c1:80:be:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cuSXD0yZmgpMd8aCQDZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYTcyNTJhYTY0M2QwZGJjNDJkYTQxMGU5YzIwZjU3MDMz
NjhjZDgwHhcNMjUwMTMxMTMwMDMzWhcNMjUwMjAxMTMwMDMzWjAzMTEwLwYDVQQD
EyhmYzFmODY5YTRjMmQ4MjRiODU4YTJkNWVlNTBiZDFmNGVlODJiZDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinTubS91Sd78hNkkHKqAl2TcrC6h
fwtxPF78AjAJrre5MaAKl9U5jzOrG4VPpCFak85JIUFUrQRBtjVv1QRLEHWrk9Bp
UmNqICo+lNhci5XydLHvNuTt92MXC2Jw1jGbnV34x6JonJrsx/GborJtRStDV5Pk
dqQy72PVvtK6bwbyaUAFoB6w0VI6Vw5n/H/eAA9sUefcC65Hubeo94B646Lz0XJK
xUad33Tf4gISrHZNTRElaSZkj/+ZSZJA5gWPyFG2b7lNfRPMGo2zx76eVFABTKHu
1UzPZh0ywkxqBT8mfJ2F66oulcJWWTqFoUFhumgO6Rj+XXdiTe5lI1zL5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwfhppMLYJLhYotXuUL0fTugr0PMB8GA1UdIwQY
MBaAFLCnJSqmQ9DbxC2kEOnCD1cDNozYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0tjbEtxWkQwTnZFTGFRUTZjSVBWd00yak5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lNGYzZWYtN2JmYy00MDU1LWI3OTgt
MDI4YTJiMGE1M2Q1LzEvc0tjbEtxWkQwTnZFTGFRUTZjSVBWd00yak5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9lNGYzZWYtN2JmYy00MDU1LWI3OTgtMDI4YTJiMGE1M2Q1
LzEvc0tjbEtxWkQwTnZFTGFRUTZjSVBWd00yak5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGV0iySg2
g2l3l0T0ZA22+rg6sagFQZjVP7ShnTc9U1jzkc6nJnm4xs32K9aPshbn1n0xnhhw
QDbvuJuppoXXWH/uADVQeYCgJu5pbsippPT/sq/PvacnuPLMiafQ2hFrhYTf7J/P
50m4HtP4cGa124HVNDEM4tGByN2W2jcJEwbF0vpTVeKB7E1hJzunVjh5sQb5d+2a
Ik9BRu52Z0j6zlgh64bU0xpZ9xJ/e11T3IzGAEZ4C1Qa8ZL+mVjCyz2QM9upqyQy
aoveY+Shire7QjqTVUYs/Ew85kT7a8Z5lfVJCCRz4beV3ixElNiGiX6HF5PXcrl8
rJ+p1wEewYC+bw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:03 2025 by rpki-client