Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
File: Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft (raw, json)
Hash identifier: Fi4eFc3yJ8j6teNds6J4Epz8YOzVz2b0QDbMFGJQWqk=
Subject key identifier: 18:B1:24:4D:EC:75:E6:C0:3B:6B:DD:77:B8:F7:6F:7E:16:59:C5:3F
Authority key identifier: 49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E
Certificate issuer: /CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e
Certificate serial: 0194BD17A8078D988B4EAC5243E0284CB580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
Manifest number: 0EC0
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl (hash: eNYddHjzJrhutJjuTI5CgGpGikJMGEuB10tjtaSnP04=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a8:07:8d:98:8b:4e:ac:52:43:e0:28:4c:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=18b1244dec75e6c03b6bdd77b8f76f7e1659c53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:60:be:6f:1a:11:29:16:7a:d2:89:54:7b:14:
b9:01:dd:dc:ba:c7:61:36:ea:86:13:0c:71:81:30:
e1:34:17:76:82:10:6c:d7:34:3d:43:cb:23:64:13:
65:e6:8b:eb:3c:e7:50:36:54:10:b8:ee:cf:ab:98:
1a:70:fd:e9:6a:a8:a6:86:1e:5a:7e:26:d2:9e:74:
c4:38:03:e4:c0:c6:cf:6a:c2:84:42:47:c2:65:0f:
aa:40:9e:fe:81:e9:fd:f9:b8:fb:2d:74:99:8b:c3:
42:91:b7:fc:6e:e1:5d:b3:88:73:ae:92:2c:9b:f6:
e3:bc:35:50:06:16:7b:e6:3d:d3:0f:7e:19:58:7a:
5a:66:82:ea:cb:31:19:d1:2b:d5:90:5a:d2:03:6e:
17:df:00:56:10:3e:09:21:95:3a:6b:08:0e:fb:2e:
3f:61:0a:92:a2:64:da:2d:58:47:63:c2:91:e4:df:
2e:24:c4:a3:a5:c7:7d:31:2e:d5:34:55:e3:b1:de:
6b:1d:5d:7d:c2:5f:3a:ec:54:28:f8:3c:67:f4:a1:
c7:bc:f0:33:3b:16:9d:b5:c0:3b:fb:03:59:50:a0:
b8:a8:de:82:dc:0b:72:44:9f:77:a9:89:8a:02:5c:
91:55:aa:5e:a8:a3:7c:02:aa:60:dc:bd:e0:d6:99:
a1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B1:24:4D:EC:75:E6:C0:3B:6B:DD:77:B8:F7:6F:7E:16:59:C5:3F
X509v3 Authority Key Identifier:
keyid:49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:fb:b9:f3:fe:81:72:bf:cb:21:23:8b:2e:3d:66:9c:63:e6:
e5:75:f5:41:e2:db:8b:e3:72:fc:b0:a4:3a:dc:22:83:af:c8:
29:0a:21:ad:d4:f4:77:af:3c:b8:97:b6:bf:f0:86:83:0e:ed:
11:a8:96:38:28:67:40:08:6c:6a:3a:bb:fd:a6:ac:09:f2:77:
11:83:eb:ea:90:7f:33:64:92:cb:88:3a:64:a9:44:cc:1d:95:
a4:c3:48:e2:67:bd:c8:25:a3:1f:34:ce:d6:e4:fe:19:71:33:
ac:e6:58:f3:b7:6b:54:f3:d3:9c:d7:fe:ce:ec:3d:70:e0:9f:
de:1f:46:6c:aa:af:a5:1a:30:61:ae:ba:91:9a:9f:78:a4:f3:
02:76:ce:b1:c7:70:01:21:f7:cf:0b:67:79:3e:9d:74:36:17:
6c:75:23:b1:7c:11:71:b2:58:d1:61:56:d6:d3:87:fc:14:31:
a5:92:e5:48:49:92:56:cf:8e:37:d2:46:dc:64:f7:3f:2b:ce:
1a:cb:87:4b:15:35:a6:41:12:98:11:00:aa:2b:98:9c:3a:af:
d6:ee:1b:26:f0:92:78:91:eb:bf:a3:d9:5c:64:f3:86:fd:89:
81:95:9f:e7:5d:78:3c:5b:03:fb:7c:bf:d7:e7:23:fb:d4:36:
29:ee:4a:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F6gHjZiLTqxSQ+AoTLWAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YmE3NGM4Y2JlMWUyN2ZhY2E1YzY3ZTg5ZDNmNjIzYzFm
MDlhNWUwHhcNMjUwMTMxMTYwMDMxWhcNMjUwMjAxMTYwMDMxWjAzMTEwLwYDVQQD
EygxOGIxMjQ0ZGVjNzVlNmMwM2I2YmRkNzdiOGY3NmY3ZTE2NTljNTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72C+bxoRKRZ60olUexS5Ad3cusdh
NuqGEwxxgTDhNBd2ghBs1zQ9Q8sjZBNl5ovrPOdQNlQQuO7Pq5gacP3paqimhh5a
fibSnnTEOAPkwMbPasKEQkfCZQ+qQJ7+gen9+bj7LXSZi8NCkbf8buFds4hzrpIs
m/bjvDVQBhZ75j3TD34ZWHpaZoLqyzEZ0SvVkFrSA24X3wBWED4JIZU6awgO+y4/
YQqSomTaLVhHY8KR5N8uJMSjpcd9MS7VNFXjsd5rHV19wl867FQo+Dxn9KHHvPAz
OxadtcA7+wNZUKC4qN6C3AtyRJ93qYmKAlyRVapeqKN8Aqpg3L3g1pmhSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBixJE3sdebAO2vdd7j3b34WWcU/MB8GA1UdIwQY
MBaAFEm6dMjL4eJ/rKXGfonT9iPB8JpeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2JwMHlNdmg0bi1zcGNaLWlkUDJJOEh3bWw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9lNzM2ZmEtODFjOC00NzVmLWE3M2Ut
MmJiMGUxYzBlM2VmLzEvU2JwMHlNdmg0bi1zcGNaLWlkUDJJOEh3bWw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9lNzM2ZmEtODFjOC00NzVmLWE3M2UtMmJiMGUxYzBlM2Vm
LzEvU2JwMHlNdmg0bi1zcGNaLWlkUDJJOEh3bWw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/u58/6B
cr/LISOLLj1mnGPm5XX1QeLbi+Ny/LCkOtwig6/IKQohrdT0d688uJe2v/CGgw7t
EaiWOChnQAhsajq7/aasCfJ3EYPr6pB/M2SSy4g6ZKlEzB2VpMNI4me9yCWjHzTO
1uT+GXEzrOZY87drVPPTnNf+zuw9cOCf3h9GbKqvpRowYa66kZqfeKTzAnbOscdw
ASH3zwtneT6ddDYXbHUjsXwRcbJY0WFW1tOH/BQxpZLlSEmSVs+ON9JG3GT3PyvO
GsuHSxU1pkESmBEAqiuYnDqv1u4bJvCSeJHrv6PZXGTzhv2JgZWf5114PFsD+3y/
1+cj+9Q2Ke5KTw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:22:13 2025 by rpki-client