Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
File: SS0kreN6IjOTKECddX1H-XlDt6A.mft (raw, json)
Hash identifier: z0ddvWAYyDP9hpAngbWwnqJZq1+pWh44I7NQYdUqnnc=
Subject key identifier: 53:3D:F3:82:C2:8D:BE:32:EE:4F:42:7F:4B:01:E8:0B:D1:60:E4:B4
Authority key identifier: 49:2D:24:AD:E3:7A:22:33:93:28:40:9D:75:7D:47:F9:79:43:B7:A0
Certificate issuer: /CN=492d24ade37a22339328409d757d47f97943b7a0
Certificate serial: 0194BD1771BFD0C9078975224D4F7261702B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
Manifest number: 0B25
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: SS0kreN6IjOTKECddX1H-XlDt6A.crl (hash: Tn7U4A3Q1usWq6SqFdaEU53Bd7Sg99RGn9eBNl+SepE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:71:bf:d0:c9:07:89:75:22:4d:4f:72:61:70:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492d24ade37a22339328409d757d47f97943b7a0
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=533df382c28dbe32ee4f427f4b01e80bd160e4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:39:88:6e:ba:28:9a:bb:46:82:d0:ca:09:
55:d8:db:29:a9:d1:dd:de:a8:fa:a3:63:fb:7d:6e:
48:f0:c6:31:61:5e:0b:65:30:ba:2c:cc:1b:e1:fc:
c5:97:41:09:c5:45:08:64:39:ac:a6:3e:b1:2d:fc:
74:56:4a:4e:1b:4b:c9:99:7e:05:4c:b9:18:46:71:
59:31:16:01:a4:86:e3:39:86:a3:e2:bc:a6:39:05:
43:d2:08:3b:14:50:24:6f:60:16:b1:e5:34:0b:39:
4e:62:43:a7:7c:4e:e1:e4:ca:c8:a9:b3:5b:d6:4c:
be:f3:73:1e:a2:fb:05:14:de:c4:91:36:08:2d:5f:
28:2d:73:c9:bb:9c:c3:ea:89:6a:bf:31:a3:12:c5:
40:1b:bb:c7:68:ff:d2:e4:ef:52:15:8f:3b:ab:5a:
6a:b1:1d:ea:6e:e5:53:ae:4a:87:c3:5f:c3:9e:51:
a1:0a:9a:21:e7:bb:49:0d:91:cc:38:3f:e8:cc:19:
91:8c:ec:60:6b:a5:2f:74:c5:23:f1:9c:cd:91:77:
c5:e9:84:24:0b:a1:31:4c:d3:10:28:38:60:f3:a0:
39:db:04:fe:c4:d5:44:d6:ac:2f:8b:f3:cc:20:b4:
b9:a3:c0:77:82:72:3a:69:0a:1b:75:0e:a4:4b:fe:
47:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3D:F3:82:C2:8D:BE:32:EE:4F:42:7F:4B:01:E8:0B:D1:60:E4:B4
X509v3 Authority Key Identifier:
keyid:49:2D:24:AD:E3:7A:22:33:93:28:40:9D:75:7D:47:F9:79:43:B7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:7d:68:68:cc:38:39:ce:58:0c:28:ee:2d:b4:04:84:cf:6d:
24:da:49:3f:82:76:67:bb:5a:5d:2d:45:98:bf:78:32:a6:4b:
cd:b5:6d:49:48:4b:b5:33:64:d9:3f:ac:ac:66:eb:d4:32:df:
f6:be:8c:8b:ca:a4:4f:5d:47:0b:98:41:5f:55:59:7a:be:39:
4f:da:d5:f2:01:38:8f:ae:ef:20:5f:bc:68:d8:cb:7b:fa:8a:
be:19:af:54:0f:a4:d1:05:29:2c:8d:80:cd:c9:16:72:16:16:
44:21:f4:58:75:4e:b5:1d:c1:c4:74:89:e7:36:e5:ed:49:c1:
b2:94:79:b2:bf:f1:47:d1:82:1d:f1:90:1e:d9:e9:21:c1:4b:
c4:9e:f1:6f:12:79:43:db:bb:5f:c8:35:b0:d0:26:4f:fb:d0:
87:a4:b6:29:3c:9b:ed:5f:0a:43:28:6e:53:fa:2a:3e:e9:7c:
4b:67:79:ae:d7:49:0e:7c:37:1a:8f:1e:fe:b7:ca:01:a9:8d:
7b:9c:f3:f9:25:93:85:47:1f:6c:80:bb:c9:8a:99:38:ce:3d:
9d:ad:14:6f:43:23:e6:21:6a:32:eb:6a:6c:8d:dd:1b:78:ee:
c9:25:b3:20:c3:3d:59:1b:85:af:ab:7e:87:f7:71:a2:fc:f3:
96:ed:8a:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F3G/0MkHiXUiTU9yYXArMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MmQyNGFkZTM3YTIyMzM5MzI4NDA5ZDc1N2Q0N2Y5Nzk0
M2I3YTAwHhcNMjUwMTMxMTYwMDE3WhcNMjUwMjAxMTYwMDE3WjAzMTEwLwYDVQQD
Eyg1MzNkZjM4MmMyOGRiZTMyZWU0ZjQyN2Y0YjAxZTgwYmQxNjBlNGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlw5iG66KJq7RoLQyglV2NspqdHd
3qj6o2P7fW5I8MYxYV4LZTC6LMwb4fzFl0EJxUUIZDmspj6xLfx0VkpOG0vJmX4F
TLkYRnFZMRYBpIbjOYaj4rymOQVD0gg7FFAkb2AWseU0CzlOYkOnfE7h5MrIqbNb
1ky+83MeovsFFN7EkTYILV8oLXPJu5zD6olqvzGjEsVAG7vHaP/S5O9SFY87q1pq
sR3qbuVTrkqHw1/DnlGhCpoh57tJDZHMOD/ozBmRjOxga6UvdMUj8ZzNkXfF6YQk
C6ExTNMQKDhg86A52wT+xNVE1qwvi/PMILS5o8B3gnI6aQobdQ6kS/5H7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFM984LCjb4y7k9Cf0sB6AvRYOS0MB8GA1UdIwQY
MBaAFEktJK3jeiIzkyhAnXV9R/l5Q7egMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1Mwa3JlTjZJak9US0VDZGRYMUgtWGxEdDZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kOGY4NDUtNjI1MC00ZGY4LTkwYzAt
ZTI0YjU3OWM5OTE0LzEvU1Mwa3JlTjZJak9US0VDZGRYMUgtWGxEdDZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9kOGY4NDUtNjI1MC00ZGY4LTkwYzAtZTI0YjU3OWM5OTE0
LzEvU1Mwa3JlTjZJak9US0VDZGRYMUgtWGxEdDZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV31oaMw4
Oc5YDCjuLbQEhM9tJNpJP4J2Z7taXS1FmL94MqZLzbVtSUhLtTNk2T+srGbr1DLf
9r6Mi8qkT11HC5hBX1VZer45T9rV8gE4j67vIF+8aNjLe/qKvhmvVA+k0QUpLI2A
zckWchYWRCH0WHVOtR3BxHSJ5zbl7UnBspR5sr/xR9GCHfGQHtnpIcFLxJ7xbxJ5
Q9u7X8g1sNAmT/vQh6S2KTyb7V8KQyhuU/oqPul8S2d5rtdJDnw3Go8e/rfKAamN
e5zz+SWThUcfbIC7yYqZOM49na0Ub0Mj5iFqMutqbI3dG3juySWzIMM9WRuFr6t+
h/dxovzzlu2KAg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:10 2025 by rpki-client