Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
File: SFMhasnZIXM78_SEOTo0SVwOKmc.mft (raw, json)
Hash identifier: 7KUBkYYXuNQH8MTcINtcpeyswtfcMthVNObs89BLaRg=
Subject key identifier: A7:AD:07:4A:B9:DF:9F:BC:3A:F2:AC:12:15:FF:66:14:4F:59:97:14
Authority key identifier: 48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
Certificate issuer: /CN=4853216ac9d921733bf3f484393a34495c0e2a67
Certificate serial: 0194BC3BCECFEB991DC3AA939EA5C3E028BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
Manifest number: 0784
Signing time: Fri 31 Jan 2025 12:00:23 +0000
Manifest this update: Fri 31 Jan 2025 12:00:23 +0000
Manifest next update: Sat 01 Feb 2025 12:00:23 +0000
Files and hashes: 1: SFMhasnZIXM78_SEOTo0SVwOKmc.crl (hash: 10VdkAlHR47lDsxqs1l0iSP5SBBE9WGW/hCQcWVna1I=)
2: dS0V9ViDJgbSNtLRJP9YxTSHE4Q.roa (hash: 9TZcKHrnJT3C4ck2R+mimbM1OXSVBfBa9HlRKckf5A8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ce:cf:eb:99:1d:c3:aa:93:9e:a5:c3:e0:28:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853216ac9d921733bf3f484393a34495c0e2a67
Validity
Not Before: Jan 31 12:00:23 2025 GMT
Not After : Feb 1 12:00:23 2025 GMT
Subject: CN=a7ad074ab9df9fbc3af2ac1215ff66144f599714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:e1:59:c9:38:ce:c1:39:6f:8f:23:6a:35:
5e:ff:e9:80:ca:87:39:4b:4a:01:83:5b:98:45:8f:
d5:7f:45:ee:30:f5:50:a8:41:5f:52:f7:90:b5:5f:
67:c2:68:9a:0a:9d:7e:b1:e3:17:fd:23:61:e3:e9:
f2:19:3a:d2:16:14:c0:08:52:f0:b2:05:5e:d1:c0:
83:34:4f:65:bf:3a:00:81:ae:fd:1a:23:c5:35:b8:
f0:e5:e2:61:52:ef:a9:0d:96:0d:1b:eb:9f:25:50:
11:fb:10:82:e3:28:ee:16:ec:92:8b:6a:20:61:5c:
5a:cf:25:cd:49:c8:64:e1:48:65:f2:76:db:12:12:
a0:a0:b9:ab:8b:27:47:bb:34:e6:64:b9:62:f2:52:
1d:a2:ad:39:ae:2b:e5:8e:14:a7:d3:2b:d8:86:a1:
f0:af:85:5c:4a:5d:e6:6c:23:e8:61:f9:dd:d8:d3:
45:db:d4:c9:f1:c8:71:0a:55:5e:0a:09:3c:b6:ac:
92:d7:85:99:3f:53:70:cb:fe:ff:bf:14:53:3e:59:
73:e3:98:74:f6:5f:74:cb:c6:44:7a:68:98:2d:3d:
8e:42:99:78:79:37:84:e7:08:cb:96:ed:80:4c:63:
58:b2:ee:2c:49:3c:25:b4:3d:c1:7e:8b:31:d3:58:
ef:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AD:07:4A:B9:DF:9F:BC:3A:F2:AC:12:15:FF:66:14:4F:59:97:14
X509v3 Authority Key Identifier:
keyid:48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:37:7c:17:36:e9:60:60:7f:f7:1a:4a:59:9d:d3:87:c1:29:
af:11:49:22:1d:9d:ae:67:41:a0:f6:cb:c4:c5:6a:20:d8:ba:
24:84:90:f6:7b:e4:c6:c6:3d:13:9b:62:00:a6:36:64:cd:2f:
22:f1:e1:64:b2:2d:af:d1:dc:54:19:44:95:43:e3:44:6f:28:
fc:7f:cb:cf:0a:2b:f6:f8:05:21:f4:85:d6:4f:85:67:88:7a:
4b:e9:21:85:ec:10:cb:18:17:61:a2:09:f0:79:d8:1f:a9:05:
4c:85:91:5f:ed:12:9f:2c:c6:30:e9:3b:57:c6:05:58:bf:fa:
79:a2:13:4c:38:a7:2b:4b:a6:e3:c8:20:af:9f:32:da:d3:b6:
5a:16:e4:ca:d1:a5:27:7e:6e:56:d7:fc:81:78:14:04:2a:27:
f8:5e:30:48:83:de:c5:01:13:52:4f:e3:d0:fa:0e:91:b9:cf:
ea:7d:a5:76:0e:de:88:ef:80:59:c1:21:fb:3b:c0:8c:fa:a5:
da:45:41:ee:53:e4:1c:9f:fb:01:f3:a2:ab:cc:8d:cf:17:70:
c6:d6:3a:82:51:f1:66:30:20:53:51:de:1f:a0:c2:fa:19:4e:
f7:1a:5d:40:fa:19:3b:38:a3:41:0b:09:11:58:71:ce:87:bd:
23:af:8d:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O87P65kdw6qTnqXD4Ci8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTMyMTZhYzlkOTIxNzMzYmYzZjQ4NDM5M2EzNDQ5NWMw
ZTJhNjcwHhcNMjUwMTMxMTIwMDIzWhcNMjUwMjAxMTIwMDIzWjAzMTEwLwYDVQQD
EyhhN2FkMDc0YWI5ZGY5ZmJjM2FmMmFjMTIxNWZmNjYxNDRmNTk5NzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssXhWck4zsE5b48jajVe/+mAyoc5
S0oBg1uYRY/Vf0XuMPVQqEFfUveQtV9nwmiaCp1+seMX/SNh4+nyGTrSFhTACFLw
sgVe0cCDNE9lvzoAga79GiPFNbjw5eJhUu+pDZYNG+ufJVAR+xCC4yjuFuySi2og
YVxazyXNSchk4Uhl8nbbEhKgoLmriydHuzTmZLli8lIdoq05rivljhSn0yvYhqHw
r4VcSl3mbCPoYfnd2NNF29TJ8chxClVeCgk8tqyS14WZP1Nwy/7/vxRTPllz45h0
9l90y8ZEemiYLT2OQpl4eTeE5wjLlu2ATGNYsu4sSTwltD3Bfosx01jv1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKetB0q535+8OvKsEhX/ZhRPWZcUMB8GA1UdIwQY
MBaAFEhTIWrJ2SFzO/P0hDk6NElcDipnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kZmFkZTktMzI5NC00ZmFiLWI2MDct
MjgyOGM0OGUzNTk5LzEvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9kZmFkZTktMzI5NC00ZmFiLWI2MDctMjgyOGM0OGUzNTk5
LzEvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDd8Fzbp
YGB/9xpKWZ3Th8EprxFJIh2drmdBoPbLxMVqINi6JISQ9nvkxsY9E5tiAKY2ZM0v
IvHhZLItr9HcVBlElUPjRG8o/H/Lzwor9vgFIfSF1k+FZ4h6S+khhewQyxgXYaIJ
8HnYH6kFTIWRX+0SnyzGMOk7V8YFWL/6eaITTDinK0um48ggr58y2tO2WhbkytGl
J35uVtf8gXgUBCon+F4wSIPexQETUk/j0PoOkbnP6n2ldg7eiO+AWcEh+zvAjPql
2kVB7lPkHJ/7AfOiq8yNzxdwxtY6glHxZjAgU1HeH6DC+hlO9xpdQPoZOzijQQsJ
EVhxzoe9I6+NXg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:22 2025 by rpki-client