Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
File: _SxsGlV_WItkfheRGmMA40LGYes.mft (raw, json)
Hash identifier: 8+5lzyDOxYpuPW1G7+L9r0qvDyuuyR1mM0FqQMQ8SoY=
Subject key identifier: 84:75:DA:A8:E8:81:3F:26:A8:CD:4D:C3:5B:DA:6B:29:41:D4:EE:6D
Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
Certificate issuer: /CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Certificate serial: 0194BC3BC4F0C285D1B819A0217924C5061E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
Manifest number: 0B5E
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: 9mLiZaXlrMh-SLMVWKWdzKIZreg.roa (hash: JOVJ8r+m2mKwk5/18fVmvxGEIuiFVBEZYaB5XFvwZO8=)
2: _SxsGlV_WItkfheRGmMA40LGYes.crl (hash: rRSe2Tz/lM8IMscxwe0RPtFNFMZZj416FCYH7x/GCaM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c4:f0:c2:85:d1:b8:19:a0:21:79:24:c5:06:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=8475daa8e8813f26a8cd4dc35bda6b2941d4ee6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7b:16:65:09:20:cb:05:db:8f:68:e8:d3:25:
6e:6e:0e:a3:58:79:4e:10:2d:c0:ea:3f:38:46:58:
dd:46:30:3b:16:6a:ef:da:b4:53:af:f9:cc:02:02:
ac:11:26:e4:ca:f7:12:f9:2b:a2:3f:16:13:48:f1:
9c:89:3a:0b:15:c3:3d:32:c8:bc:24:aa:28:99:a3:
e2:5a:5c:29:7d:26:6c:97:a4:c6:3b:20:f0:60:92:
5b:b8:1b:3c:7a:af:57:3c:5c:d0:29:bc:29:b5:79:
94:0a:81:b8:c6:cc:f7:a1:7b:c5:a6:1f:ff:b0:47:
0c:13:2e:e8:64:65:73:8a:b1:62:4d:cf:29:84:0f:
1c:a2:0f:e5:97:4e:83:f1:59:8f:48:8c:27:ad:88:
c5:fd:7e:76:6a:d1:6a:5e:22:13:a5:4a:6f:07:a7:
73:82:8d:cc:50:52:75:e5:63:c6:80:ce:af:e5:15:
4c:de:c4:5c:d3:2f:91:a2:04:b9:e1:65:97:ed:69:
2c:c1:03:5d:ca:13:02:a1:cb:81:c8:21:ad:06:ef:
d9:0e:7c:02:9e:82:d1:22:89:31:22:12:25:35:a1:
37:54:7e:f4:8a:5d:cc:38:d5:5e:f7:dd:02:b3:32:
18:ed:73:73:c3:cc:4d:eb:8d:46:d0:52:c1:9f:05:
35:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:75:DA:A8:E8:81:3F:26:A8:CD:4D:C3:5B:DA:6B:29:41:D4:EE:6D
X509v3 Authority Key Identifier:
keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:00:1a:45:bd:c8:c6:8e:cd:80:92:0b:fe:26:36:60:c4:b1:
bb:50:44:66:61:7d:a1:45:64:90:2d:c2:52:16:dc:bc:08:ad:
ad:35:1c:e9:23:be:a4:9b:8c:2d:4e:33:08:4c:58:d2:b2:44:
67:cd:5f:bc:f0:fb:09:c8:26:23:0c:92:e5:0a:4d:76:75:b2:
84:f9:bf:33:dd:1b:c1:39:4d:7a:db:ae:12:cd:64:bc:85:05:
66:bf:a0:54:22:04:32:6e:13:b6:c7:f5:a5:dd:34:92:c5:39:
86:e7:d9:b1:17:28:8a:8a:25:33:2d:28:a2:88:d5:a0:ca:66:
db:e3:26:84:d5:34:2c:b6:0f:e8:d9:a1:a5:bb:23:e9:5c:42:
b9:b4:29:32:a3:e7:a8:41:33:96:2a:8a:7b:d6:84:20:de:3d:
52:ad:80:f1:57:22:25:de:1b:e6:8d:0d:7f:b9:e0:85:1c:48:
59:81:28:98:87:98:55:33:c4:29:f7:64:07:ed:b7:3e:d6:f2:
76:88:98:4b:23:8b:d0:9e:85:b9:ad:06:29:c5:bc:c3:89:2f:
cd:0a:a1:75:11:8c:cd:70:0a:34:69:70:67:ea:b2:6d:27:e5:
b8:a5:ee:6f:26:96:7a:52:2a:10:dc:15:e7:46:21:76:9e:41:
e4:d1:cb:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O8TwwoXRuBmgIXkkxQYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMmM2YzFhNTU3ZjU4OGI2NDdlMTc5MTFhNjMwMGUzNDJj
NjYxZWIwHhcNMjUwMTMxMTIwMDIxWhcNMjUwMjAxMTIwMDIxWjAzMTEwLwYDVQQD
Eyg4NDc1ZGFhOGU4ODEzZjI2YThjZDRkYzM1YmRhNmIyOTQxZDRlZTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXsWZQkgywXbj2jo0yVubg6jWHlO
EC3A6j84RljdRjA7Fmrv2rRTr/nMAgKsESbkyvcS+SuiPxYTSPGciToLFcM9Msi8
JKoomaPiWlwpfSZsl6TGOyDwYJJbuBs8eq9XPFzQKbwptXmUCoG4xsz3oXvFph//
sEcMEy7oZGVzirFiTc8phA8cog/ll06D8VmPSIwnrYjF/X52atFqXiITpUpvB6dz
go3MUFJ15WPGgM6v5RVM3sRc0y+RogS54WWX7WkswQNdyhMCocuByCGtBu/ZDnwC
noLRIokxIhIlNaE3VH70il3MONVe990CszIY7XNzw8xN641G0FLBnwU1DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIR12qjogT8mqM1Nw1vaaylB1O5tMB8GA1UdIwQY
MBaAFP0sbBpVf1iLZH4XkRpjAONCxmHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82YTNmNmUtMmQ0My00ZWM2LWE3ZWMt
ZTEzZGViNGFjN2I3LzEvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82YTNmNmUtMmQ0My00ZWM2LWE3ZWMtZTEzZGViNGFjN2I3
LzEvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgAaRb3I
xo7NgJIL/iY2YMSxu1BEZmF9oUVkkC3CUhbcvAitrTUc6SO+pJuMLU4zCExY0rJE
Z81fvPD7CcgmIwyS5QpNdnWyhPm/M90bwTlNetuuEs1kvIUFZr+gVCIEMm4Ttsf1
pd00ksU5hufZsRcoioolMy0ooojVoMpm2+MmhNU0LLYP6Nmhpbsj6VxCubQpMqPn
qEEzliqKe9aEIN49Uq2A8VciJd4b5o0Nf7nghRxIWYEomIeYVTPEKfdkB+23Ptby
doiYSyOL0J6Fua0GKcW8w4kvzQqhdRGMzXAKNGlwZ+qybSfluKXubyaWelIqENwV
50Yhdp5B5NHLig==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:06 2025 by rpki-client