Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
File: SFGWc90KnPV4lVIK83wqgYPc4Wg.mft (raw, json)
Hash identifier: 1JvJHhPa1y1o1iPu3ihz6T4WWYcJbazWTo7AJBHdngs=
Subject key identifier: 6F:DD:B3:A3:7F:76:50:78:A2:48:01:DC:C4:53:35:CA:67:CB:D2:B0
Authority key identifier: 48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
Certificate issuer: /CN=48519673dd0a9cf57895520af37c2a8183dce168
Certificate serial: 0194BBCEFBC20770A422DD06B0D4B8525C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
Manifest number: 0F1F
Signing time: Fri 31 Jan 2025 10:01:31 +0000
Manifest this update: Fri 31 Jan 2025 10:01:31 +0000
Manifest next update: Sat 01 Feb 2025 10:01:31 +0000
Files and hashes: 1: N_mB8DyGTMyRNtWdzOHezqUOwxA.roa (hash: 0iM1AEZNlQrcAYLQC9NYhgIr9GaQK1NMxQpbyZpHQKI=)
2: SFGWc90KnPV4lVIK83wqgYPc4Wg.crl (hash: 0OyUw1uqvjPMrUDZ0M6taH4ety12lDCHcecu4Qr+3U8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fb:c2:07:70:a4:22:dd:06:b0:d4:b8:52:5c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48519673dd0a9cf57895520af37c2a8183dce168
Validity
Not Before: Jan 31 10:01:31 2025 GMT
Not After : Feb 1 10:01:31 2025 GMT
Subject: CN=6fddb3a37f765078a24801dcc45335ca67cbd2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f1:1b:d1:63:26:f4:6b:90:77:2f:1a:b1:0f:
59:85:6e:34:39:58:2f:89:c6:68:d8:ee:85:2b:7d:
a1:f9:ec:ee:63:1a:6f:e2:0c:e9:64:70:1a:02:39:
ae:e2:ae:be:31:49:19:2f:22:a6:5e:1a:9f:93:17:
9e:28:b9:2a:18:50:90:9f:b9:2a:ce:ce:9e:3d:d8:
e2:ac:fc:5e:df:62:83:47:e1:85:6b:a8:50:1e:05:
03:5e:5a:39:8b:ab:63:ef:41:76:78:ac:11:57:74:
6b:5c:99:f8:4f:c7:dd:18:49:0c:fb:1e:35:17:46:
94:e3:e4:3c:39:bb:6f:11:4a:86:9a:2d:3f:65:f8:
8b:e6:42:d9:7e:3d:26:4c:ea:a0:56:a6:89:54:e2:
73:17:81:7f:85:bd:a0:4c:02:85:f7:fb:94:a1:c6:
9a:f1:f3:bb:d0:90:82:2a:fa:38:5d:5b:f0:14:6a:
23:61:b9:a4:9a:c3:97:ce:a3:31:92:75:2f:a4:30:
e4:53:a9:74:f2:7b:10:6a:08:65:c9:3b:fb:c7:e3:
75:75:b4:6d:80:e8:7b:3e:86:92:7f:32:6c:b2:cf:
3a:5a:1c:25:14:51:1c:95:3b:7f:8c:b5:30:74:81:
84:5c:f0:be:48:8e:12:f9:22:09:3e:cc:a2:81:7d:
51:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DD:B3:A3:7F:76:50:78:A2:48:01:DC:C4:53:35:CA:67:CB:D2:B0
X509v3 Authority Key Identifier:
keyid:48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ee:37:27:0e:f7:22:f3:e5:fc:16:f2:d4:a4:aa:0a:69:db:
21:63:fc:d7:78:49:30:be:0d:50:11:50:94:dc:85:33:28:22:
40:2d:4e:75:36:98:93:f6:13:23:fb:70:94:c1:cc:5b:ec:60:
61:e6:60:02:ad:d8:c4:e7:00:f0:35:c8:bc:27:92:25:2b:5f:
25:76:c5:8f:05:c2:de:90:85:bb:5e:f1:f7:e1:47:da:63:e7:
6a:28:67:ea:da:ea:d2:66:42:5f:50:e1:d1:19:40:61:31:35:
5e:b0:91:7f:3f:39:bd:48:91:40:ab:bf:f3:1d:76:19:d9:42:
18:e3:5c:71:19:d6:20:cb:ae:5b:31:66:55:e4:75:2b:04:a5:
d5:82:f3:e8:43:05:2c:47:59:a6:28:5a:f5:b6:75:21:62:22:
7e:24:82:5f:fa:b5:08:43:7a:da:80:c1:d2:80:c1:20:79:71:
f4:39:c3:23:00:6e:04:23:88:11:c7:5d:e6:47:0c:42:1f:b5:
36:18:65:fe:b7:dd:e5:a1:4e:30:81:f1:70:b8:6d:46:67:aa:
99:71:9b:6e:4a:05:dd:26:b2:f8:3c:5f:a4:7c:7c:8b:07:0d:
8e:b6:72:84:2e:82:9e:ce:5f:50:60:77:b1:be:17:37:3b:02:
3a:40:94:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zvvCB3CkIt0GsNS4Ulw8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTE5NjczZGQwYTljZjU3ODk1NTIwYWYzN2MyYTgxODNk
Y2UxNjgwHhcNMjUwMTMxMTAwMTMxWhcNMjUwMjAxMTAwMTMxWjAzMTEwLwYDVQQD
Eyg2ZmRkYjNhMzdmNzY1MDc4YTI0ODAxZGNjNDUzMzVjYTY3Y2JkMmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfEb0WMm9GuQdy8asQ9ZhW40OVgv
icZo2O6FK32h+ezuYxpv4gzpZHAaAjmu4q6+MUkZLyKmXhqfkxeeKLkqGFCQn7kq
zs6ePdjirPxe32KDR+GFa6hQHgUDXlo5i6tj70F2eKwRV3RrXJn4T8fdGEkM+x41
F0aU4+Q8ObtvEUqGmi0/ZfiL5kLZfj0mTOqgVqaJVOJzF4F/hb2gTAKF9/uUocaa
8fO70JCCKvo4XVvwFGojYbmkmsOXzqMxknUvpDDkU6l08nsQaghlyTv7x+N1dbRt
gOh7PoaSfzJsss86WhwlFFEclTt/jLUwdIGEXPC+SI4S+SIJPsyigX1RqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/ds6N/dlB4okgB3MRTNcpny9KwMB8GA1UdIwQY
MBaAFEhRlnPdCpz1eJVSCvN8KoGD3OFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8zYmQ1OWEtMmQwYy00MDkzLTkxM2Et
ZmUzNmNlZGE2MzE2LzEvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8zYmQ1OWEtMmQwYy00MDkzLTkxM2EtZmUzNmNlZGE2MzE2
LzEvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABe43Jw73
IvPl/Bby1KSqCmnbIWP813hJML4NUBFQlNyFMygiQC1OdTaYk/YTI/twlMHMW+xg
YeZgAq3YxOcA8DXIvCeSJStfJXbFjwXC3pCFu17x9+FH2mPnaihn6trq0mZCX1Dh
0RlAYTE1XrCRfz85vUiRQKu/8x12GdlCGONccRnWIMuuWzFmVeR1KwSl1YLz6EMF
LEdZpiha9bZ1IWIifiSCX/q1CEN62oDB0oDBIHlx9DnDIwBuBCOIEcdd5kcMQh+1
Nhhl/rfd5aFOMIHxcLhtRmeqmXGbbkoF3Say+DxfpHx8iwcNjrZyhC6Cns5fUGB3
sb4XNzsCOkCUIQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:05 2025 by rpki-client