Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
File: sdgCZnmAlE302iq0sI6dNLIKjRE.mft (raw, json)
Hash identifier: LrgvNHHo+ziYQxHnwf9i/sFbDB6WAgf3KpZd7FdjJsk=
Subject key identifier: A4:7A:DB:22:D1:9F:34:CE:19:15:CD:FD:D6:CF:F6:73:92:22:4D:4A
Authority key identifier: B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
Certificate issuer: /CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Certificate serial: 0194BC3C787DDBC7973159786A5E0C5F620E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
Manifest number: 0463
Signing time: Fri 31 Jan 2025 12:01:06 +0000
Manifest this update: Fri 31 Jan 2025 12:01:06 +0000
Manifest next update: Sat 01 Feb 2025 12:01:06 +0000
Files and hashes: 1: So0J85BPs3UG_C6BWLfnLZ9c_3I.roa (hash: +ubxlITiYsafbFryEurkXW802YUQIUAFsrYygMwxezQ=)
2: sdgCZnmAlE302iq0sI6dNLIKjRE.crl (hash: Qe6b62vrKn5Pd8A/xqCYw5fA6bVCHmnKBNxLyL+KGXc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:78:7d:db:c7:97:31:59:78:6a:5e:0c:5f:62:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Validity
Not Before: Jan 31 12:01:06 2025 GMT
Not After : Feb 1 12:01:06 2025 GMT
Subject: CN=a47adb22d19f34ce1915cdfdd6cff67392224d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:63:b3:57:99:c0:de:e2:68:1a:6b:97:f5:9d:
c7:05:ef:b0:33:1b:cd:d5:b4:94:ad:d1:ee:e2:00:
e0:e1:33:03:eb:f7:7a:e4:08:97:df:fb:4d:87:53:
cd:24:e3:31:d2:b3:ba:38:7d:49:2d:fe:97:27:a2:
78:3b:2c:30:08:b7:8f:7c:aa:ac:ad:4e:ce:7a:76:
73:e6:9e:dd:69:eb:0c:bb:eb:ea:4b:b8:83:62:98:
5f:e4:1e:14:e4:f0:69:2d:c1:d7:79:3c:ae:3a:e2:
cb:9a:1a:0c:07:9e:f4:0c:e8:16:a7:cd:44:aa:f9:
33:e9:71:1a:75:fe:97:70:f5:c9:b0:ed:59:cf:8e:
ab:ca:db:e6:cd:00:7d:f0:cc:98:56:10:3c:ed:58:
61:c0:51:88:ba:f4:89:ef:c2:ac:f3:f2:62:6c:c1:
fa:5e:fd:30:97:3e:70:f2:de:b9:f9:0d:bd:fa:7d:
1d:3c:d7:af:00:7b:18:90:39:f2:75:4b:31:df:fc:
e5:3e:ea:f0:8b:3e:6c:e1:9f:22:eb:98:5c:dd:f8:
a3:5e:a6:fd:69:a2:e5:86:ac:4c:43:85:41:99:6b:
9d:62:c9:7b:6d:53:dd:aa:ca:3b:77:90:66:30:e7:
3d:a1:4d:9f:8b:11:41:ff:71:ec:5f:06:dd:41:0b:
02:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7A:DB:22:D1:9F:34:CE:19:15:CD:FD:D6:CF:F6:73:92:22:4D:4A
X509v3 Authority Key Identifier:
keyid:B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:dd:7e:d3:0e:f6:72:a0:4f:0b:60:0f:dd:22:d9:38:29:0e:
82:4b:a1:30:fb:e1:72:5b:ce:a2:ea:b7:b6:fc:58:ee:09:9f:
59:4e:f1:b6:b7:d1:57:fd:33:8d:01:0e:59:62:86:26:5c:4f:
85:34:0c:e2:2d:52:d5:21:62:3b:02:f3:fa:9a:29:35:8d:85:
1b:d8:ea:89:17:e3:5e:f9:40:5a:b2:e3:6f:8c:34:a7:de:0c:
1f:27:8b:7e:0b:85:bf:d3:30:c5:26:3f:35:3f:df:7e:b0:95:
44:bf:22:09:af:9e:cd:82:3d:22:93:0e:08:34:d0:a3:6a:3e:
16:34:da:73:c3:8f:2a:b0:e5:11:71:ea:62:db:86:77:72:c3:
e2:c5:18:35:bf:3c:f2:80:26:7e:26:32:51:ae:ed:38:6e:db:
4a:16:99:af:52:ef:db:db:03:b3:28:95:7b:b1:a9:c7:0a:62:
ea:c7:0e:69:9f:69:66:23:cc:ec:9b:18:93:5d:a8:a3:21:b3:
0c:4c:85:df:00:41:54:a1:6e:eb:03:9c:45:5a:93:9a:cf:e6:
d0:f2:e8:71:51:4d:5e:0d:6e:27:39:c0:3e:a2:18:c9:96:74:
dd:bb:c6:e8:1e:28:ea:73:3e:9a:10:42:d8:8f:4f:16:1d:9e:
1b:6d:bd:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PHh928eXMVl4al4MX2IOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZDgwMjY2Nzk4MDk0NGRmNGRhMmFiNGIwOGU5ZDM0YjIw
YThkMTEwHhcNMjUwMTMxMTIwMTA2WhcNMjUwMjAxMTIwMTA2WjAzMTEwLwYDVQQD
EyhhNDdhZGIyMmQxOWYzNGNlMTkxNWNkZmRkNmNmZjY3MzkyMjI0ZDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWOzV5nA3uJoGmuX9Z3HBe+wMxvN
1bSUrdHu4gDg4TMD6/d65AiX3/tNh1PNJOMx0rO6OH1JLf6XJ6J4OywwCLePfKqs
rU7OenZz5p7daesMu+vqS7iDYphf5B4U5PBpLcHXeTyuOuLLmhoMB570DOgWp81E
qvkz6XEadf6XcPXJsO1Zz46rytvmzQB98MyYVhA87VhhwFGIuvSJ78Ks8/JibMH6
Xv0wlz5w8t65+Q29+n0dPNevAHsYkDnydUsx3/zlPurwiz5s4Z8i65hc3fijXqb9
aaLlhqxMQ4VBmWudYsl7bVPdqso7d5BmMOc9oU2fixFB/3HsXwbdQQsCtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKR62yLRnzTOGRXN/dbP9nOSIk1KMB8GA1UdIwQY
MBaAFLHYAmZ5gJRN9NoqtLCOnTSyCo0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2RnQ1pubUFsRTMwMmlxMHNJNmROTElLalJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mMTUzZTctMDdkOS00YjgxLWFhZWQt
Y2JlYzQzZmQ5MmExLzEvc2RnQ1pubUFsRTMwMmlxMHNJNmROTElLalJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mMTUzZTctMDdkOS00YjgxLWFhZWQtY2JlYzQzZmQ5MmEx
LzEvc2RnQ1pubUFsRTMwMmlxMHNJNmROTElLalJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMt1+0w72
cqBPC2AP3SLZOCkOgkuhMPvhclvOouq3tvxY7gmfWU7xtrfRV/0zjQEOWWKGJlxP
hTQM4i1S1SFiOwLz+popNY2FG9jqiRfjXvlAWrLjb4w0p94MHyeLfguFv9MwxSY/
NT/ffrCVRL8iCa+ezYI9IpMOCDTQo2o+FjTac8OPKrDlEXHqYtuGd3LD4sUYNb88
8oAmfiYyUa7tOG7bShaZr1Lv29sDsyiVe7Gpxwpi6scOaZ9pZiPM7JsYk12ooyGz
DEyF3wBBVKFu6wOcRVqTms/m0PLocVFNXg1uJznAPqIYyZZ03bvG6B4o6nM+mhBC
2I9PFh2eG229yQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:03 2025 by rpki-client