Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
File: sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft (raw, json)
Hash identifier: XiBba7fYGpezeQ4eJqESjT0fGOtmQgcMVDUZk8MBrME=
Subject key identifier: 94:02:8D:BE:93:95:F7:A8:36:B7:62:98:76:4B:A3:D6:CA:AD:C3:CD
Authority key identifier: B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
Certificate issuer: /CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Certificate serial: 0194BBCDD1EE7BB2BDAAEC0DADB1B18A243E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
Manifest number: 07BB
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: YijLZfZ1VVcQMfbO2kW4jsYTug8.roa (hash: f055fbJfO/jOl/pVZwNG+0XakEEdz2iyjouPpXHwKII=)
2: sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl (hash: 3aR61/4/DivI5HP7FfMBnlBh0eSFZtgVJHiDbmH/Uwc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d1:ee:7b:b2:bd:aa:ec:0d:ad:b1:b1:8a:24:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=94028dbe9395f7a836b76298764ba3d6caadc3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:8b:6d:88:ac:17:6d:7c:59:89:42:57:25:
aa:7d:26:86:e1:de:bb:36:0a:0a:94:98:ad:81:fd:
de:a7:f4:2d:28:29:59:17:2d:f9:a4:f2:e0:d2:58:
1d:4d:e7:cf:00:df:5a:b3:e9:07:f7:cf:69:b5:93:
a2:c6:c6:0f:8a:a0:ee:a6:41:17:58:b8:88:18:c1:
11:27:8f:d0:d0:b4:b4:e9:e5:15:72:70:2c:9e:4e:
e8:0e:fc:d4:bf:d3:e5:e7:55:ee:7f:13:47:99:d5:
77:53:98:02:73:5f:9c:67:e4:a3:6c:77:d5:90:b1:
b2:07:aa:10:8e:c3:0d:f7:24:ef:ca:48:d7:16:13:
5b:87:b9:47:48:5d:bd:57:5e:e6:6c:5a:6b:93:5e:
26:85:e2:a2:cc:b4:7e:f3:74:0e:a7:4f:fa:06:64:
81:f1:4d:6f:22:a8:3b:19:02:40:d7:bc:bf:3f:c9:
56:9b:2d:65:37:7e:c1:9a:bc:1b:3a:b5:c4:4c:0f:
0d:65:df:a5:98:8c:f5:ea:e9:5f:0c:6a:eb:3e:60:
cc:dc:dc:2d:55:f3:14:94:ff:72:72:a7:26:d1:54:
7d:79:20:17:41:6a:9d:6f:19:99:ba:ac:44:db:e3:
e5:3a:3d:f8:a2:45:8f:35:a5:7b:e9:2c:56:e2:f6:
e1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:02:8D:BE:93:95:F7:A8:36:B7:62:98:76:4B:A3:D6:CA:AD:C3:CD
X509v3 Authority Key Identifier:
keyid:B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ce:d5:a3:e4:85:ca:c3:d3:7d:0e:8c:c7:70:29:62:0e:cd:
fa:b1:0b:a2:d5:87:e2:73:84:d5:3f:67:c0:a0:fe:6d:20:12:
f6:c3:f0:2f:98:4a:24:0a:d0:23:c0:ef:40:51:75:ad:9e:25:
1f:7b:18:7b:a2:80:84:c4:6b:c6:38:8b:30:e2:f3:b2:09:9a:
bb:32:f3:a4:55:1d:c4:7b:af:77:3f:b4:ec:2f:00:74:a3:08:
31:1a:d6:33:8b:43:6f:66:aa:14:20:33:1c:bf:98:fe:b2:3b:
5f:05:90:21:dd:b3:0c:5a:62:3e:61:32:0f:c1:bc:0a:67:89:
bb:09:ba:f2:db:40:af:fd:a6:cf:6e:1b:46:9c:ab:cb:48:5d:
4d:41:d9:e9:82:19:2b:0b:eb:c9:f2:eb:54:7e:2c:0f:8c:0c:
58:53:39:b0:58:74:b6:ff:95:b0:bf:57:aa:b8:f5:c5:1e:ef:
61:7a:7b:39:82:2f:d0:05:93:a1:04:35:eb:1f:5b:42:70:db:
c3:d5:13:31:3e:c5:42:33:db:68:0a:3a:82:54:cd:86:55:c8:
4f:60:7a:94:9d:2a:c0:fc:a4:74:de:59:89:84:6b:a3:a4:61:
33:67:8b:d0:19:45:94:b7:ed:aa:3d:f4:9d:c3:76:ee:31:55:
47:e4:a2:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zdHue7K9quwNrbGxiiQ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNjFiZDNjY2EzZDMzNjQ1YTI3NmUwZjMyMjRmZjg5ZWVl
NDQ4NTcwHhcNMjUwMTMxMTAwMDE1WhcNMjUwMjAxMTAwMDE1WjAzMTEwLwYDVQQD
Eyg5NDAyOGRiZTkzOTVmN2E4MzZiNzYyOTg3NjRiYTNkNmNhYWRjM2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxueLbYisF218WYlCVyWqfSaG4d67
NgoKlJitgf3ep/QtKClZFy35pPLg0lgdTefPAN9as+kH989ptZOixsYPiqDupkEX
WLiIGMERJ4/Q0LS06eUVcnAsnk7oDvzUv9Pl51XufxNHmdV3U5gCc1+cZ+SjbHfV
kLGyB6oQjsMN9yTvykjXFhNbh7lHSF29V17mbFprk14mheKizLR+83QOp0/6BmSB
8U1vIqg7GQJA17y/P8lWmy1lN37BmrwbOrXETA8NZd+lmIz16ulfDGrrPmDM3Nwt
VfMUlP9ycqcm0VR9eSAXQWqdbxmZuqxE2+PlOj34okWPNaV76SxW4vbhpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQCjb6TlfeoNrdimHZLo9bKrcPNMB8GA1UdIwQY
MBaAFLBhvTzKPTNkWiduDzIk/4nu5EhXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NTc1MzMtMTFlYy00ODRiLWJlNmEt
MzJmZGEzMTE4NmVmLzEvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82NTc1MzMtMTFlYy00ODRiLWJlNmEtMzJmZGEzMTE4NmVm
LzEvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL87Vo+SF
ysPTfQ6Mx3ApYg7N+rELotWH4nOE1T9nwKD+bSAS9sPwL5hKJArQI8DvQFF1rZ4l
H3sYe6KAhMRrxjiLMOLzsgmauzLzpFUdxHuvdz+07C8AdKMIMRrWM4tDb2aqFCAz
HL+Y/rI7XwWQId2zDFpiPmEyD8G8CmeJuwm68ttAr/2mz24bRpyry0hdTUHZ6YIZ
KwvryfLrVH4sD4wMWFM5sFh0tv+VsL9Xqrj1xR7vYXp7OYIv0AWToQQ16x9bQnDb
w9UTMT7FQjPbaAo6glTNhlXIT2B6lJ0qwPykdN5ZiYRro6RhM2eL0BlFlLftqj30
ncN27jFVR+Sitg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:47:07 2025 by rpki-client